1331 matches found
CVE-2019-3750: Uncontrolled Search Path Element
Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...
temp-solf-lmf (>=0.0.49, <=0.1.17) potentially affected by unknown CVE via vant (2.1.7)
vant NPM version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on vant and may be impacted: - temp-solf-lmf =0.0.49, =0.1.17 Source cves: unknown CVE Source advisory: OSV:GHSA-9XR8-8HMC-389F...
CVE-2014-5255
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...
PT-2019-6422 · Plan 9 +1 · Rc +1
Name of the Vulnerable Software and Affected Versions: rc versions prior to 1.7.1-5 Description: The issue is related to insufficient input validation in the Temp File Handler component of the Plan 9 rc command shell. This can be exploited by a remote attacker to create arbitrary temporary files...
ALPINE-CVE-2019-3466
The pgctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation...
CVE-2005-2352
I race condition in Temp files was found in gs-gpl before 8.56 addons scripts...
CVE-2005-2352
I race condition in Temp files was found in gs-gpl before 8.56 addons scripts...
CVE-2005-2352
The CVE-2005-2352 entry maps to gs-gpl prior to version 8.56, where a race condition affects temporary file handling. According to CNVD/CVE context, the vulnerability arises from competing conditions during concurrent access to shared resources when the software operates in a networked environmen...
CVE-2005-2352
I race condition in Temp files was found in gs-gpl before 8.56 addons scripts...
CVE-2005-2352: Concurrent Execution using Shared Resource with Improper Synchronization
I race condition in Temp files was found in gs-gpl before 8.56 addons scripts...
CVE-2019-1629
A vulnerability in the configuration import utility of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attack...
CVE-2018-4048
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...
Privilege escalation
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...
CVE-2018-4048
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...
CVE-2018-4048: Exposure of Resource to Wrong Sphere
An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...
CVE-2019-11644
In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before 14.10, F-Secure PSB Workstation Security before 12.01, and F-Secure Computer Protection Standard and...
CVE-2019-11644: Uncontrolled Search Path Element
In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before 14.10, F-Secure PSB Workstation Security before 12.01, and F-Secure Computer Protection Standard and...
Entek XM-362 Isolated Temp. Module Specialty I/O
Binary data 754841.prm...