netty: Information disclosure via the local system temporary directory

In Netty there is a vulnerability on Unix-like systems involving an insecure temp file. When netty's multipart decoders are used, a local information disclosure can occur via the local system temporary directory if temporary storing uploads on the disk is enabled. On unix-like systems, the...

PT-2022-4801 · Python +4 · Python +4

Name of the Vulnerable Software and Affected Versions: IPython versions prior to 7.31.1 IPython versions prior to 8.0.1 IPython versions prior to 7.16.3 Description: The issue is related to arbitrary code execution achieved by not properly managing cross-user temporary files. This allows one user...

Pexip Infinity Denial of Service Vulnerability

Pexip Infinity Pexip Video Conferencing Cloud Collaboration Platform is a video conferencing cloud collaboration platform from the Norwegian company Pexip. Pexip Infinity has a security vulnerability that could be exploited by an attacker to allow a temporary remote denial of service abort...

The vulnerability of the write_data method in the Ansible configuration management system lies in the use of insecure temporary files, allowing attackers to access confidential data.

The vulnerability of the writedata method in the Ansible configuration management system is related to insecure temporary files. Exploiting this vulnerability could allow an attacker to access confidential data...

The vulnerability of the Ansible configuration management system, related to insecure temporary files, allows a hacker to access confidential data.

The vulnerability of the Ansible configuration management system is related to insecure temporary files. Exploiting this vulnerability could allow an attacker to access confidential data...

The vulnerability of the Ansible configuration management system, related to insecure temporary files, allows a hacker to access confidential data, compromise its integrity, and cause service failures.

The vulnerability of the Ansible configuration management module is related to insecure temporary files. Exploiting this vulnerability can allow an attacker to access confidential data, compromise its integrity, and cause service failures...

CyberArk Software Endpoint Privilege Manager 安全漏洞

CyberArk Software Endpoint Privilege Manager formerly Viewfinity is a privilege management software from CyberArk Software, Israel. The software includes features such as privilege management, application control, and credential loss protection. A security vulnerability exists in CyberArk Softwar...

PT-2022-12505 · Gnu +3 · Gnu Recutils +3

Name of the Vulnerable Software and Affected Versions: GNU Recutils version 1.8.90 Description: The issue is related to an untrusted pointer dereference in the rec db destroy function at rec-db.c, which can cause a segmentation fault or application crash. Recommendations: For GNU Recutils version...

Sysaid Technologies SysAid 安全漏洞

Sysaid Technologies SysAid is an IT service management solution from the Israeli company SysAid Technologies Sysaid Technologies.A security vulnerability exists in SysAid ITIL, which could be exploited by an attacker to copy arbitrary files on the server file system to the Web root via the HTTP...

Samsung SMR安全漏洞

Samsung Knox Guard is a security solution based on the open-source Android platform from South Korea's Samsung Samsung, which can comprehensively enhance security through a combination of physical means and software systems, and is perfectly compatible with the Android and Google ecosystems,...

Insecure Temporary File in mlflow/mlflow

Description mlflow package is using the deprecated function tempfile.mktemp which is not secure. Because a different process may create a file with this name in the time between the call to mktemp and the subsequent attempt to create the file by the first process. Impact Availability will get...

Insecure Temporary File in horovod/horovod

Description horovod package is using the deprecated function tempfile.mktemp which is not secure. Because a different process may create a file with this name in the time between the call to mktemp and the subsequent attempt to create the file by the first process. Impact Availability will get...

PT-2022-12531 · Binaryen +1 · Binaryen +1

Name of the Vulnerable Software and Affected Versions: Binaryen version 103 Description: A Stack Overflow issue exists via the printf common function. This allows for a potential overflow, which could be exploited. Recommendations: For Binaryen version 103, consider disabling the printf common...

PT-2022-12580 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: MediaWiki versions prior to 1.35.5 MediaWiki versions 1.36.x prior to 1.36.3 MediaWiki versions 1.37.x prior to 1.37.1 Description: An issue was discovered in the WikibaseMediaInfo component, which is vulnerable to XSS via the caption fields...

PT-2022-12527 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists in the gf isom box size function, which could cause a Denial of Service context-dependent. Recommendations: For GPAC version 1.0.1, consider disabling the gf isom box size...

PT-2022-12519 · Gpac · Gpac

Name of the Vulnerable Software and Affected Versions: GPAC version 1.0.1 Description: A Pointer Dereference issue exists in the unlink chunk.isra file, causing a Denial of Service that is context-dependent. Recommendations: For GPAC version 1.0.1, consider restricting access to the unlink...

PT-2022-4823

Name of the Vulnerable Software and Affected Versions Blender versions prior to 2.83.19 Blender versions prior to 2.93.8 Blender versions prior to 3.1 Description An integer overflow in the processing of loaded 2D images leads to a write-what-where vulnerability and an out-of-bounds read...

PT-2025-8100

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A issue in the Linux kernel has been resolved, related to non-access data TLB cache flush faults on parisc architecture. When a page is not present, non-access data TLB faults occur from...

PT-2021-23432 · Wireshark +4 · Wireshark +4

Name of the Vulnerable Software and Affected Versions: Wireshark versions 3.4.0 through 3.4.10 Description: The issue is related to a crash in the Gryphon dissector, allowing denial of service via packet injection or crafted capture file. Recommendations: For Wireshark versions 3.4.0 through...

PT-2021-7465

Name of the Vulnerable Software and Affected Versions shapelib versions 1.5.0 and older Description The issue is related to a double-free condition in the shapelib library, specifically in the contrib/shpsort.c file. This condition may allow a remote attacker to cause a denial of service or have...