3589 matches found
PYSEC-2022-72
Tensorflow is an Open Source Machine Learning Framework. In multiple places, TensorFlow uses tempfile.mktemp to create temporary files. While this is acceptable in testing, in utilities and libraries it is dangerous as a different process can create the file between the check for the filename in...
Apache Gobblin 信息泄露漏洞
Apache Gobblin is a distributed data integration framework from the U.S. Apache Apache Foundation. It is used to simplify common aspects of big data integration. A security vulnerability exists in Apache Gobblin, which stems from a Hadoop token being written to a temporary file that is visible to...
GLSA-202107-03 : libqb: Insecure temporary file
The remote host is affected by the vulnerability described in GLSA-202107-03 libqb: Insecure temporary file It was discovered that libqb used predictable filenames under /dev/shm and /tmp without OEXCL. Impact : A local attacker could perform symlink attacks to overwrite arbitrary files with the...
Sysaid Technologies SysAid 安全漏洞
Sysaid Technologies SysAid is an IT service management solution from the Israeli company SysAid Technologies Sysaid Technologies.A security vulnerability exists in SysAid ITIL, which could be exploited by an attacker to copy arbitrary files on the server file system to the Web root via the HTTP...
Insecure Temporary File in mlflow/mlflow
Description mlflow package is using the deprecated function tempfile.mktemp which is not secure. Because a different process may create a file with this name in the time between the call to mktemp and the subsequent attempt to create the file by the first process. Impact Availability will get...
Insecure Temporary File in horovod/horovod
Description horovod package is using the deprecated function tempfile.mktemp which is not secure. Because a different process may create a file with this name in the time between the call to mktemp and the subsequent attempt to create the file by the first process. Impact Availability will get...
CVE-2021-42711
Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair operation...
CVE-2021-42711
CVE-2021-42711 affects Barracuda Network Access Client before version 5.2.2. It describes the creation of a temporary file in a directory with insecure permissions, and this file is executed with SYSTEM privileges when an unprivileged user performs a repair operation. The vulnerability’s impact i...
CVE-2021-42711
Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair operation...
CVE-2021-42254
BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions...
CVE-2021-42254
BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions...
CVE-2021-42254
BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions...
Directory traversal
BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions...
CVE-2021-42254
BeyondTrust Privilege Management prior to version 21.6 creates a Temporary File in a Directory with Insecure Permissions...
CVE-2021-42254
BeyondTrust Privilege Management prior to version 21.6 exposes a vulnerability where a temporary file is created in a directory with insecure permissions. This is a LOCAL, low-attack complexity issue with high impact (confidentiality, integrity, and availability). Remediation: upgrade to version ...
PT-2021-5422
Name of the Vulnerable Software and Affected Versions Jenkins versions 2.318 and earlier Jenkins LTS versions 2.303.2 and earlier Description The issue is related to an incorrect authorization procedure in Jenkins, allowing a remote attacker to create arbitrary files. When creating temporary file...
Information Disclosure
kotlin-daemon-client is vulnerable to information disclosure. The vulnerability exists due to the insecure file permissions used in temporary file creation, allowing a malicious user to read the data and list directories...
CVE-2021-23877
Privilege escalation vulnerability in the Windows trial installer of McAfee Total Protection MTP prior to 16.0.34x may allow a local user to run arbitrary code as the admin user by replacing a specific temporary file created during the installation of the trial version of MTP...
in flatcore/flatcore-cms
Title： race condition vs Temporary File Upload Description flatCore-CMS is vulnerable to Race condition while dealing uploading gallery Codes at https://github.com/flatCore/flatCore-CMS/blob/main/acp/core/files.uploadgallery.phpL31 php ifarraykeyexists'file',$FILES && $FILES'file''error' == 0...
Exploit for Race Condition in Canonical Ubuntu_Linux
This repository is an exploit module for the Dirty COW CVE-2016-5195 vulnerability. The exploit relies on ptrace to patch the vDSO Virtual Dynamic Shared Object and gain root privileges. The payload is written in assembly and is executed whenever a process makes a call to clockgettime. If the...