Lucene search
+L

11 matches found

CVE
CVE
•added 2026/06/11 3:45 p.m.•109 views

CVE-2026-49982

The CVE concerns the node-tmp package (tmp) used by Node.js apps. In v0.2.6, a guard in the _assertPath function rejects only string values containing the substring "..", but the bypass occurs when prefix/postfix/template are provided as non-string values (e.g., Array, Buffer, or objects) whose i...

8.2CVSS6.1AI score0.006EPSS
SaveExploits1References1Affected Software1
EUVD
EUVD
•added 2025/10/07 12:30 a.m.•17 views

EUVD-2014-0143

Malware in sbrugna...

7.8CVSS7.5AI score0.00388EPSS
SaveExploits0References5
RedhatCVE
RedhatCVE
•added 2025/05/22 2:25 a.m.•14 views

CVE-2017-8418

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users...

3.3CVSS6.5AI score0.00409EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2022/05/17 4:58 a.m.•23 views

SaltStack insecurely uses /tmp

Unspecified vulnerability in salt-ssh in Salt aka SaltStack 0.17.0 has unspecified impact and vectors related to "insecure Usage of /tmp."...

10CVSS6.6AI score0.01458EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2017/10/06 3:29 p.m.•35 views

CVE-2014-0047

Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...

7.8CVSS7.7AI score0.00388EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2017/10/06 3:00 p.m.•39 views

CVE-2014-0047

Docker before 1.5 allows local users to have unspecified impact via vectors involving unsafe /tmp usage...

7.8AI score0.00388EPSS
SaveExploits0References3
CVE
CVE
•added 2017/10/06 3:00 p.m.•73 views

CVE-2014-0047

CVE-2014-0047 affects Docker before 1.5, where local users can cause unspecified impact via vectors involving unsafe /tmp usage. The available connected documents confirm the vulnerable condition and local-privilege context but do not provide concrete exploitation details or a confirmed fix/versi...

7.8CVSS7.7AI score0.00388EPSS
SaveExploits0References3Affected Software1
OSV
OSV
•added 2017/05/02 2:59 p.m.•17 views

DEBIAN-CVE-2017-8418

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users...

3.3CVSS6.5AI score0.00409EPSS
SaveExploits1References1
UbuntuCve
UbuntuCve
•added 2017/05/02 2:59 p.m.•22 views

CVE-2017-8418

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users...

3.3CVSS5.8AI score0.00409EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/05/02 12:00 a.m.•4 views

CVE-2017-8418: Exposure of Resource to Wrong Sphere

RuboCop 0.48.1 and earlier does not use /tmp in safe way, allowing local users to exploit this to tamper with cache files belonging to other users...

3.3CVSS5.8AI score0.00409EPSS
SaveExploits1References2
securityvulns
securityvulns
•added 2001/07/10 12:00 a.m.•44 views

ml85p - driver for Samsung ML-85G and /tmp

ml85p - driver for Samsung ML-85G GDI printers seems to use /tmp unsecurely. it seems to use the time function to determine the /tmp files name. root@linux exp strings /usr/bin/ml85p | grep tmp /tmp/ml85gd 401070dd iopl0x3 = 0 400cf2bd timeNULL = 994462668 40100cbf brk0 = 0x8064544 40100cbf...

SaveExploits0
Rows per page
Query Builder