Lucene search
+L

13232 matches found

NVD
NVD
added 2021/04/14 10:15 a.m.32 views

CVE-2021-25316

A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux...

3.3CVSS0.00315EPSS
SaveExploits1References1
Prion
Prion
added 2021/04/14 10:15 a.m.22 views

Design/Logic Flaw

A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux...

2.1CVSS3.8AI score0.00315EPSS
SaveExploits1References1Affected Software1
UbuntuCve
UbuntuCve
added 2021/04/14 10:15 a.m.37 views

CVE-2021-25316

A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux...

3.3CVSS5.9AI score0.00315EPSS
SaveExploits1References2
CVE
CVE
added 2021/04/14 9:55 a.m.71 views

CVE-2021-25316

CVE-2021-25316 is a vulnerability in the s390-tools package used by SUSE Linux Enterprise Server (SLES) 12-SP5 and 15-SP2. The root cause is insecure/predictable temporary file handling in detach_disks.sh, enabling local attackers to disrupt VM live migrations. Affected versions: SLES 12-SP5 with...

3.3CVSS3.4AI score0.00315EPSS
SaveExploits1References1Affected Software1
Cvelist
Cvelist
added 2021/04/14 9:55 a.m.33 views

CVE-2021-25316 Local DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-tools

A Insecure Temporary File vulnerability in s390-tools of SUSE Linux Enterprise Server 12-SP5, SUSE Linux Enterprise Server 15-SP2 allows local attackers to prevent VM live migrations This issue affects: SUSE Linux Enterprise Server 12-SP5 s390-tools versions prior to 2.1.0-18.29.1. SUSE Linux...

3.3CVSS4AI score0.00315EPSS
SaveExploits1References1
ATTACKERKB
ATTACKERKB
added 2021/04/14 12:00 a.m.4 views

CVE-2021-26075

The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before 8.13.4, and from version 8.14.0 before 8.15.1 allowed remote authenticated attackers to obtain the full path of the Jira application data directory via an...

4.3CVSS5.2AI score0.0161EPSS
SaveExploits0References2Affected Software2
OSV
OSV
added 2021/04/13 8:15 p.m.41 views

CVE-2021-29428

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

7.8CVSS6.6AI score
SaveExploits0References4
NVD
NVD
added 2021/04/13 8:15 p.m.36 views

CVE-2021-29428

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

8.8CVSS0.00534EPSS
SaveExploits1References4
OSV
OSV
added 2021/04/13 8:15 p.m.5 views

DEBIAN-CVE-2021-29428

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

7.8CVSS7.6AI score0.00534EPSS
SaveExploits1References1
Prion
Prion
added 2021/04/13 8:15 p.m.34 views

Directory traversal

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

4.4CVSS7.7AI score0.00534EPSS
SaveExploits1References4Affected Software2
AlpineLinux
AlpineLinux
added 2021/04/13 8:15 p.m.117 views

CVE-2021-29428

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

8.8CVSS1.8AI score0.00534EPSS
SaveExploits1
UbuntuCve
UbuntuCve
added 2021/04/13 8:15 p.m.55 views

CVE-2021-29428

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

8.8CVSS7AI score0.00534EPSS
SaveExploits1References5
Cvelist
Cvelist
added 2021/04/13 5:55 p.m.49 views

CVE-2021-29428 Local privilege escalation through system temporary directory

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

8.8CVSS8.8AI score0.00534EPSS
SaveExploits1References4
Debian CVE
Debian CVE
added 2021/04/13 5:55 p.m.86 views

CVE-2021-29428

In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds could be vulnerable to a local privilege escalation from an attacker quickly deleting and recreatin...

8.8CVSS8.2AI score0.00534EPSS
SaveExploits1
CNNVD
CNNVD
added 2021/04/13 12:00 a.m.10 views

Gradle 安全漏洞

Gradle is a set of JVM-based project building tools from Gradle, Inc. that supports maven, Ivy repositories, and more. A security vulnerability exists in Gradle versions prior to 7.0 that allows multiple users to create system temporary directories by creating and deleting open permissions to fil...

8.8CVSS7.7AI score0.00534EPSS
SaveExploits1References7
BDU FSTEC
BDU FSTEC
added 2021/04/13 12:00 a.m.11 views

The vulnerability of the automatic email decompression mechanism of Apple Mail on Apple Mac OS operating systems allows a hacker to write arbitrary files.

The vulnerability of the Apple Mail client’s automatic decompression mechanism in Apple Mac OS operating systems is related to incorrect handling of logical operations. Exploiting this vulnerability allows a malicious actor to write arbitrary files to the /Library/Mail directory and $TMPDIR...

6.5CVSS7AI score0.01507EPSS
SaveExploits0References4Affected Software1
NVD
NVD
added 2021/04/12 10:15 p.m.37 views

CVE-2021-29429

In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded...

5.5CVSS0.00484EPSS
SaveExploits1References2
OSV
OSV
added 2021/04/12 10:15 p.m.6 views

DEBIAN-CVE-2021-29429

In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded...

5.5CVSS7.3AI score0.00484EPSS
SaveExploits1References1
OSV
OSV
added 2021/04/12 10:15 p.m.27 views

CVE-2021-29429

In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded...

5.5CVSS6AI score
SaveExploits0References2
UbuntuCve
UbuntuCve
added 2021/04/12 10:15 p.m.34 views

CVE-2021-29429

In Gradle before version 7.0, files created with open permissions in the system temporary directory can allow an attacker to access information downloaded by Gradle. Some builds could be vulnerable to a local information disclosure. Remote files accessed through TextResourceFactory are downloaded...

5.5CVSS6.8AI score0.00484EPSS
SaveExploits1References3
Rows per page
Query Builder