#cwe-379

共收录 21 条相关情报。

← 返回所有主题
安全公告2026-10-30 发布MEDIUM

PHPUnit vulnerable to code execution by other local users via shared temporary directory in PHPT code coverage handling

CVE-2026-119193

### Summary When PHPT tests are run with code coverage, PHPUnit 13.4.0 to 13.4.3 writes the code of each PHPT test to a

来源摘录 · GitHub Advisory

漏洞预警2026-10-30 发布INFO

CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob() has the sqlite...

CVE-2026-118990

CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when takin

来源摘录 · NVD

漏洞预警2026-10-29 发布MEDIUM

PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory() logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT c...

CVE-2026-119193

PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory() logic in src/Ru

来源摘录 · NVD / GitHub Advisory

漏洞预警2026-09-14 发布INFO

In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIFOs) under a predictable path derived from the agent name ...

CVE-2026-86836

In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIF

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-08 发布HIGH

Creation of temporary file in directory with insecure permissions in Windows Error Reporting allows an authorized attacker to perform tampering locally.

CVE-2026-69482

CVE-2026-69482 涉及 Windows 错误报告 (Windows Error Reporting, WER) 组件在创建临时文件时使用了不安全权限的目录。该缺陷允许具备本地访问权限的授权攻击者对这些临时文件执行篡改操作,从而可

历史摘要 · 未重新核验 · NVD

漏洞预警2026-09-03 发布INFO

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component in AWS FPGA Development Kit (aws-fpga) before 2.3.4 migh...

CVE-2026-85028

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component

历史摘要 · 未重新核验 · NVD

安全公告2026-09-03 发布INFO

Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development Kit

CVE-2026-85028

Creation of a temporary file in a directory with insecure permissions in the FPGA management tool installation component

历史摘要 · 未重新核验 · OSV.dev

安全公告2026-08-31 发布INFO

A potential security vulnerability has been identified in the HP ImageDiags for versions prior to...

CVE-2026-82346

A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerab

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-31 发布INFO

A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerability could potentially allow a local attacker to escalat...

CVE-2026-82346

A potential security vulnerability has been identified in the HP ImageDiags for versions prior to 5.0.0.36. The vulnerab

历史摘要 · 未重新核验 · NVD

安全公告2026-08-24 发布INFO

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following')...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privile

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-08-24 发布INFO

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privileged attacker with local access could potentially exploit ...

CVE-2026-63693

Dell Client BIOS contains an Improper Link Resolution Before File Access ('Link Following') vulnerability. A low privile

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-24 发布INFO

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. These potential vulnerabilities may lead to escalation of pr...

CVE-2026-12555

Potential security vulnerabilities have been identified in HP Easy Start for macOS, versions prior to 2.16.7.260722. The

历史摘要 · 未重新核验 · NVD

漏洞预警2026-08-13 发布MEDIUM

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a latent gap exists on a default install, the file at `src/platf...

CVE-2026-50544

NortheBridge/luminalshine is a Sunshine-compatible game stream host for Moonlight. Prior to version 26.05.0-rc4, a laten

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-22 发布INFO

The servereye client (also known as sensorhub, technically ClientAgentContainerService) versions 20.15 and earlier are vulnerable to Local Privilege Escalation. The high-privile...

CVE-2026-14551

The servereye client (also known as sensorhub, technically ClientAgentContainerService) versions 20.15 and earlier are v

历史摘要 · 未重新核验 · NVD

漏洞预警2026-07-10 发布INFO

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unprivileged attacker can read the contents of an osquery fil...

CVE-2026-46388

osquery is a SQL powered operating system instrumentation, monitoring, and analytics framework. Prior to 5.23.1, an unpr

历史摘要 · 未重新核验 · NVD

安全公告2026-06-24 发布INFO

A potential security vulnerability has been identified in the HP Accessory WMI Provider installer...

CVE-2026-7539

A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking St

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-06-24 发布INFO

A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking Stations, which might allow escalation of privilege and/or ...

CVE-2026-7539

A potential security vulnerability has been identified in the HP Accessory WMI Provider installer for some HP Docking St

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-23 发布INFO

Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or git extension package installs used predictable paths under the operating sy...

CVE-2026-54328

Pi is a minimal terminal coding harness. From 0.74.0 until 0.78.1, Pi versions with temporary npm or git extension packa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-12 发布INFO

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol) exporter implementation. From 1.8.0 to 1.15.2, the OTLP disk retry feature in OpenTelemetry.Exp...

CVE-2026-42191

OpenTelemetry.Exporter.OpenTelemetryProtocol is the OTLP (OpenTelemetry Protocol) exporter implementation. From 1.8.0 to

历史摘要 · 未重新核验 · NVD

安全公告2026-04-30 发布INFO

OpenTelemetry's disk retry default temp path enables local blob injection via OTLP Exporter

CVE-2026-42191

### Summary The OTLP disk retry feature in `OpenTelemetry.Exporter.OpenTelemetryProtocol` silently fell back to `Path.G

历史摘要 · 未重新核验 · GitHub Advisory