13228 matches found
Insecure temporary file usage in SWHKD
SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service...
Information Disclosure
NiFi Single User Utilities is vulnerable to information disclosure. The vulnerability exists in writeLoginCredentials function due to temporary file creation of NiFi containing credential information in a global directory which allows an attacker to gain read access and perform unauthorized actio...
CVE-2022-27818
SWHKD 1.1.5 unsafely uses the /tmp/swhkd.sock pathname. There can be an information leak or denial of service...
The vulnerability of the Adobe Creative Cloud Desktop Application, related to the creation of temporary files with insecure resolutions, allows a hacker to trigger a service failure.
The vulnerability of the Adobe Creative Cloud Desktop Application relates to the creation of temporary files with insecure resolutions. Exploiting this vulnerability could allow a hacker to cause a service failure...
The vulnerability of the Adobe Creative Cloud Desktop Application, related to the creation of temporary files with insecure resolutions, allows a hacker to re-record any file.
The vulnerability of the Adobe Creative Cloud Desktop Application relates to the creation of temporary files with insecure resolutions. Exploiting this vulnerability could allow a remote attacker to re-record any file...
SWHKD 安全漏洞
SWHKD is a display protocol-independent hotkey daemon made with Rust. A security vulnerability exists in SWHKD, which stems from the insecure use of the /tmp/swhkd.sock pathname. An attacker could exploit the vulnerability to obtain sensitive information or launch a denial-of-service attack...
The vulnerability of Adobe Photoshop Elements, related to the creation of temporary files with insecure resolutions, allows a hacker to escalate their privileges.
The vulnerability of Adobe Photoshop Elements relates to the creation of temporary files with insecure resolutions. Exploiting this vulnerability can allow an attacker to increase their privileges...
CVE-2022-26850
When creating or updating credentials for single-user access, Apache NiFi wrote a copy of the Login Identity Providers configuration to the operating system temporary directory. On most platforms, the operating system temporary directory has global read permissions. NiFi immediately moved the...
Design/Logic Flaw
When creating or updating credentials for single-user access, Apache NiFi wrote a copy of the Login Identity Providers configuration to the operating system temporary directory. On most platforms, the operating system temporary directory has global read permissions. NiFi immediately moved the...
CVE-2022-26850 Insufficiently protected credentials
When creating or updating credentials for single-user access, Apache NiFi wrote a copy of the Login Identity Providers configuration to the operating system temporary directory. On most platforms, the operating system temporary directory has global read permissions. NiFi immediately moved the...
Apache NiFi 安全漏洞
Apache NiFi is a data processing and distribution system from the Apache USA Foundation. The system is primarily used for data routing, transformation and system intermediary logic. A security vulnerability exists in Apache NiFi that stems from the fact that when creating or updating credentials...
PT-2022-18100 · Apache · Apache Nifi
Name of the Vulnerable Software and Affected Versions: Apache NiFi versions prior to 1.16.0 Description: The issue arises when creating or updating credentials for single-user access in Apache NiFi. NiFi writes a copy of the Login Identity Providers configuration to the operating system temporary...
PT-2022-16532 · Htmldoc +5 · Htmldoc +5
Name of the Vulnerable Software and Affected Versions: HTMLDOC version 1.9.14 Description: The issue is caused by an infinite loop in the gif read lzw function, which can lead to a pointer arbitrarily pointing to heap memory, resulting in a buffer overflow. Recommendations: For HTMLDOC version...
CVE-2021-32937
An attacker can gain knowledge of a session temporary working folder where the getfile and putfile commands are used in MDT AutoSave versions prior to v6.02.06. An attacker can leverage this knowledge to provide a malicious command to the working directory where the read and write activity can be...
CVE-2021-32937
MDT AutoSave vulnerability CVE-2021-32937 affects MDT AutoSave prior to 6.02.06 (and related A4SP versions). The issue is listed as Generation of Error Message Containing Sensitive Information, enabling an attacker to learn about a session temporary working folder via getfile/putfile commands and...
PT-2022-13211 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 8.15 and later Description: An issue has been discovered in GitLab CE/EE that allows a Denial of Service DOS to be triggered by using the math feature with a specific formula in issue comments. Recommendations: For GitLa...
PT-2022-11965
Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 8.5.0 through 8.5.77 Apache Tomcat versions 9.0.0-M1 through 9.0.60 Apache Tomcat versions 10.0.0-M1 through 10.0.18 Apache Tomcat versions 10.1.0 through 10.1.0-M12 Description The simplified implementation of blocking...
GHSA-P4JG-PCCF-H82C Insecure Temporary File in SWHKD
SWHKD is a display protocol-independent hotkey daemon made in Rust. In SWHKD versions 1.1.5 and prior, SWHKD uses the /tmp/swhkd.pid pathname. As /tmp is accessible to all users, there can be an information leak or denial of service. No known workarounds exist. A patch is available on the 1.1.0...
Insecure Temporary File in SWHKD
SWHKD is a display protocol-independent hotkey daemon made in Rust. In SWHKD versions 1.1.5 and prior, SWHKD uses the /tmp/swhkd.pid pathname. As /tmp is accessible to all users, there can be an information leak or denial of service. No known workarounds exist. A patch is available on the 1.1.0...
Insecure Temporary File in SWHKD
SWHKD is a display protocol-independent hotkey daemon made in Rust. In SWHKD versions 1.1.5 and prior, SWHKD uses the /tmp/swhkd.pid pathname. As /tmp is accessible to all users, there can be an information leak or denial of service. No known workarounds exist. A patch is available on the 1.1.0...