A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI...
CVE-2026-16791
A temporary file creation vulnerability in the Linux version of Lenovo XClarity Essentials OneCLI 5.5.0 and below could
#cwe-377
共收录 35 条相关情报。
← 返回所有主题Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to a predictable temporary path and followed symlinks, crea...
CVE-2026-62294
Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to
Flameshot: OCTOU symlink attack via predictable /tmp path in Flameshot "Open With"
CVE-2026-62294
Flameshot is powerful yet simple to use screenshot software. Prior to 14.0.0, the Open With feature wrote screenshots to
Linuxfabrik Monitoring Plugins allow insecure creation of SQLite databases
CVE-2026-53759
### Summary The SQLite databases are created at predictable (static) paths in `/tmp`. Any user can therefore create a sy
mktemp: empty TMPDIR creates temp files in CWD instead of /tmp
CVE-2026-35342
The mktemp utility in uutils coreutils fails to properly handle an empty TMPDIR environment variable. Unlike GNU mktemp,
Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a hardcoded, predictable path (/tmp/claude/response.md) witho...
CVE-2026-46406
Claude Code is an agentic coding tool. From 2.1.59 until 2.1.128, the Claude Code /copy command wrote responses to a ha
GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp utility is not available in the user’s PATH, gzexe falls back...
CVE-2026-41991
GNU gzip contains a vulnerability in the gzexe utility related to insecure temporary file handling. When the mktemp util
Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's data directory when no explicit path is configured. A local...
CVE-2026-41001
Spring Boot's ArtemisEmbeddedConfigurationFactory uses a fixed, static path for the embedded Artemis message broker's da
bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.12, there is an arbitrary file overwrite vulnerability...
CVE-2026-45384
bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4
CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by...
CVE-2026-49135
CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to acces
CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers to execute arbitrary commands as root by exploiting a rac...
CVE-2026-49134
CodexBar prior to 0.32.0 contains a privilege escalation vulnerability in the CLI installer that allows local attackers
In Spring AI, having access to a shared environment can expose the ONNX model used by the...
CVE-2026-40979
In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected version
In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected versions: Spring AI: 1.0.0 - 1.0.5 (fixed in 1.0.6), 1.1.0 - 1.1...
CVE-2026-40979
In Spring AI, having access to a shared environment can expose the ONNX model used by the application. Affected version
A local attacker on the same host as the application may be able to take control of the directory...
CVE-2026-40973
A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTe
A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTemp`. When `server.servlet.session.persistent` is set to `...
CVE-2026-40973
A local attacker on the same host as the application may be able to take control of the directory used by `ApplicationTe