PT-2019-10778

Name of the Vulnerable Software and Affected Versions GOG Galaxy version 1.2.48.36 Description A local privilege elevation issue exists in the file system permissions of the Temp directory. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this issue and execute...

CVE-2018-4048: Exposure of Resource to Wrong Sphere

An exploitable local privilege elevation vulnerability exists in the file system permissions of the Temp directory in GOG Galaxy 1.2.48.36 Windows 64-bit Installer. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with...

CVE-2019-11644

In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before 14.10, F-Secure PSB Workstation Security before 12.01, and F-Secure Computer Protection Standard and...

CVE-2019-11644: Uncontrolled Search Path Element

In the F-Secure installer in F-Secure SAFE for Windows before 17.6, F-Secure Internet Security before 17.6, F-Secure Anti-Virus before 17.6, F-Secure Client Security Standard and Premium before 14.10, F-Secure PSB Workstation Security before 12.01, and F-Secure Computer Protection Standard and...

Siemens XC206 Switch Detection

Binary data 762271.prm...

Entek XM-362 Isolated Temp. Module Specialty I/O

Binary data 754841.prm...

Entek XM-361 Universal Temp. Module Specialty I/O

Binary data 754839.prm...

CVE-2019-11616

doorGets 7.0 has a sensitive information disclosure vulnerability in /setup/temp/admin.php and /setup/temp/database.php. A remote unauthenticated attacker could exploit this vulnerability to obtain the administrator password...

CVE-2019-11616

CVE-2019-11616 affects doorGets 7.0. The vulnerability is a sensitive information disclosure in /setup/temp/admin.php and /setup/temp/database.php, allowing a remote unauthenticated attacker to obtain the administrator password. Affected software: doorGets 7.0 (web CMS). Root cause and vector det...

PT-2019-12423

Name of the Vulnerable Software and Affected Versions doorGets version 7.0 Description The issue allows a remote unauthenticated attacker to disclose sensitive information. Specifically, the vulnerability is present in the /setup/temp/admin.php and /setup/temp/database.php API endpoints, which...

DEBIAN-CVE-2019-11596

In memcached before 1.5.14, a NULL pointer dereference was found in the "lru mode" and "lru tempttl" commands. This causes a denial of service when parsing crafted lru command messages in processlrucommand in memcached.c...

CVE-2019-9976

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users...

CVE-2019-9976

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users...

PT-2019-19971

Name of the Vulnerable Software and Affected Versions DASAN H660RM firmware 1.03-0022 Description The issue affects the Boa server configuration, allowing logged-in users to read the credentials of administration web interface users due to the logging of POST data to the /tmp/boa-temp file...

CVE-2019-9976: Insertion of Sensitive Information into Log File

The Boa server configuration on DASAN H660RM devices with firmware 1.03-0022 logs POST data to the /tmp/boa-temp file, which allows logged-in users to read the credentials of administration web interface users...

GOG Galaxy updater temp directory insecure file permissions local privilege elevation vulnerability

Summary An exploitable local privilege elevation vulnerability exists in the file system permissions of GOG Galaxy’s Temp directory. An attacker can overwrite executables of the Desktop Galaxy Updater to exploit this vulnerability and execute arbitrary code with SYSTEM privileges. Tested Versions...

CVE-2018-17955

In yast2-multipath before version 4.1.1 a static temporary filename allows local attackers to overwrite files on systems without symlink protection...

CVE-2018-18496

When the RSS Feed preview about:feeds page is framed within another page, it can be used in concert with scripted content for a clickjacking attack that confuses users into downloading and executing an executable file from a temporary directory. Note: This issue only affects Windows operating...

Sublime Text Privilege Vulnerability

Sublime Text is a cross-platform, extensible text editor. A power lifting vulnerability exists in Sublime Text 3 32-bit Windows platform version 3.1.1 build 3176, which can be exploited by an attacker by placing a malicious pi-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1...

CVE-2019-9116

DLL hijacking is possible in Sublime Text 3 version 3.1.1 build 3176 on 32-bit Windows platforms because a Trojan horse api-ms-win-core-fibers-l1-1-1.dll or api-ms-win-core-localization-l1-2-1.dll file may be loaded if a victim uses sublimetext.exe to open a .txt file within an attacker's...