#cwe-378

共收录 6 条相关情报。

← 返回所有主题
漏洞预警2026-09-28 发布INFO

Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0777). On multi-user systems with a permissive umask, other local us...

CVE-2026-97026

Flatpak creates temporary child repository directories under the user cache with world-writable permissions (0777). On m

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-28 发布INFO

Flatpak writes the OCI repository authentication token with world-readable permissions (0644) in the system-helper's cache directory, allowing other local users on a multi-user ...

CVE-2026-97025

Flatpak writes the OCI repository authentication token with world-readable permissions (0644) in the system-helper's cac

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-22 发布INFO

Privilege escalation due to weak configuration while temporary file handling.

CVE-2026-25265

Privilege escalation due to weak configuration while temporary file handling.

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-10 发布INFO

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unprivileged attacker can read the contents of an osquery fil...

CVE-2026-46388

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unpr

历史摘要 · 未重新核验 · NVD

安全公告2026-05-18 发布INFO

In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow...

CVE-2026-4137

In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` cr

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-18 发布INFO

In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` creates temporary directories with world-writable permissio...

CVE-2026-4137

In mlflow/mlflow versions prior to 3.11.0, the `get_or_create_nfs_tmp_dir()` function in `mlflow/utils/file_utils.py` cr

历史摘要 · 未重新核验 · NVD