#cwe-377
共收录 35 条相关情报。
← 返回所有主题 漏洞预警2026-10-30 发布HIGH
CVE-2026-62847
Metalama is a Roslyn-based open-source patterns and architecture toolkit for C#. Prior to 2025.1.18, 2026.0.25 and 2026.
来源摘录 · NVD
漏洞预警2026-10-30 发布INFO
CVE-2026-97209
Insecure Temporary File vulnerability in Mix deps.partition in Elixir allows a local user to execute code as another use
来源摘录 · NVD / OSV.dev
漏洞预警2026-10-27 发布INFO
CVE-2026-93864
A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution a
来源摘录 · NVD
安全公告2026-10-23 发布INFO
CVE-2026-113713
## Summary
The app-data seeder can leave an environment linked to temporary package files that virtualenv deletes when
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-20 发布INFO
CVE-2026-113713
virtualenv is a tool for creating isolated virtual python environments. From 21.14.8 until 21.14.10, the app-data seeder
历史摘要 · 未重新核验 · NVD
安全公告2026-10-14 发布INFO
CVE-2026-62847
## Summary
Metalama loaded and executed compile-time assemblies, auxiliary executable tools, and embedded helper assemb
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-10-14 发布INFO
CVE-2026-82715
Insecure Temporary File vulnerability in Hitachi Disk Array Driver for AIX and Hitachi Disk Array Driver for Virtual I/O
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-12 发布INFO
CVE-2026-49484
Code for IBM i is a Visual Studio Code extension for maintaining and compiling ILE languages on the IBMi platform. Prior
历史摘要 · 未重新核验 · NVD
安全公告2026-10-07 发布INFO
CVE-2026-106451
### Summary
When no system-installed `liblz4-java` is found, `net.jpountz.util.Native.load()` extracts the bundled nati
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-10-06 发布INFO
CVE-2026-106451
yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.cre
历史摘要 · 未重新核验 · NVD
漏洞预警2026-10-01 发布INFO
CVE-2026-79899
Fortra BoKS Manager contains an insecure temporary file vulnerability in bccgethostcert. The utility creates predictable
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-27 发布INFO
CVE-2026-47852
A local attacker on a multi-user host can pre-create the deterministic cache path and plant a malicious ONNX model file.
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-25 发布INFO
CVE-2026-63404
Faktory is a language-agnostic background job server. In versions prior to 1.10.0, the embedded Redis bootstrapper is vu
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-20 发布INFO
CVE-2025-14602
The application generates uploaded file names using a weak and predictable method based on the request timestamp. This a
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2026-55086
Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/Exp
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-19 发布INFO
CVE-2026-75920
phpMyFAQ before v4.1.6 writes content backup ZIP archives to the web-accessible document root at content.zip, exposing s
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-18 发布INFO
CVE-2026-53759
linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations. Prior to ve
历史摘要 · 未重新核验 · NVD
安全公告2026-08-13 发布INFO
CVE-2026-55086
## Description
`src/node/handler/ImportHandler.ts` and `src/node/handler/ExportHandler.ts` both compute their temporary
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-08-13 发布INFO
CVE-2026-73585
A flaw was found in sblim-cmpi-base. Insecure temporary file creation in the provider registration scripts allows a loca
历史摘要 · 未重新核验 · NVD
漏洞预警2026-08-13 发布INFO
CVE-2026-73584
A flaw was found in sblim-sfcb. A local, low-privileged attacker can exploit a race condition during privileged instance
历史摘要 · 未重新核验 · NVD