Lucene search
+L

3563 matches found

Cvelist
Cvelist
added 2019/11/25 9:45 p.m.37 views

CVE-2011-3351

openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this flaw to conduct symlink attacks to overwrite arbitrary files on the system...

6.8AI score0.00398EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2019/11/25 12:00 a.m.11 views

The vulnerability of the “pg_upgrade” command implementation in the PostgreSQL database management system allows a hacker to gain access to arbitrary files.

The vulnerability of the “pgupgrade” command in the PostgreSQL database management system is related to errors during the creation of temporary files in the current working directory. Exploiting this vulnerability can allow an attacker to gain access to arbitrary files...

7CVSS6.5AI score0.00498EPSS
SaveExploits0References11Affected Software5
OSV
OSV
added 2019/11/21 11:15 p.m.12 views

CVE-2014-5254

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...

4.7CVSS6.8AI score
SaveExploits0References8
UbuntuCve
UbuntuCve
added 2019/11/21 11:15 p.m.40 views

CVE-2014-5255

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...

7CVSS7.1AI score0.00366EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
added 2019/11/21 3:15 p.m.26 views

CVE-2014-1937

Gamera before 3.4.1 insecurely creates temporary files...

7.5CVSS7.1AI score0.01317EPSS
SaveExploits0References1
OSV
OSV
added 2019/11/19 10:15 p.m.13 views

CVE-2011-2924

foomatic-rip filter v4.0.12 and prior used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileg...

5.5CVSS6.5AI score
SaveExploits0References8
OSV
OSV
added 2019/11/19 9:15 p.m.9 views

CVE-2011-2923

foomatic-rip filter, all versions, used insecurely creates temporary files for storage of PostScript data by rendering the data when the debug mode was enabled. This flaw may be exploited by a local attacker to conduct symlink attacks by overwriting arbitrary files accessible with the privileges ...

5.5CVSS6.5AI score
SaveExploits0References6
CNVD
CNVD
added 2019/11/19 12:00 a.m.9 views

Red Hat OpenShift Temporary File Creation Vulnerability

Red Hat OpenShift is a Platform-as-a-Service PaaS cloud computing platform from Red Hat, Inc. that supports building, testing, deploying and running applications. A temporary file creation vulnerability exists in the installation script in Red Hat OpenShift, which can be exploited by an attacker ...

7.8CVSS7.5AI score0.00404EPSS
SaveExploits0References1
NVD
NVD
added 2019/11/15 3:15 p.m.33 views

CVE-2014-0023

OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution...

7.8CVSS7.9AI score0.00404EPSS
SaveExploits0References2
Prion
Prion
added 2019/11/15 3:15 p.m.24 views

Design/Logic Flaw

OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution...

4.6CVSS8.1AI score0.00404EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2019/11/15 2:40 p.m.35 views

CVE-2014-0023

OpenShift: Install script has temporary file creation vulnerability which can result in arbitrary code execution...

7.9AI score0.00404EPSS
SaveExploits0References2
CVE
CVE
added 2019/11/15 2:40 p.m.62 views

CVE-2014-0023

CVE-2014-0023 affects Red Hat OpenShift. The OpenShift installation script contains a temporary file creation vulnerability that can lead to arbitrary code execution. The issue is documented across multiple sources (e.g., NVD, CNVD) as a temporary-file-related weakness enabling code execution, wi...

7.8CVSS7.9AI score0.00404EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2019/11/12 2:15 p.m.15 views

CVE-2011-5271

Pacemaker before 1.1.6 configure script creates temporary files insecurely...

5.5CVSS6.8AI score
SaveExploits0References6
NVD
NVD
added 2019/11/04 10:15 p.m.32 views

CVE-2013-4374

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files...

7.1CVSS6.9AI score0.00309EPSS
SaveExploits0References2
CVE
CVE
added 2019/11/04 9:16 p.m.90 views

CVE-2013-4374

CVE-2013-4374 describes an insecure temporary file storage vulnerability in the RHQ MongoDB Drift Server up to 2013-09-25, triggered when unpacking zipped files. The flaw causes unpacked files to land in a world-writable directory, which could permit local attackers to modify/tamper with files an...

7.1CVSS6.8AI score0.00309EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2019/11/04 9:16 p.m.36 views

CVE-2013-4374

An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files...

6.9AI score0.00309EPSS
SaveExploits0References2
NVD
NVD
added 2019/11/04 7:15 p.m.24 views

CVE-2013-4280

Insecure temporary file vulnerability in RedHat vsdm 4.9.6...

5.5CVSS5.5AI score0.00422EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2019/11/04 6:50 p.m.28 views

CVE-2013-4280

Insecure temporary file vulnerability in RedHat vsdm 4.9.6...

5.5AI score0.00422EPSS
SaveExploits1References3
CVE
CVE
added 2019/11/04 6:50 p.m.65 views

CVE-2013-4280

CVE-2013-4280 affects RedHat vsdm 4.9.6 with an insecure temporary file vulnerability. The vulnerability’s impact is limited to integrity (I:H) with no confidentiality or availability impact per CVSS. It is a local-attack, low-complexity issue without required user interaction. Connected Nessus d...

5.5CVSS5.5AI score0.00422EPSS
SaveExploits1References3Affected Software1
CNVD
CNVD
added 2019/11/04 12:00 a.m.10 views

Mutt has an unspecified vulnerability

Mutt is a text-based mail client for Unix-like systems by Michael Elkins Software Developers. A security vulnerability exists in Mutt prior to version 1.5.20 patch 7, which can be exploited to cause a denial of service by sending a series of requests to a mutt temporary file...

5.5CVSS6.7AI score0.00351EPSS
SaveExploits0References1
Rows per page
Query Builder