Lucene search
+L

13236 matches found

Veracode
Veracode
added 2020/04/10 1:02 a.m.22 views

Arbitrary File Write

encryptfs-utils is vulnerable to atbirary file write. A race condition flaw in the way temporary files were accessed in mount.ecryptfsprivate could allow a malicious, local user to make arbitrary modifications to the mtab file...

9.8CVSS3.2AI score0.0098EPSS
SaveExploits0References4Affected Software1
Veracode
Veracode
added 2020/04/10 1:02 a.m.23 views

Access Control Bypass

encryptfs-utils is vulnerable to access control bypass. An insecure temporary file use flaw was found in the ecryptfs-setup-private script. A local attacker could use this script to insert their own key that will subsequently be used by a new user, possibly giving the attacker access to the user'...

4.4CVSS2.2AI score0.00352EPSS
SaveExploits0References7Affected Software1
Veracode
Veracode
added 2020/04/10 1:00 a.m.16 views

Remote Code Execution (RCE)

The sysstat is vulnerable to Remote Code Execution RCE. It was found that the sysstat initscript created a temporary file in an insecure way. A local attacker could use this flaw to create arbitrary files via a symbolic link attack...

4.4CVSS3.6AI score0.00433EPSS
SaveExploits0References10Affected Software1
Veracode
Veracode
added 2020/04/10 12:58 a.m.20 views

Symlink Attack

Bash Bourne-again shell is the default shell for Red Hat Enterprise Linux. It was found that certain scripts bundled with the Bash documentation created temporary files in an insecure way. A malicious, local user could use this flaw to conduct a symbolic link attack, allowing them to overwrite th...

6.9CVSS0.5AI score0.00338EPSS
SaveExploits0References12Affected Software1
Veracode
Veracode
added 2020/04/10 12:53 a.m.35 views

Denial Of Service (DoS)

mysql is vulnerable to denial of service. A flaw in the way MySQL processed CREATE TEMPORARY TABLE statements that define NULL columns when using the InnoDB storage engine, could allow a remote, authenticated attacker to crash mysqld...

4CVSS3.8AI score0.12229EPSS
SaveExploits2References24Affected Software1
Veracode
Veracode
added 2020/04/10 12:49 a.m.35 views

Denial Of Service (DoS)

mysql is vulnerable to denial of service. It was found that the MySQL PolyFromWKB function did not sanity check Well-Known Binary WKB data. A remote, authenticated attacker could use specially-crafted WKB data to crash mysqld. This issue only caused a temporary denial of service, as mysqld was...

4CVSS3.4AI score0.03391EPSS
SaveExploits0References22Affected Software1
Veracode
Veracode
added 2020/04/10 12:49 a.m.30 views

Denial Of Service (DoS)

mysql is vulnerable to denial of service. A flaw was found in the way MySQL processed certain alternating READ requests provided by HANDLER statements. A remote, authenticated attacker could use this flaw to provide such requests, causing mysqld to crash. This issue only caused a temporary denial...

4CVSS2.9AI score0.12229EPSS
SaveExploits2References27Affected Software1
Veracode
Veracode
added 2020/04/10 12:38 a.m.24 views

File Overwrite

firefox is vulnerable to file overwrite. The vulnerability exists as a flaw was found in the way Firefox creates temporary file names for downloaded files. If a local attacker knows the name of a file Firefox is going to download, they can replace the contents of that file with arbitrary contents...

7.5CVSS3AI score0.01981EPSS
SaveExploits0References10Affected Software3
Veracode
Veracode
added 2020/04/10 12:37 a.m.37 views

Denial Of Service (DoS)

java is vulnerable to denial of service. A remote attacker is able to crash the application via vectors related to temporary font files...

5CVSS4.8AI score0.03584EPSS
SaveExploits0References38Affected Software1
Veracode
Veracode
added 2020/04/10 12:36 a.m.40 views

Unauthorized Replacement

SeaMonkey is vulnerable to unauthorized replacement. Due to a law found in the way SeaMonkey creates temporary file names for downloaded files. If a local attacker knows the name of a file SeaMonkey is going to download, they can replace the contents of that file with arbitrary contents...

