Skip to contentCWE-377 vulnerabilities
- robocodeInsecure Temporary File Creation in Robocode's AutoExtract ComponentCVE-2025-14307Fix available9.3 Critical
- dell alienware command center 6.x (awcc), alienware command center +1 moreDell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure...CVE-2025-463697.8 High
- dell alienware command center 6.x (awcc), alienware command center +1 moreDell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0, contains an Insecure...CVE-2025-463686.6 Medium
- llamaindex, run-llama run-llama/llama index +1 moreWorld-Writable NLTK Cache Directory Vulnerability in run-llama/llama_indexCVE-2025-7707Fix available7.1 High
- magicmonty bash-git-promptbash-git-prompt 2.6.1 through 2.7.1 insecurely uses the /tmp/git-index-private$$ file, which has...CVE-2025-61659Fix available6.8 Medium
- vasion virtual appliance host, print application, print virtual appliance host +1 more +3 moreVasion Print (formerly PrinterLogic) Local Privilege Escalation via Insecure Temporary File HandlingCVE-2025-341948.5 High
- mihomo partyMihomo Party Socket sysproxy.ts enableSysProxy temp fileCVE-2025-94742.0 Low
- debian pycode-browserpycode-browser before version 1.0 is prone to a predictable temporary file vulnerability.CVE-2015-0849Fix available3.9 Low
- github.com/golang/glogVulnerability when creating log files in github.com/golang/glogCVE-2024-45339Fix available7.1 High
- opensuse tumbleweedFixed temporary file path in aeon-checks allows fixing of disk encryption keyCVE-2024-495067.3 High
- chidiwilliams buzzchidiwilliams buzz model_loader.py download_model temp fileCVE-2024-103722.0 Low
- eset, spol. s r.o. eset cyber security, eset endpoint security for macos +1 moreDenial of Service vulnerability in ESET products for macOSCVE-2024-66546.8 Medium
- getscreen, getscreen agent, point b ltd getscreen agent +2 morePoint B Ltd Getscreen Agent MSI Installer getscreen.msi temp fileCVE-2024-73588.5 High
- gnu nano, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreNano: running `chmod` and `chown` on the filename allows malicious user to replace the emergency file with a malicious symlink to a root-owned fileCVE-2024-5742Fix available6.7 Medium
- maximaIn Maxima through 5.47.0 before 51704c, the plotting facilities make use of predictable names...CVE-2024-34490Fix available5.1 Medium
- bpftraceIf kernel headers need to be extracted, bpftrace will attempt to load them from a temporary...CVE-2024-2313Fix available2.8 Low
- apple ipados, macos, watchos +2 more +4 moreA privacy issue was addressed with improved handling of temporary files. This issue is fixed in...CVE-2024-232875.5 Medium
- spring cloud contract, vmware spring cloud contract +1 moreSpring Cloud Contract vulnerable to local information disclosureCVE-2024-22236Fix available3.3 Low
- ubuntu budgie budgie extrasbudgie-extras vulnerabilitiesCVE-2023-49347Fix available6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilitiesCVE-2023-49346Fix available6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilitiesCVE-2023-49345Fix available6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilitiesCVE-2023-49344Fix available6.0 Medium
- ubuntu budgie budgie extrasbudgie-extras vulnerabilitiesCVE-2023-49342Fix available6.0 Medium
- jenkinsJenkins temporary uploaded file created with insecure permissionsCVE-2023-43498Fix available8.1 High
- rails activesupportActive Support Possibly Discloses Locally Encrypted FilesCVE-2023-38037Fix available5.5 Medium
- zoom rooms, zoom video communications inc rooms for windows +1 moreInsecure temporary file in the installer for Zoom Rooms before version 5.15.0 may allow an...CVE-2023-341198.2 High
- hutoolInsecure Temporary File in HuToolCVE-2023-33695Fix available7.1 High
- huggingface huggingface/transformers, transformers +1 moreInsecure Temporary File in huggingface/transformersCVE-2023-2800Fix available4.7 Medium
- dell supportassist, supportassist for business pcs, supportassist for home pcs +2 moreDell SupportAssist for Home PCs (version 3.11.4 and prior) and SupportAssist for Business PCs ...CVE-2022-343876.4 Medium
- java-merge-sort project java-merge-sortJava Merge-sort Insecure Temporary File vulnerabilityCVE-2022-24913Fix available5.5 Medium
- devent globalpom-utilsdevent globalpom-utils FileResourceManagerProvider.java createTmpDir temp fileCVE-2018-25068Fix available6.3 Medium
- centic9 jgit-cookbookcentic9 jgit-cookbook temp fileCVE-2022-48173.1 Low
- pig-vector project pig-vectorpig-vector LogisticRegression.java LogisticRegression temp fileCVE-2022-46412.5 Low
- joniles mpxjTemporary File Information Disclosure VulnerabilityCVE-2022-41954Fix available3.3 Low
- pgjdbc, postgresql jdbc driver, debian linux +2 moreTemporaryFolder on unix-like systems does not limit access to created files in pgjdbcCVE-2022-41946Fix available4.7 Medium
- openkmOpenKM FileUtils.java getFileExtension temp fileCVE-2022-39692.6 Low
- manydesigns portofinoManyDesigns Portofino WarFileLauncher.java createTempDir temp fileCVE-2022-3952Fix available2.6 Low
- red hat openshiftThe deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat...CVE-2013-42537.5 High
- smokepingIn the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a...CVE-2017-201476.5 Medium
- redhat ansible runneransible-runner vulnerable to Race ConditionCVE-2021-3702Fix available6.3 Medium
- rapid7 velociraptorFilesystem race on temporary filesCVE-2022-356315.5 Medium
- redhat openshiftIn a openshift node, there is a cron job to update mcollective facts that mishandles a temporary...CVE-2013-45619.1 Critical
- inhand networks inrouter302, inhandnetworks inrouter302 firmware +1 moreA file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks...CVE-2022-218099.9 Critical
- vmware spring bootTemporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-bootCVE-2022-27772Public exploitFix available7.8 High
- waycrate swhkdInsecure Temporary File in SWHKDCVE-2022-27815Fix available7.8 High
- google llc data-transfer-project, google data transfer project +1 moreData-transfer-project information disclosure via tmp directoryCVE-2021-225725.5 Medium
- horovod, horovod horovod/horovod +1 moreInsecure Temporary File in horovod/horovodCVE-2022-0315Fix available8.2 High
- opensuse cscreen, factory +1 morecscreen: usage of fixed path /tmp/cscreen.debugCVE-2022-219455.1 Medium
- gnu grub2, suse opensuse factory, linux enterprise server 15 sp4 +2 moregrub2-once uses fixed file name in /var/tmpCVE-2021-46705Fix available5.1 Medium
- mozilla firefox esr, thunderbird +1 morePreviously Firefox for macOS and Linux would download temporary files to a user-specific...CVE-2022-26386Fix available6.5 Medium
- Show moreLoading…