Vulnerabilities (CVE)

Filtered by CWE-668
Total 700 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2013-4561 1 Redhat 1 Openshift 2026-06-16 6.4 MEDIUM 9.1 CRITICAL
In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.
CVE-2013-4480 2 Redhat, Suse 5 Network Satellite, Satellite, Satellite With Embedded Oracle and 2 more 2026-06-16 7.5 HIGH N/A
Red Hat Satellite 5.6 and earlier does not disable the web interface that is used to create the first user for a satellite, which allows remote attackers to create administrator accounts.
CVE-2013-4374 1 Redhat 2 Jboss Operations Network, Rhq Mongo Db Drift Server 2026-06-16 3.6 LOW 7.1 HIGH
An insecurity temporary file vulnerability exists in RHQ Mongo DB Drift Server through 2013-09-25 when unpacking zipped files.
CVE-2013-4280 1 Redhat 3 Enterprise Virtualization, Storage, Virtual Desktop Server Manager 2026-06-16 2.1 LOW 5.5 MEDIUM
Insecure temporary file vulnerability in RedHat vsdm 4.9.6.
CVE-2013-4253 1 Redhat 1 Openshift 2026-06-16 N/A 7.5 HIGH
The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's authorized_keys file.
CVE-2013-2183 1 Monkey-project 1 Monkey 2026-06-16 3.6 LOW 7.1 HIGH
Monkey HTTP Daemon has local security bypass
CVE-2013-0163 1 Redhat 1 Openshift 2026-06-16 2.1 LOW 5.5 MEDIUM
OpenShift haproxy cartridge: predictable /tmp in set-proxy connection hook which could facilitate DoS
CVE-2012-5639 3 Apache, Debian, Libreoffice 3 Openoffice, Debian Linux, Libreoffice 2026-06-16 4.3 MEDIUM 6.5 MEDIUM
LibreOffice and OpenOffice automatically open embedded content
CVE-2012-1846 1 Google 1 Chrome 2026-06-16 10.0 HIGH N/A
Google Chrome 17.0.963.66 and earlier allows remote attackers to bypass the sandbox protection mechanism by leveraging access to a sandboxed process, as demonstrated by VUPEN during a Pwn2Own competition at CanSecWest 2012. NOTE: the primary affected product may be clarified later; it was not identified by the researcher, who reportedly stated "it really doesn't matter if it's third-party code."
CVE-2011-1960 1 Microsoft 6 Internet Explorer, Windows 7, Windows Server 2003 and 3 more 2026-06-16 4.3 MEDIUM N/A
Microsoft Internet Explorer 6 through 9 does not properly implement JavaScript event handlers, which allows remote attackers to access content from a different (1) domain or (2) zone via unspecified script code, aka "Event Handlers Information Disclosure Vulnerability."
CVE-2011-1258 1 Microsoft 6 Internet Explorer, Windows 7, Windows Server 2003 and 3 more 2026-06-16 4.3 MEDIUM N/A
Microsoft Internet Explorer 6 through 8 does not properly restrict web script, which allows user-assisted remote attackers to obtain sensitive information from a different (1) domain or (2) zone via vectors involving a drag-and-drop operation, aka "Drag and Drop Information Disclosure Vulnerability."
CVE-2009-5042 2 Debian, Python-docutils Project 2 Debian Linux, Python-docutils 2026-06-16 6.4 MEDIUM 9.1 CRITICAL
python-docutils allows insecure usage of temporary files
CVE-2008-7291 2 Debian, Gri Project 2 Debian Linux, Gri 2026-06-16 7.5 HIGH 9.8 CRITICAL
gri before 2.12.18 generates temporary files in an insecure way.
CVE-2008-2544 1 Linux 1 Linux Kernel 2026-06-16 2.1 LOW 5.5 MEDIUM
Mounting /proc filesystem via chroot command silently mounts it in read-write mode. The user could bypass the chroot environment and gain write access to files, he would never have otherwise.
CVE-2007-3915 1 Mandriva 1 Mondo 2026-06-16 6.4 MEDIUM 9.1 CRITICAL
Mondo 2.24 has insecure handling of temporary files.
CVE-2005-2351 2 Debian, Mutt 2 Debian Linux, Mutt 2026-06-16 2.1 LOW 5.5 MEDIUM
Mutt before 1.5.20 patch 7 allows an attacker to cause a denial of service via a series of requests to mutt temporary files.
CVE-2004-1489 1 Opera 1 Opera Browser 2026-06-16 2.6 LOW N/A
Opera 7.54 and earlier does not properly limit an applet's access to internal Java packages from Sun, which allows remote attackers to gain sensitive information, such as user names and the installation directory.
CVE-2001-0893 1 Acme 1 Mini Httpd 2026-06-16 5.0 MEDIUM N/A
Acme mini_httpd before 1.16 allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
CVE-2001-0892 1 Acme 1 Thttpd 2026-06-16 5.0 MEDIUM N/A
Acme Thttpd Secure Webserver before 2.22, with the chroot option enabled, allows remote attackers to view sensitive files under the document root (such as .htpasswd) via a GET request with a trailing /.
CVE-2023-37621 1 Fronius 1 Datalogger Web 2024-04-16 N/A N/A
An issue in Fronius Datalogger Web v.2.0.5-4, allows remote attackers to obtain sensitive information via a crafted request.