Skip to contentCWE-377 vulnerabilities
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreInsecure Temporary File in mlflow/mlflowCVE-2022-0736Fix available8.2 High
- inria caml-lightcaml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make...CVE-2011-41199.8 Critical
- golang gogolang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym...CVE-2012-26669.8 Critical
- versa-networks versa operating systemIn VOS and overly permissive "umask" may allow for authorized users of the server to gain...CVE-2018-164948.8 High
- keycloakTemporary Directory Hijacking Vulnerability in KeycloakCVE-2021-20202Fix available7.3 High
- openapi-generator openapi generator, openapitools openapi-generator +1 moreCreation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala codeCVE-2021-21430Fix available6.2 Medium
- openapi-generator openapi generator, openapitools openapi-generator +1 moreCreation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generatorCVE-2021-21428Fix available9.3 Critical
- openapi-generator openapi generator, openapitools openapi-generator +1 moreCreation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven pluginCVE-2021-21429Fix available4.0 Medium
- gradle, quarkus +1 moreInformation disclosure through temporary directory permissionsCVE-2021-29429Fix available4.0 Medium
- netflix hollowInsecure temporary file in Netflix OSS HollowCVE-2021-280994.4 Medium
- netflix priamNetflix/Priam: Temporary Directory Information DisclosureCVE-2021-281005.5 Medium
- suse s390-tools, linux enterprise server 12-sp5, linux enterprise server 15-sp2 +2 moreLocal DoS of VM live migration due to use of static tmp files in detach_disks.sh in s390-toolsCVE-2021-25316Fix available3.3 Low
- apache oozieOozie local privilege escalationCVE-2020-354514.7 Medium
- opensuse cyrus-sasl, factory +1 moreLocal privilege escalation to root due to insecure tmp file usageCVE-2020-8032Fix available6.7 Medium
- suse caas platform, caas platform 4.5 +1 moreskuba: Insecure /tmp usage when joining node to clusterCVE-2020-80303.6 Low
- squareup connect java software development kitInsecure Temporary FileCVE-2021-233314.4 Medium
- redhat ansible, ansible community community collections +1 moreA flaw was found in Ansible Base when using the aws_ssm connection plugin as there is no namespace separation for file transfers. Files are written directly to the root bucket, making possible to have…CVE-2020-256366.6 Medium
- opensuse openldap2, leap 15.1, leap 15.2 +2 more +4 moreopenldap uses fixed paths in /tmpCVE-2020-8027Fix available7.3 High
- red hat ansible, redhat ansible tower +1 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in AnsibleCVE-2020-10744Fix available5.0 Medium
- palo alto networks pan-osPAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalationCVE-2020-20167.0 High
- palo alto networks pan-osPAN-OS: Predictable temporary file vulnerabilityCVE-2020-19944.1 Medium
- red hat ansible, redhat ansible engine, ansible tower +4 more +6 moreExposure of Resource to Wrong Sphere and Insecure Temporary File in AnsibleCVE-2020-10685Fix available5.0 Medium
- palo alto networks cortex xdr, traps +1 moreTraps: Insecure temporary file vulnerability may allow privilege escalation on WindowsCVE-2020-19917.8 High
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreExposure of Sensitive Information to an Unauthorized Actor and Insecure Temporary File in AnsibleCVE-2020-1740Fix available3.9 Low
- palo alto networks pan-osPAN-OS: Predictable temporary filename vulnerability allows local privilege escalationCVE-2020-19817.0 High
- red hat ansible, debian linux, fedoraproject fedora +3 more +5 moreAnsible vulnerable to Exposure of Resource to Wrong Sphere and Insecure Temporary FileCVE-2020-1733Fix available5.0 Medium
- apache hadoopHadoop symlink vulnerabilityCVE-2012-2945Fix available7.5 High
- opensuse yast2-multipathStatic tempfile name allows overwriting of arbitrary filesCVE-2018-17955Fix available2.2 Low
- opensuse supportutilsCode execution if run with command line switch -vCVE-2018-196404.4 Medium
- opensuse supportutilsUser can overwrite arbitrary log files in support tarCVE-2018-196382.2 Low
- opensuse supportutilsStatic temporary filename allows overwriting of filesCVE-2018-196372.8 Low
- mcafee agent, agent (ma) for linux +1 moreMcAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerabilityCVE-2018-67062.3 Low
- mcafee agent, agent (ma) for linux +1 moreMcAfee Agent (MA) for Linux Privilege Escalation vulnerabilityCVE-2018-67052.3 Low
- mcafee agent, agent (ma) for linux +1 moreMcAfee Agent for Linux Privilege Escalation vulnerabilityCVE-2018-67044.7 Medium
- foreman katello-debug, theforeman katello, redhat satellite +1 more +3 moreA flaw was found in katello-debug before 3.4.0 where certain scripts and log files used insecure...CVE-2016-95957.3 High
- sync-exec project sync-exec, hackerone sync-exec node module, nodejs node.js +2 moreTmp files readable by other users in sync-execCVE-2017-160246.5 Medium
- gitlab, gitlab community and enterprise editions, debian linux +2 moreGitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary...CVE-2018-37107.8 High
- postgresql, canonical ubuntu linux, debian linux +1 more +3 moreIn postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7...CVE-2018-1053Fix available7.0 High
- jdennis keycloak-httpd-client-installkeycloak-httpd-client-install symlink attack vulnerabilityCVE-2017-15111Fix available5.5 Medium
- openstack instack-undercloudinstack-undercloud vulnerable to symlink attack on tmp filesCVE-2017-7549Fix available6.4 Medium
- red hat, inc. rhnsdIt was found that rhnsd PID files are created as world-writable that allows local attackers to...CVE-2017-75605.5 Medium
- kernel util-linuxThe mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers...CVE-2015-5224Fix available9.8 Critical
- github hubHub Package Arbitrary File OverwriteCVE-2014-0177Fix available3.6 Low
- pocoo jinja2Insecure Temporary File in Jinja2CVE-2014-0012Fix available4.4 Medium
- python rplyRPLY Predictable Tmpfile Names Allows Cache SpoofingCVE-2014-1604Fix available2.1 Low
- phusion passenger, redhat openshift +1 morePhusion Passenger Denial of ServiceCVE-2013-2119Fix available4.6 Medium
- ryan davis ruby parserruby_parser allows local users to overwrite arbitrary files via symlink attack on temporary file with predictable nameCVE-2013-0162Fix available2.1 Low
- puppet, puppet enterprise, puppetlabs puppet enterprise users +2 morePuppet uses predictable filenames, allowing arbitrary file overwriteCVE-2012-1906Fix available3.3 Low
- phpmyadminphpMyAdmin unsafely handles temporary filesCVE-2008-7252Fix available10.0 High