Audacity Security Breach

Audacity is an open source and free cross-platform audio processing software for recording and editing audio files. A security vulnerability exists in Audacity version 2.3.3 and earlier versions, which stems from saving temporary files as var tmp, defaulting to Audacity -$USER.After Audacity...

PT-2020-16368 · Ethereum · Geth

Name of the Vulnerable Software and Affected Versions: Geth versions prior to 1.9.24 Description: An ethash mining DAG generation flaw in Geth could cause miners to erroneously calculate Proof of Work in an upcoming epoch. This issue is relevant only for miners, as non-mining nodes are unaffected...

PT-2020-17077 · Gitea +1 · Gitea +1

Name of the Vulnerable Software and Affected Versions: Gitea versions 0.9.99 through 1.12.x before 1.12.6 Description: The issue arises from the failure to prevent a git protocol path that specifies a TCP port number and also contains newlines with URL encoding in ParseRemoteAddr in...

jetty: local temporary directory hijacking vulnerability

In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub...

CVE-2020-8030

A Insecure Temporary File vulnerability in skuba of SUSE CaaS Platform 4.5 allows local attackers to leak the bootstrapToken or modify the configuration file before it is processed, leading to arbitrary modifications of the machine/cluster...

PT-2020-15198 · Sixel +2 · Libsixel +2

Name of the Vulnerable Software and Affected Versions: libsixel version 1.8.6 Description: The issue arises from unverified indexes into an array, leading to out of bound access in the gif out code function located in fromgif.c in libsixel. This can potentially cause issues due to the unauthorize...

PT-2020-13685

Name of the Vulnerable Software and Affected Versions Western Digital iNAND devices through 2020-06-03 Description A security issue has been identified in the Replay Protected Memory Block RPMB protocol, which is used by storage devices to secure trusted firmware. This issue can be exploited in...

PT-2020-15032

Name of the Vulnerable Software and Affected Versions Apache Tomcat versions 10.0.0-M1 through 10.0.0-M9 Apache Tomcat versions 9.0.0-M1 through 9.0.39 Apache Tomcat versions 8.5.0 through 8.5.59 Description The issue allows Apache Tomcat to re-use an HTTP request header value from the previous...

GLSA-202011-18 : Apache Ant: Insecure temporary file

The remote host is affected by the vulnerability described in GLSA-202011-18 Apache Ant: Insecure temporary file A previous fix for a security vulnerability involving insecure temporary files has been found to be incomplete. Impact : A local attacker could perform symlink attacks to overwrite...

CVE-2020-28692

In Gila CMS 1.16.0, an attacker can upload a shell to tmp directy and abuse .htaccess through the logs function for executing PHP files...

Apache Ant: Insecure temporary file

Background Ant is a Java-based build tool similar to ‘make’ that uses XML configuration files. Description A previous fix for a security vulnerability involving insecure temporary files has been found to be incomplete. Impact A local attacker could perform symlink attacks to overwrite arbitrary...

Gila CMS 代码问题漏洞

Gila CMS is an open source content management system CMS based on PHP and MySQL. A file upload vulnerability exists in Gila CMS 1.16.0. An attacker can exploit this vulnerability to upload a shell to the tmp directory, which can then be used to execute PHP files using .htaccess via the logging...

CVE-2020-13774

An unrestricted file-upload issue in EditLaunchPadDialog.aspx in Ivanti Endpoint Manager 2019.1 and 2020.1 allows an authenticated attacker to gain remote code execution by uploading a malicious aspx file. The issue is caused by insufficient file extension validation and insecure file operations ...

Insecure Temporary File

SharpZipLib uses an insecure temporary file name. An attacker can predict the name of the temporary file and potentially gain access to confidential information...

PT-2020-15544

Name of the Vulnerable Software and Affected Versions Microweber version 1.1.18 Description The issue concerns a problem where there is no session expiry after a user logs out. This could potentially allow unauthorized access to a user's session after they have logged out. Recommendations For...

EulerOS Virtualization 3.0.6.6 : keepalived (EulerOS-SA-2020-2445)

According to the version of the keepalived package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerability : - keepalived 2.0.8 didn't check for existing plain files when writing data to a temporary file upon a call to PrintData or...

ant: insecure temporary file vulnerability

Apache Ant 1.1 to 1.9.14 and 1.10.0 to 1.10.7 uses the default temporary directory identified by the Java system property java.io.tmpdir for several tasks and may thus leak sensitive information. The fixcrlf and replaceregexp tasks also copy files from the temporary directory back into the build...

Linux: noexec option on /tmp

The noexec mount option specifies that the filesystem cannot contain executable binaries. Since the /tmp filesystem is only intended for temporary file storage, set this option to ensure that users cannot run executable binaries from /tmp. SPDX-FileCopyrightText: 2020 Greenbone AG Some text...

Local Temp Directory Hijacking Vulnerability

Impact On Unix like systems, the system's temporary directory is shared between all users on that system. A collocated user can observe the process of creating a temporary sub directory in the shared temporary directory and race to complete the creation of the temporary subdirectory. If the...

Debian DLA-2426-1 : junit4 security update

In junit4 the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this directory they are, by default,...