4.4CVSS3.2AI score0.00292EPSS
SaveExploits2References15Affected Software5
Veracode
Veracode
added 2020/04/10 12:36 a.m.28 views

Symlink Attack

fence is vulnerable to symlink attack. Multiple insecure temporary file use flaws were found in fenceapcsnmp and ccstool. A local attacker could use these flaws to overwrite an arbitrary file writable by a victim running those utilities typically root with the output of the utilities via a symbol...

1.9CVSS3AI score0.00341EPSS
SaveExploits0References18Affected Software2
Veracode
Veracode
added 2020/04/10 12:36 a.m.26 views

Arbitrary File Overwrite

cman is vulnerable to arbitrary file overwrites. The vulnerability exists as multiple insecure temporary file use flaws were found in fenceapcsnmp and ccstool. A local attacker could use these flaws to overwrite an arbitrary file writable by a victim running those utilities typically root with th...

6.9CVSS2.8AI score0.0039EPSS
SaveExploits0References25Affected Software3
Veracode
Veracode
added 2020/04/10 12:32 a.m.32 views

Denial Of Service (DoS)

postgresql is vulnerable to denial of service DoS. The vulnerability exists as a flaw was found in the way PostgreSQL handles encoding conversion. A remote, authenticated user could trigger an encoding conversion failure, possibly leading to a temporary denial of service...

4CVSS2.9AI score0.10242EPSS
SaveExploits3References26Affected Software10
Veracode
Veracode
added 2020/04/10 12:31 a.m.20 views

Arbitrary File Overwrite

openswan is vulnerable to arbitrary file overwrite. The vulnerability exists as Openswan's livetest script created temporary files in an insecure manner. A local attacker could use this flaw to overwrite arbitrary files owned by the user running the script...

4.4CVSS2.5AI score0.01115EPSS
SaveExploits6References17Affected Software1
Veracode
Veracode
added 2020/04/10 12:28 a.m.41 views

Denial Of Service (DoS)

MySQL is vulnerable to denial of service DoS.Flaws in MySQL allowed an authenticated user to cause the MySQL daemon to crash via crafted SQL queries. This only caused a temporary denial of service, as the MySQL daemon is automatically restarted after the crash...

3.5CVSS3.3AI score0.01972EPSS
SaveExploits0References13Affected Software1
Veracode
Veracode
added 2020/04/10 12:28 a.m.27 views

Denial Of Service (DoS)

MySQL is vulnerable to denial of serviceDoS. Flaws in MySQL allowed an authenticated user to cause the MySQL daemon to crash via crafted SQL queries. This only caused a temporary denial of service, as the MySQL daemon is automatically restarted after the crash...

2.1CVSS3.4AI score0.00985EPSS
SaveExploits2References22Affected Software1
Veracode
Veracode
added 2020/04/10 12:28 a.m.38 views

Denial Of Service (DoS)

mysql is vulnerable to Denial of Service DoS. It allows an authenticated user to cause the MySQL daemon to crash via crafted SQL queries. This only caused a temporary denial of service, as the MySQL daemon is automatically restarted after the crash...

4CVSS3.4AI score0.11309EPSS
SaveExploits3References28Affected Software1
Veracode
Veracode
added 2020/04/10 12:28 a.m.33 views

Arbitrary File Overwrite

xen is vulnerable to arbitrary file overwrite. The vulnerability exists as it was discovered that the qemu-dm.debug script created a temporary file in /tmp in an insecure way. A local attacker in Dom0 could, potentially, use this flaw to overwrite arbitrary files via a symlink attack...

6.9CVSS3.3AI score0.00319EPSS
SaveExploits0References11Affected Software1
Veracode
Veracode
added 2020/04/10 12:22 a.m.24 views

Arbitrary Code Execution

php is vulnerable to arbitrary code execution. A flaw was found in PHP's CGI server API. If the web server did not set DOCUMENTROOT environment variable for PHP e.g. when running PHP in the FastCGI server mode, an attacker could cause a crash of the PHP child process, causing a temporary denial o...

9.8CVSS3.5AI score0.10918EPSS
SaveExploits2References39Affected Software14
Veracode
Veracode
added 2020/04/10 12:15 a.m.24 views

Denial Of Service (DoS)

The Conga is vulnerable to Denial Of Service DoS. A flaw was found in ricci during a code audit. A remote attacker who is able to connect to ricci could cause ricci to temporarily refuse additional connections, a denial of service...

5CVSS3.6AI score0.01745EPSS
SaveExploits0References9Affected Software1
Rows per page
Query Builder