CVE-2023-40456

The issue was addressed with improved checks. This issue is fixed in tvOS 17, iOS 17 and iPadOS 17, watchOS 10. An app may be able to access edited photos saved to a temporary directory...

CVE-2023-32421

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14. An app may be able to observe unprotected user data...

matrix-synapse vulnerable to temporary storage of plaintext passwords during password changes

Impact When users update their passwords, the new credentials may be briefly held in the server database. While this doesn't grant the server any added capabilities—it already learns the users' passwords as part of the authentication process—it does disrupt the expectation that passwords won't be...

PT-2023-23784 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A privacy issue was addressed with improved handling of temporary files. This issue allows an app to potentially observe unprotected user data. Recommendations: For versions prior to 14, update to macOS...

Apple macOS Security Breach

Apple macOS is a dedicated operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma version 14, which stems from an application that may be able to access calendar data saved to a temporary directory...

Security update for Cadence (moderate)

openSUSE Security Update: Security update for Cadence Announcement ID: openSUSE-SU-2023:0270-1 Rating: moderate References: 1213330 1213983 1213985 Affected Products: openSUSE Backports SLE-15-SP4 An update that contains security fixes can now be installed. Description: This update for Cadence...

PT-2023-22281 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A privacy issue was addressed with improved handling of temporary files. This issue may allow an app to access calendar data saved to a temporary directory. Recommendations: For versions prior to 14,...

PT-2023-8423 · Apple · Ipados +3

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 iOS versions prior to 16.7 iPadOS versions prior to 16.7 Description: The issue is related to the handling of temporary files, which may allow an app to access edited photos saved to a temporary directory. This coul...

PT-2023-27503 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: This issue concerns a shortcut that may output sensitive user data without consent. The problem was addressed by adding an additional prompt for user consent. Recommendations: For versions prior to 14,...

PT-2023-5807 · Apple · Safari +1

Name of the Vulnerable Software and Affected Versions: Safari versions prior to macOS Sonoma 14 Description: A privacy issue was addressed with improved handling of temporary files. This issue may allow a remote attacker to gain unauthorized access to protected information. Safari may save photos...

PT-2023-27423 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: A privacy issue was addressed with improved handling of temporary files. This issue may allow an app to access Notes attachments. Recommendations: For versions prior to 14, update to macOS Sonoma 14 to...

PT-2023-28653 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 watchOS versions prior to 10 tvOS versions prior to 17 Description: The issue allows an app to access edited photos saved to a temporary directory. This wa...

PT-2023-8482 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14 Description: The issue is related to errors in security settings of the macOS operating system's isolated software environment, Sandbox. It may allow an attacker to gain unauthorized access to removable information...

PT-2023-27911 · Synapse +2 · Synapse +2

Name of the Vulnerable Software and Affected Versions: Synapse versions prior to 1.93.0 Description: The issue concerns the temporary storage of user passwords in the server database when users update their credentials. Although this does not grant the server any additional capabilities, it...

OPENSUSE-SU-2023:0270-1 Security update for Cadence

This update for Cadence fixes the following issues: - Fix security bugs related to use of Fixed Temporary Files. boo1213330, boo1213983, boo1213985...

Insecure Temporary File Creation

Jenkins is vulnerable to Insecure Temporary File Creation. The vulnerability is due to creating a temporary file when a plugin is deployed directly from a URL. An attacker can exploit this vulnerability by deploying a plugin from URL resulting in access to the Jenkins controller file system with...

Insecure Temporary Files

org.jenkins-ci.main: jenkins-core is vulnerable to Insecure Temporary Files. The vulnerability is caused by not restricting permissions to the temporary file in the system temporary directory and leaving the newly created files with default permissions which are created by the Jenkins API...

PT-2023-6729 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki version 1.40.0 Description: The issue exists due to the lack of protection for the web page structure. A remote attacker with a low-privileged user account can exploit this by sending a malicious link to the instance administrator,...

PT-2023-28130 · Codestag · Codestag Stagtools

Name of the Vulnerable Software and Affected Versions: Codestag StagTools plugin versions = 2.3.7 Description: The issue is an Unauth. Reflected Cross-Site Scripting XSS vulnerability. This means that an attacker can inject malicious scripts into a website, potentially allowing them to steal user...

CVE-2023-43496

A flaw was found in Jenkins weekly and LTS due to an issue creating a temporary file in the system's temporary directory with default permissions. By sending a specially crafted request, a local authenticated attacker could execute arbitrary code on the system...