spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application

In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by recreating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFl...

CVE-2021-42069

When a user opens manipulated Tagged Image File Format .tif file received from untrusted sources in SAP 3D Visual Enterprise Viewer - version 9.0, the application crashes and becomes temporarily unavailable to the user until restart of the application...

PT-2021-7803 · Siemens · Syngo Fastview

Name of the Vulnerable Software and Affected Versions: syngo fastView All versions Description: A vulnerability has been identified in the affected application, which lacks proper validation of user-supplied data when parsing BMP files. This could result in a write-what-where condition, allowing ...

CVE-2021-24836

The Temporary Login Without Password WordPress plugin before 1.7.1 does not have authorisation and CSRF checks when updating its settings, which could allows any logged-in users, such as subscribers to update them...

PT-2021-16320 · WordPress · Temporary Login Without Password

Name of the Vulnerable Software and Affected Versions: Temporary Login Without Password WordPress plugin versions prior to 1.7.1 Description: The issue concerns a lack of authorization and CSRF checks when updating settings in the Temporary Login Without Password WordPress plugin. This could allo...

CVE-2021-44513

Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity of session handling...

DEBIAN-CVE-2021-44513

Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity of session handling...

CVE-2021-44513

Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity of session handling...

Design/Logic Flaw

Insecure creation of temporary directories in tmate-ssh-server 2.3.0 allows a local attacker to compromise the integrity of session handling...

CVE-2021-44513

CVE-2021-44513 affects tmate-ssh-server 2.3.0, where insecure creation of temporary directories can allow a local attacker to compromise the integrity of session handling. The available documents confirm a local-attack vector and session integrity impact, with no explicit exploitation details or ...

The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions, allowing a hacker to perform arbitrary writes to the file system.

The vulnerability of the Adobe Digital Editions e-book reading program lies in the creation of temporary files with insecure permissions. Exploiting this vulnerability could allow a malicious actor to perform arbitrary writes to the file system using a specially crafted file...

The vulnerability of the program for creating interactive E-learning courses using ready-made slides from Adobe Captivate 2019 lies in the creation of temporary files with insecure permissions, which allows a malicious user to escalate their privileges.

The vulnerability of the program for creating interactive E-learning courses using ready-made slides from Adobe Captivate 2019 is related to the creation of temporary files with insecure permissions. Exploiting this vulnerability can allow a hacker to enhance their privileges in the context of th...

jenkins: When creating temporary files, permission to create files is only checked after they’ve been created.

An incorrect permissions validation vulnerability was found in Jenkins. The permissions to create temporary files are only checked after they have been created. This may allow an attacker to get access to restricted data...

jenkins: When creating temporary files, permission to create files is only checked after they’ve been created.

An incorrect permissions validation vulnerability was found in Jenkins. The permissions to create temporary files are only checked after they have been created. This may allow an attacker to get access to restricted data...

spring-web: (re)creating the temporary storage directory could result in a privilege escalation within WebFlux application

In Spring Framework, versions 5.2.x prior to 5.2.15 and versions 5.3.x prior to 5.3.7, a WebFlux application is vulnerable to a privilege escalation: by recreating the temporary storage directory, a locally authenticated malicious user can read or modify files that have been uploaded to the WebFl...

CVE-2021-42711

Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair operation...

CVE-2021-42711

Barracuda Network Access Client before 5.2.2 creates a Temporary File in a Directory with Insecure Permissions. This file is executed with SYSTEM privileges when an unprivileged user performs a repair operation...

CVE-2021-42711

CVE-2021-42711 affects Barracuda Network Access Client before version 5.2.2. It describes the creation of a temporary file in a directory with insecure permissions, and this file is executed with SYSTEM privileges when an unprivileged user performs a repair operation. The vulnerability’s impact i...

jenkins: When creating temporary files, permission to create files is only checked after they’ve been created.

An incorrect permissions validation vulnerability was found in Jenkins. The permissions to create temporary files are only checked after they have been created. This may allow an attacker to get access to restricted data...

PT-2021-11709 · WordPress · Events Manager

Name of the Vulnerable Software and Affected Versions: Events Manager WordPress plugin versions prior to 5.9.8 Description: The issue is related to the Events Manager WordPress plugin, where some search parameters are not properly sanitized and escaped before being output on pages. This could lea...