Lucene search
+L

26 matches found

Prion
Prion
added 2020/09/11 12:15 a.m.22 views

Open redirect

On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the OEXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by...

2.1CVSS6.8AI score0.00504EPSS
Exploits0References2Affected Software1
Cvelist
Cvelist
added 2020/09/10 11:55 p.m.22 views

CVE-2014-1420 Insecure temp file usage in Ubuntu UI toolkit

On desktop, Ubuntu UI Toolkit's StateSaver would serialise data on tmp/ files which an attacker could use to expose potentially sensitive data. StateSaver would also open files without the OEXCL flag. An attacker could exploit this to launch a symlink attack, though this is partially mitigated by...

3.8CVSS4.1AI score0.00504EPSS
Exploits0References2
CVE
CVE
added 2020/09/10 11:55 p.m.72 views

CVE-2014-1420

The CVE-2014-1420 entry concerns Ubuntu UI Toolkit’s StateSaver, which serializes data to tmp/ files and can open files without O_EXCL, enabling a local symlink attack that could expose sensitive data. The issue is described as a local, low-severity vulnerability with partial mitigations due to U...

3.8CVSS3.8AI score0.00504EPSS
Exploits0References2Affected Software1
vulnersOsv
vulnersOsv
added 2019/02/18 11:48 p.m.5 views

native-ui-toolkit (>=0.0.1 <=0.0.4), nodehotkey (>=1.0.5 <=2.0.15) +2 more potentially affected by CVE-2016-10608 via robot-js (=2.0.0)

robot-js NPM version =2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on robot-js and may be impacted: - native-ui-toolkit =0.0.1, =1.0.5, =1.1.0, =1.0.0, =1.0.3 Source cves: CVE-2016-10608 Source advisory: OSV:GHSA-6V7P-J23V-4XMW...

9.3CVSS7.1AI score0.01611EPSS
Exploits0
Fedora
Fedora
added 2013/01/15 2:36 a.m.58 views

[SECURITY] Fedora 17 Update: pl-6.0.2-4.fc17

ISO/Edinburgh-style Prolog compiler including modules, auto-load, libraries, Garbage-collector, stack-expandor, C/C++-interface, GNU-readline interface, very fast compiler. Including packages clib Unix process control and sockets, cpp C++ interface, sgml reading XML/SGML, sgml/RDF reading RDF int...

7.5CVSS2.4AI score0.04019EPSS
Exploits0
OpenVAS
OpenVAS
added 2013/01/15 12:0 a.m.17 views

Fedora Update for pl FEDORA-2013-0211

Check for the Version of pl OpenVAS Vulnerability Test Fedora Update for pl FEDORA-2013-0211 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of the...

7.5CVSS6.4AI score0.04019EPSS
Exploits0References2
Rows per page
Query Builder