Lucene search
+L

6 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/03/16 12:00 a.m.•7 views

CVE-2021-46705: Insecure Temporary File

A Insecure Temporary File vulnerability in grub-once of grub2 in SUSE Linux Enterprise Server 15 SP4, openSUSE Factory allows local attackers to truncate arbitrary files. This issue affects: SUSE Linux Enterprise Server 15 SP4 grub2 versions prior to 2.06-150400.7.1. SUSE openSUSE Factory grub2...

5.1CVSS5.6AI score0.0024EPSS
SaveExploits1References2
Mend
Mend
•added 2017/12/29 10:00 p.m.•4 views

CVE-2014-4978

The rsfiltergraph function in librawstudio/rs-filter.c in rawstudio might allow local users to truncate arbitrary files via a symlink attack on 1 /tmp/rs-filter-graph.png or 2 /tmp/rs-filter-graph...

6.8CVSS0.0041EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
•added 2017/12/29 12:00 a.m.•6 views

PT-2017-5941

Name of the Vulnerable Software and Affected Versions: rawstudio affected versions not specified Description: The issue concerns the rs filter graph function in librawstudio/rs-filter.c, which might allow local users to truncate arbitrary files via a symlink attack on temporary files...

5.5CVSS0.0041EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2008/02/12 12:00 a.m.•6 views

CVE-2008-0673: Undefined Security Weakness

TinTin++ 1.97.9 and WinTin++ 1.97.9 open files on the basis of an inbound file-transfer request, before the user has an opportunity to decline the request, which allows remote attackers to truncate arbitrary files in the top level of a home directory...

7.5CVSS5.9AI score0.02602EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/11/08 12:00 a.m.•10 views

CVE-2007-3921: Improper Link Resolution Before File Access

gforge 3.1 and 4.5.14 allows local users to truncate arbitrary files via a symlink attack on temporary files...

3.3CVSS5.8AI score0.00301EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2007/06/22 12:00 a.m.•9 views

CVE-2007-3337: Undefined Security Weakness

wakeup in Ingres database server 2006 9.0.4, r3, 2.6, and 2.5, as used in multiple CA Computer Associates products, allows local users to truncate arbitrary files via a symlink attack on the alarmwkp.def file...

2.1CVSS5.9AI score0.00355EPSS
SaveExploits5References1
Rows per page
Query Builder