14697 matches found
USN-8825-1 requests vulnerability
It was discovered that Requests did not correctly handle generating random temporary file paths. An attacker could possibly use this issue to execute arbitrary code...
CVE-2026-97026: Creation of Temporary File With Insecure Permissions
Flatpak creates temporary child repository directories under the user cache with world-writable permissions 0777. On multi-user systems with a permissive umask, other local users could read or modify the temporary directory used while installing apps or runtimes, potentially causing installation...
PT-2026-102300
Name of the Vulnerable Software and Affected Versions Requests affected versions not specified Description Requests fails to correctly handle the generation of random temporary file paths, which could allow an attacker to execute arbitrary code. Recommendations At the moment, there is no...
Exploit for CVE-2026-64560
OnePlus Ace 6 Temporary Root Tool Obtain temporary root acces...
CLEANSTART-2026-WS35873 "go bug" command writes to two files with predictable names in the system temporary directory (for example, "/tmp")
Security vulnerability affects the loki package. The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp"...
SUSE CVE-2026-97472
In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation When a router temporarily deprecates an IPv6 prefix either by sending a Router Advertisement with Preferred Lifetime = 0 or by letting the lifetime expire and...
Exploit for Incorrect Authorization in Qualcomm Aqt1000_Firmware
CVE-2025-21479 · OPPO Find X5 Pro PFEM00 temporary root RAM...
DEBIAN-CVE-2026-97472
In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation When a router temporarily deprecates an IPv6 prefix either by sending a Router Advertisement with Preferred Lifetime = 0 or by letting the lifetime expire and...
CVE-2026-97472
In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation When a router temporarily deprecates an IPv6 prefix either by sending a Router Advertisement with Preferred Lifetime = 0 or by letting the lifetime expire and...
EUVD-2026-86070
In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation When a router temporarily deprecates an IPv6 prefix either by sending a Router Advertisement with Preferred Lifetime = 0 or by letting the lifetime expire and...
Security Bulletin: DataStage on Cloud Pak for Data has several vulnerabilities due to open source software
Summary Open source packages are used as part of the overall processing in DataStage on Cloud Pak for Data. Vulnerability Details CVEID:CVE-2026-25645 DESCRIPTION: Requests is a HTTP library. Prior to version 2.33.0, the requests.utils.extractzippedpaths utility function uses a predictable filena...
CVE-2026-97472: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation When a router temporarily deprecates an IPv6 prefix either by sending a Router Advertisement with Preferred Lifetime = 0 or by letting the lifetime expire and...
CVE-2026-97472
In the Linux kernel, the following vulnerability has been resolved: ipv6: addrconf: fix temp address generation after prefix deprecation When a router temporarily deprecates an IPv6 prefix either by sending a Router Advertisement with Preferred Lifetime = 0 or by letting the lifetime expire and...
PT-2026-98091
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the IPv6 address configuration where the kernel fails to generate temporary privacy addresses RFC 8981 after a router temporarily deprecates and then restores an IPv6...
Linux Distros Unpatched Vulnerability : CVE-2026-97472
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - ipv6: addrconf: fix temp address generation after prefix deprecation When a router temporarily deprecates an IPv6 prefix either by sending a Router Advertisemen...
CVE-2026-25265
Privilege escalation due to weak configuration while temporary file handling...
CVE-2026-25265 Creation of Temporary File with Insecure Permissions in Qualcomm Software Center
Privilege escalation due to weak configuration while temporary file handling...
CVE-2026-25265
CVE-2026-25265 affects Qualcomm Software Center , where a privilege escalation is possible due to the creation of a temporary file with insecure permissions . The root cause is a weak configuration during temporary file handling, allowing a local attacker with low privileges to gain full control ...
