13285 matches found
Insecure permissions on user namespace / fakeroot temporary rootfs in Singularity
Impact Insecure permissions on temporary directories used in fakeroot or user namespace container execution. When a Singularity action command run, shell, exec is run with the fakeroot or user namespace option, Singularity will extract a container image to a temporary sandbox directory. Due to...
WordPress Temporary Login Without Password plugin cross-site request forgery vulnerability
WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. WordPress plugin is a WordPress open source application plugin. WordPress Temporary Login Without Password plugin...
CVE-2021-43325
Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...
CVE-2021-43326
Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory...
CVE-2021-43326
Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory...
CVE-2021-43325
Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...
CVE-2021-43326
Automox Agent before 32 on Windows incorrectly sets permissions on a temporary directory...
CVE-2021-43325
Automox Agent for Windows (version 33) is affected by CVE-2021-43325, which states the agent incorrectly sets permissions on a temporary directory. This issue exists due to a regression linked to CVE-2021-43326. Connected sources confirm the vulnerability is local in scope with potential to escal...
CVE-2021-43325
Automox Agent 33 on Windows incorrectly sets permissions on a temporary directory. NOTE: this issue exists because of a CVE-2021-43326 regression...
Automox Alive Automox Agent 安全漏洞
Automox Alive Automox Agent is an application from the Automox Alive community. An agent software. Automox Alive Automox Agent 33 A security vulnerability exists on Windows that originates from incorrectly setting the permissions of a temporary directory...
Automox Alive Automox Agent 安全漏洞
automox Alive Automox Agent is an agent software from the Automox Alive community. The automox Alive Automox Agent before 32 version denial of service vulnerability, which stems from the agent incorrectly setting permissions to temporary directories. An attacker could exploit this vulnerability t...
PT-2021-22829 · Unknown · Securitashome
Name of the Vulnerable Software and Affected Versions: SecuritasHome home alarm system version HPGW-G 0.0.2.23F BG U-ITR-F1-BD BL.A30.20181117 Description: The issue concerns the absence of notifications for ongoing RF jamming attacks in the system. This allows an attacker to block legitimate...
spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application
In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by recreating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFl...
groovy: OS temporary directory leads to information disclosure
A flaw was found in Apache Groovy. Groovy makes use of a method for creating temporary directories which is not suitable for security-sensitive contexts and allows for sensitive information leakage. The highest threat from this vulnerability is to data confidentiality...
CVE-2021-42069
When a user opens manipulated Tagged Image File Format .tif file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...
PT-2021-7803 · Siemens · Syngo Fastview
Name of the Vulnerable Software and Affected Versions: syngo fastView All versions Description: A vulnerability has been identified in the affected application, which lacks proper validation of user-supplied data when parsing BMP files. This could result in a write-what-where condition, allowing ...
CVE-2021-24836
The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when updating its settings, which could allows any logged-in users, such as subscribers to update them...
PT-2021-16320 · WordPress · Temporary Login Without Password
Name of the Vulnerable Software and Affected Versions: Temporary Login Without Password WordPress plugin versions prior to 1.7.1 Description: The issue concerns a lack of authorization and CSRF checks when updating settings in the Temporary Login Without Password WordPress plugin. This could allo...