PT-2019-16690

Name of the Vulnerable Software and Affected Versions Dell Command Update versions prior to 3.1 Description The issue allows a local authenticated malicious user with low privileges to potentially delete arbitrary files by creating a symlink from the "TempICProgressDell InventoryCollector...

CVE-2019-3750: Uncontrolled Search Path Element

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the "Temp\IC\ICDebugLog.txt" to any targeted file...

CVE-2019-3749: Uncontrolled Search Path Element

Dell Command Update versions prior to 3.1 contain an Arbitrary File Deletion Vulnerability. A local authenticated malicious user with low privileges potentially could exploit this vulnerability to delete arbitrary files by creating a symlink from the...

temp-solf-lmf (>=0.0.49, <=0.1.17) potentially affected by unknown CVE via vant (2.1.7)

vant NPM version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on vant and may be impacted: - temp-solf-lmf =0.0.49, =0.1.17 Source cves: unknown CVE Source advisory: OSV:GHSA-9XR8-8HMC-389F...

CVE-2014-5255

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...

PT-2019-6422 · Plan 9 +1 · Rc +1

Name of the Vulnerable Software and Affected Versions: rc versions prior to 1.7.1-5 Description: The issue is related to insufficient input validation in the Temp File Handler component of the Plan 9 rc command shell. This can be exploited by a remote attacker to create arbitrary temporary files...

ALPINE-CVE-2019-3466

The pgctlcluster script in postgresql-common in versions prior to 210 didn't drop privileges when creating socket/statistics temporary directories, which could result in local privilege escalation...

CVE-2005-2352

I race condition in Temp files was found in gs-gpl before 8.56 addons scripts...

CVE-2005-2352

I race condition in Temp files was found in gs-gpl before 8.56 addons scripts...

CVE-2005-2352

I race condition in Temp files was found in gs-gpl before 8.56 addons scripts...

CVE-2005-2352

The CVE-2005-2352 entry maps to gs-gpl prior to version 8.56, where a race condition affects temporary file handling. According to CNVD/CVE context, the vulnerability arises from competing conditions during concurrent access to shared resources when the software operates in a networked environmen...

CVE-2005-2352: Concurrent Execution using Shared Resource with Improper Synchronization

I race condition in Temp files was found in gs-gpl before 8.56 addons scripts...

CVE-2019-1629

A vulnerability in the configuration import utility of Cisco Integrated Management Controller IMC could allow an unauthenticated, remote attacker to have write access and upload arbitrary data to the filesystem. The vulnerability is due to a failure to delete temporarily uploaded files. An attack...

CVE-2018-4048

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...

Privilege escalation

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...

CVE-2018-4048

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...

PT-2019-10778

Name of the Vulnerable Software and Affected Versions GOG Galaxy version 1.2.48.36 Description A local privilege elevation issue exists in the file system permissions of the Temp directory. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this issue and execute...

CVE-2018-4048: Exposure of Resource to Wrong Sphere

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...

CVE-2019-11644

In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before 14.10, F-Secure PSB Workstation Security before 12.01, and F-Secure Computer Protection Standard and...

CVE-2019-11644: Uncontrolled Search Path Element

In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before 14.10, F-Secure PSB Workstation Security before 12.01, and F-Secure Computer Protection Standard and...