CWE-377: CWE-377

This vulnerability in Versa Operating System (VOS) uses an overly permissive umask setting, allowing authorized users to access files and directories ...

This vulnerability allows attackers to exploit insecure temporary file creation in Robocode's AutoExtract component, potentially leading to arbitrary ...

This vulnerability in Jenkins allows attackers with file system access to read and write temporary files created during file uploads before Jenkins pr...

This vulnerability allows attackers to upload arbitrary malicious files to InHand Networks InRouter302 devices via the upload.cgi functionality. Explo...

Dell Alienware Command Center versions before 6.10.15.0 have an insecure temporary file vulnerability that allows local low-privileged attackers to es...

The llama_index library version 0.12.33 sets the NLTK data directory to a world-writable location by default, allowing local users to tamper with or d...

This CVE describes a logging vulnerability where sensitive user information was not properly redacted in system logs. Attackers with access to log fil...

CVE-2022-0315 is an insecure temporary file vulnerability in Horovod, a distributed deep learning framework. It allows local attackers to create or ov...

This CVE describes an insecure temporary file vulnerability in Altera Quartus Prime installers on Windows. Attackers can exploit predictable temporary...

This CVE describes an insecure temporary file vulnerability in Altera Quartus Prime Pro Installer on Windows where predictable file names are used. At...

This macOS vulnerability allows applications to access sensitive user data through improper handling of temporary files. It affects macOS systems befo...

This CVE describes an insecure temporary file usage vulnerability in Maxima's plotting facilities. A local attacker can create predictable filenames i...

This vulnerability in Mihomo Party up to version 1.8.1 on macOS allows local attackers to create temporary files with insecure permissions via the ena...

This vulnerability in the buzz library allows local attackers to manipulate temporary files created during model downloads, potentially leading to fil...

An insecure temporary file vulnerability in openSUSE sdbootutil allows local users to pre-create directories to manipulate sensitive data. This can le...