Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 22

Export CSV
CVE-2014-2524

readline: insecure temporary file use in _rl_tropen()

The _rl_tropen function in util.c in GNU readline before 6.3 patch 3 allows local users to create or overwrite arbitrary files via a symlink attack on a /var/tmp/rltrace.[PID] file.

CVSS 2.0 · 3.3 Low EPSS < 1% KEV · Not listed
Vendors
Fedoraproject Gnu Mageia and 1 more
Products
Fedora Readline Mageia and 1 more
CVE-2014-3429

IPython Notebook 0.12 through 1.x before 1.2 does not validate the origin of websocket requests, which allows remote attackers to execute arbitrary code by leveraging knowledge of the kernel id and a crafted page.

CVSS 2.0 · 6.8 Medium EPSS 4.7% KEV · Not listed
Vendors
Ipython Mageia Opensuse
Products
Ipython Notebook Mageia Opensuse