UBUNTU-CVE-2012-1105

An Information Disclosure vulnerability exists in the Jasig Project php-pear-CAS 1.2.2 package in the /tmp directory. The Central Authentication Service client library archives the debug logging file in an insecure manner...

CVE-2013-0163

OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS...

Babiloo has an unspecified vulnerability

babiloo is a suite of open source software for reading offline dictionaries. A security vulnerability exists in version 2.0.9 prior to babiloo 2.0.11, which stems from a temporary file created by the program that can be easily guessed by the file name and can be exploited by a local attacker to...

EulerOS 2.0 SP2 : python-pillow (EulerOS-SA-2019-2437)

According to the versions of the python-pillow package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Pillow before 2.7.0 allows remote attackers to cause a denial of service via a compressed text chunk in a PNG image that has a large size...

Fronius Solar Inverter Series Backdoor Account Vulnerability

The Fronius Solar Inverter is a photovoltaic inverter device from the Austrian company Fronius. A security vulnerability exists in Fronius Solar Inverter versions prior to 3.14.1 HM 1.12.1, which stems from the program storing the 'today' account password in the /tmp/webusers.conf file. An attack...

How to Create Custom IAM Role to Connect to the Repository

The backup service is using the IAM Role to generate temporary access keys to connect to the S3 bucket where backup data is stored Veeam Backup Object Repository...

PT-2019-6647

Name of the Vulnerable Software and Affected Versions vsftpd version 2.3.4 Description The issue concerns a backdoor in vsftpd that opens a shell on port 6200/tcp. This backdoor was present in versions of vsftpd 2.3.4 that were downloaded between 20110630 and 20110703. Recommendations For vsftpd...

CVE-2011-3351

openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this flaw to conduct symlink attacks to overwrite arbitrary files on the system...

CVE-2011-3351

openvas-scanner before 2011-09-11 creates a temporary file insecurely when generating OVAL system characteristics document with the ovaldi integrated tool enabled. A local attacker could use this flaw to conduct symlink attacks to overwrite arbitrary files on the system...

The vulnerability of the “pg_upgrade” command implementation in the PostgreSQL database management system allows a hacker to gain access to arbitrary files.

The vulnerability of the “pgupgrade” command in the PostgreSQL database management system is related to errors during the creation of temporary files in the current working directory. Exploiting this vulnerability can allow an attacker to gain access to arbitrary files...

DEBIAN-CVE-2014-6311

generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...

Insecure Temporary Directory Creation

rply creates temporary directory in an insecure manner. It uses tempfile.gettempdir to create /tmp directories per user, allowing any local user to perform symlink or hardlink attacks which can result in system directories being overwritten and causing a denial of service condition...

CVE-2014-5255

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...

DEBIAN-CVE-2014-5255

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...

CVE-2014-5254

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...

DEBIAN-CVE-2014-5254

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...

CVE-2014-5254

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...

CVE-2014-5255

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...

CVE-2014-5254

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files...

Code injection

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254...