#cwe-377

共收录 35 条相关情报。

← 返回所有主题
漏洞预警2026-10-30 发布HIGH

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.1.19, Metalama.Framework and Metalama.Tool load and execu...

CVE-2026-62847

Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.

来源摘录 · NVD

漏洞预警2026-10-30 发布INFO

Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another user via a swapped partition config file. Partitioned depend...

CVE-2026-97209

Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another use

来源摘录 · NVD / OSV.dev

漏洞预警2026-10-27 发布INFO

A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary ...

CVE-2026-93864

A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution a

来源摘录 · NVD

安全公告2026-10-23 发布INFO

virtualenv: Temporary app-data can leave dangling seed package links

CVE-2026-113713

## Summary The app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-20 发布INFO

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder can leave an environment linked to temporary package fil...

CVE-2026-113713

virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder

历史摘要 · 未重新核验 · NVD

安全公告2026-10-14 发布INFO

Metalama allows local code execution through DLL planting in shared temporary directories

CVE-2026-62847

## Summary Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemb

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-10-14 发布INFO

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array...

CVE-2026-82715

Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-12 发布INFO

Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior to 3.0.1, src/ui/views/objectBrowser.ts stores Object Br...

CVE-2026-49484

Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior

历史摘要 · 未重新核验 · NVD

安全公告2026-10-07 发布INFO

yawkat LZ4 Java: Native library extraction to a shared temporary directory is vulnerable to file replacement by another local user

CVE-2026-106451

### Summary When no system-installed `liblz4-java` is found, `net.jpountz.util.Native.load()` extracts the bundled nati

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-10-06 发布INFO

yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.createTempFile to create an exclusive temporary .lck file bu...

CVE-2026-106451

yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.cre

历史摘要 · 未重新核验 · NVD

漏洞预警2026-10-01 发布INFO

Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable temporary files without first setting a restrictive umas...

CVE-2026-79899

Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-27 发布INFO

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file. Spring AI 2.0.0 Spring AI 1.1.0 - 1.1.8 Spring AI 1.0.0 ...

CVE-2026-47852

A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-25 发布INFO

Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the embedded Redis bootstrapper is vulnerable to an insecure temporary file flaw that lets a l...

CVE-2026-63404

Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the embedded Redis bootstrapper is vu

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-20 发布INFO

The application generates uploaded file names using a weak and predictable method based on the request timestamp. This allows a remote attacker to accurately guess or brute-forc...

CVE-2025-14602

The application generates uploaded file names using a weak and predictable method based on the request timestamp. This a

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts derive temporary filenames from Math.random...

CVE-2026-55086

Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/Exp

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-19 发布INFO

phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing sensitive files including database credentials. Unauthenti...

CVE-2026-75920

phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing s

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-18 发布INFO

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to version 4.2.0, db_sqlite.py created SQLite databases at pre...

CVE-2026-53759

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to ve

历史摘要 · 未重新核验 · NVD

安全公告2026-08-13 发布INFO

ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

CVE-2026-55086

## Description `src/node/handler/ImportHandler.ts` and `src/node/handler/ExportHandler.ts` both compute their temporary

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-13 发布INFO

A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a local unprivileged user to perform a symlink attack. By creat...

CVE-2026-73585

A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a loca

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布INFO

A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance migration by manipulating a temporary file in the `/tmp`...

CVE-2026-73584

A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance

历史摘要 · 未重新核验 · NVD