SUSE CVE-2022-34009

Fossil 2.18 on Windows allows attackers to cause a denial of service daemon crash via an XSS payload in a ticket. This occurs because the ticket data is stored in a temporary file, and the product does not properly handle the absence of this file after Windows Defender has flagged it as malware...

SUSE CVE-2022-41946

pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either PreparedStatement.setTextint, InputStream or PreparedStatemet.setByteaint, InputStream will create a temporary file if the InputStream is larger than 2k. This will create a temporary file which...

SUSE CVE-2022-45146

An issue was discovered in the FIPS Java API of Bouncy Castle BC-FJA before 1.0.2.4. Changes to the JVM garbage collector in Java 13 and later trigger an issue in the BC-FJA FIPS modules where it is possible for temporary keys used by the module to be zeroed out while still in use by the module,...

SUSE CVE-2022-48257

In Eternal Terminal 6.2.1, etserver and etclient have predictable logfile names in /tmp...

SUSE CVE-2023-0482

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

PT-2023-2198 · Golang +11 · Net/Http +12

Name of the Vulnerable Software and Affected Versions: GoLang net/http and mime/multipart affected versions not specified Description: A denial of service is possible from excessive resource consumption in net/http and mime/multipart. Multipart form parsing with mime/multipart.Reader.ReadForm can...

postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions

A flaw was found in org.postgresql. This issue allows the creation of a temporary file when using PreparedStatement.setTextint, InputStream and PreparedStatemet.setByteaint, InputStream. This could allow a user to create an unexpected file available to all users, which could end in unexpected...

postgresql-jdbc: Information leak of prepared statement data due to insecure temporary file permissions

A flaw was found in org.postgresql. This issue allows the creation of a temporary file when using PreparedStatement.setTextint, InputStream and PreparedStatemet.setByteaint, InputStream. This could allow a user to create an unexpected file available to all users, which could end in unexpected...

PT-2023-15952 · Sap · Sap Businessobjects Business Intelligence Platform

Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence platform versions 420, 430 Description: The issue allows an authenticated attacker to access sensitive information that is otherwise restricted, potentially having a high impact on confidentiality and...

PT-2023-1390 · Schneider Electric · Struxureware Data Center Expert

Name of the Vulnerable Software and Affected Versions: StruxureWare Data Center Expert versions 7.9.2 and prior Description: A CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists, allowing a local privilege escalation on the...

VulnCheck KEV: CVE-2023-23522

A privacy issue was addressed with improved handling of temporary files. This issue is fixed in macOS Ventura 13.2.1. An app may be able to observe unprotected user data...

PT-2023-18189 · Unknown · Wifisevice

Name of the Vulnerable Software and Affected Versions: WifiSevice versions prior to SMR Jan-2023 Release 1 Description: The issue is related to an improper authorization vulnerability in the semAddPublicDnsAddr function within the WifiSevice. This vulnerability allows attackers to set a custom DN...

PT-2023-19998 · Tenda · Tenda Ac500

Name of the Vulnerable Software and Affected Versions: Tenda AC500 version 2.0.1.91307 Description: The issue is related to a Buffer Overflow in the formOneSsidCfgSet function via the ssid parameter. Recommendations: For Tenda AC500 version 2.0.1.91307, as a temporary workaround, consider...

PT-2023-1552 · Kardex · Kardex Mlog Mcc

Name of the Vulnerable Software and Affected Versions: Kardex Mlog MCC version 5.7.12+0-a203c2a213-master Description: The issue is related to incorrect code generation management in the Kardex Mlog Control Center MCC module. This allows a remote attacker to execute arbitrary code. The software...

PT-2023-9915 · Unknown · Xpressengine

Name of the Vulnerable Software and Affected Versions: XpressEngine versions up to 1.4.4 Description: A critical issue affects the Update Query Handler component, leading to sql injection. The estimated number of potentially affected devices worldwide is not available. There is no information abo...

PT-2023-2033 · D Link · D-Link Dir820La1 Fw105B03

Name of the Vulnerable Software and Affected Versions: D-Link DIR820LA1 FW105B03 Description: A stack overflow issue exists in the pingV4Msg component, allowing remote attackers to cause a denial of service via the nextPage parameter to "ping.ccp". Recommendations: For D-Link DIR820LA1 FW105B03, ...

The vulnerability of the Routing Protocol Daemon (rpd) in Juniper Networks’ Junos OS Evolved and Junos operating systems allows a attacker to cause a service failure.

The vulnerability of the Routing Protocol Daemon rpd in Juniper Networks’ Junos OS Evolved and Junos operating systems exists due to incomplete cleanup of temporary or auxiliary resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

PT-2023-13023 · Bestechnic · Bestechnic Bluetooth Mesh Sdk

Name of the Vulnerable Software and Affected Versions: Bestechnic Bluetooth Mesh SDK BES2300 version 1.0 Description: A buffer overflow issue can be triggered during provisioning due to the lack of a check for the SegN field of the Transaction Start PDU. This occurs because there is no validation...

Resteasy 安全漏洞

Red Hat Resteasy is a JAX-RS a Java programming language API specification implementation from Red Hat. A security vulnerability exists in Resteasy that originates from allowing users to create insecure temporary files...

PT-2023-15596 · Unknown · Easy Images

Name of the Vulnerable Software and Affected Versions: Easy Images version 2.0 Description: The issue allows for an arbitrary file download via the /application/down.php component. It is exploited through a crafted GET request. Recommendations: For Easy Images version 2.0, consider restricting...