Lucene search
+L

1269 matches found

OSV
OSV
•added 2019/12/04 7:15 p.m.•10 views

CVE-2019-19228

Fronius Solar Inverter devices before 3.14.1 HM 1.12.1 allow attackers to bypass authentication because the password for the today account is stored in the /tmp/webusers.conf file...

9.8CVSS6.9AI score0.02314EPSS
SaveExploits3References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/12/04 12:00 a.m.•0 views

CVE-2019-19228: Cleartext Storage of Sensitive Information

Fronius Solar Inverter devices before 3.14.1 HM 1.12.1 allow attackers to bypass authentication because the password for the today account is stored in the /tmp/webusers.conf file...

9.8CVSS7.1AI score0.01898EPSS
SaveExploits2References2
NVD
NVD
•added 2019/11/26 4:15 p.m.•32 views

CVE-2019-16241

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System application that implements the lock screen checks for the existence of a specific file and disables PIN authentication if it exists. Thi...

6.8CVSS6.7AI score0.00478EPSS
SaveExploits1References2
OSV
OSV
•added 2019/11/26 4:15 p.m.•15 views

CVE-2019-16241

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System application that implements the lock screen checks for the existence of a specific file and disables PIN authentication if it exists. Thi...

6.8CVSS6.6AI score0.00478EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/26 12:00 a.m.•1 views

CVE-2019-16241: Exposure of Resource to Wrong Sphere

On TCL Alcatel Cingular Flip 2 B9HUAH1 devices, PIN authentication can be bypassed by creating a special file within the /data/local/tmp/ directory. The System application that implements the lock screen checks for the existence of a specific file and disables PIN authentication if it exists. Thi...

6.8CVSS6.8AI score0.00478EPSS
SaveExploits1References2
NVD
NVD
•added 2019/11/22 7:15 p.m.•36 views

CVE-2014-6311

generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...

9.8CVSS9.6AI score0.01672EPSS
SaveExploits0References4
Prion
Prion
•added 2019/11/22 7:15 p.m.•27 views

Code injection

generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...

5CVSS7.2AI score0.01672EPSS
SaveExploits0References4Affected Software2
OSV
OSV
•added 2019/11/22 7:15 p.m.•16 views

UBUNTU-CVE-2014-6311

generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...

9.8CVSS7.3AI score0.01672EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/11/22 6:22 p.m.•30 views

CVE-2014-6311

generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...

9.6AI score0.01672EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2019/11/22 6:22 p.m.•48 views

CVE-2014-6311

generatedoygen.pl in ace before 6.2.7+dfsg-2 creates predictable file names in the /tmp directory which allows attackers to gain elevated privileges...

9.8CVSS8.6AI score0.01672EPSS
SaveExploits0
CVE
CVE
•added 2019/11/22 6:22 p.m.•137 views

CVE-2014-6311

The CVE-2014-6311 entry describes a privilege-escalation flaw in ace prior to 6.2.7+dfsg-2 where generate_doygen.pl creates predictable file names in /tmp. The documented impact is elevated privileges for attackers who can leverage these predictable names. Affected component: ace (script generate...

9.8CVSS9.5AI score0.01672EPSS
SaveExploits0References4Affected Software1
NVD
NVD
•added 2019/11/21 2:15 p.m.•22 views

CVE-2013-7171

Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges...

10CVSS9.8AI score0.06344EPSS
SaveExploits0References4
UbuntuCve
UbuntuCve
•added 2019/11/21 2:15 p.m.•35 views

CVE-2013-7171

Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges...

10CVSS7.5AI score0.06344EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2019/11/21 1:46 p.m.•27 views

CVE-2013-7171

Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges...

9.8AI score0.06344EPSS
SaveExploits0References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/21 12:00 a.m.•0 views

CVE-2013-7171: Improper Input Validation

Slackware 14.0 and 14.1, and Slackware LLVM 3.0-i486-2 and 3.3-i486-2, contain world-writable permissions on the /tmp directory which could allow remote attackers to execute arbitrary code with root privileges...

10CVSS8.8AI score0.06344EPSS
SaveExploits0References2
Veracode
Veracode
•added 2019/11/06 12:21 a.m.•22 views

Arbitrary File Overwrite

libqb is vulnerable to arbitrary file overwrite. An attacker is able to overwrite arbitrary files via a symlink attack due to the usage of predictable filenames under /dev/shm and /tmp without OEXCL...

7.1CVSS4.5AI score0.00655EPSS
SaveExploits1References13Affected Software1
OSV
OSV
•added 2019/11/01 7:15 p.m.•19 views

DEBIAN-CVE-2013-0180

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds...

5.5CVSS5.7AI score0.00323EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2019/11/01 7:15 p.m.•6 views

CVE-2013-0180

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds...

5.5CVSS5.5AI score0.00323EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
•added 2019/11/01 12:00 a.m.•14 views

PT-2019-6829 · Red Hat · Openshift

Name of the Vulnerable Software and Affected Versions: OpenShift affected versions not specified Description: The issue is related to the improper creation of files in /tmp by the dump.sh script in the cartridges/openshift-origin-cartridge-mongodb-2.2/info/bin directory of OpenShift...

7.5CVSS7AI score0.00813EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/11/01 12:00 a.m.•3 views

CVE-2013-0180: Improper Input Validation

Insecure temporary file vulnerability in Redis 2.6 related to /tmp/redis.ds...

5.5CVSS6AI score0.00323EPSS
SaveExploits0References2
Rows per page
Query Builder