CWE-378 · 46 records
Creation of Temporary File With Insecure Permissions
CVEs in this class
46 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
37Monitor | CVE-2024-39872No exploit | A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).siemens · sinema remote connect server · CWE-378 | Critical9.3 | — | 0.4% | Jul 9, 2024 |
35Monitor | CVE-2025-27148No exploit | Gradle vulnerable to local privilege escalation through system temporary directorygradle · gradle · CWE-378 | High8.8 | — | 0.2% | Feb 25, 2025 |
35Monitor | CVE-2025-32438No exploit | Local privilege escalation in make-initrd-ngnixos · nixpkgs · CWE-378 | High8.8 | — | 0.1% | Apr 15, 2025 |
35Monitor | CVE-2026-25265No exploit | Creation of Temporary File with Insecure Permissions in Qualcomm Software Centerqualcomm · software center · CWE-378 | High8.8 | — | 0.0% | Sep 22, 2026 |
34Monitor | CVE-2024-7358No exploit | Point B Ltd Getscreen Agent Installation getscreen.msi temp filepoint b ltd · getscreen agent · CWE-378 | High8.5 | — | 0.2% | Aug 1, 2024 |
33Monitor | GHSA-9q8j-chc7-wpgpNo exploit | Duplicate Advisory: OpenClaw session transcript files were created without forced user-only permissionsnpm · openclaw · CWE-378 | High8.4 | — | — | Mar 29, 2026 |
31Monitor | CVE-2016-9485No exploit | On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privilforescout · secureconnector · CWE-378 | High7.8 | — | 1.3% | Jul 13, 2018 |
31Monitor | CVE-2021-25654No exploit | Avaya Aura Device Services Arbitrary Code Execution Vulnerabilityavaya · aura device services · CWE-378 | High7.8 | — | 0.7% | Jun 25, 2021 |
31Monitor | CVE-2021-29428No exploit | Local privilege escalation through system temporary directorygradle · gradle · CWE-378 | High7.8 | — | 0.5% | Apr 13, 2021 |
31Monitor | CVE-2021-1496No exploit | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilitiescisco · anyconnect secure mobility client · CWE-378 | High7.8 | — | 0.5% | May 6, 2021 |
31Monitor | CVE-2021-25314No exploit | hawk: Insecure file permissionssuse · hawk2 · CWE-378 | High7.8 | — | 0.3% | Apr 14, 2021 |
31Monitor | CVE-2021-1429No exploit | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilitiescisco · anyconnect secure mobility client · CWE-378 | High7.8 | — | 0.2% | May 6, 2021 |
31Monitor | CVE-2021-1426No exploit | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilitiescisco · anyconnect secure mobility client · CWE-378 | High7.8 | — | 0.2% | May 6, 2021 |
31Monitor | CVE-2021-1428No exploit | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilitiescisco · anyconnect secure mobility client · CWE-378 | High7.8 | — | 0.2% | May 6, 2021 |
31Monitor | CVE-2021-1427No exploit | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilitiescisco · anyconnect secure mobility client · CWE-378 | High7.8 | — | 0.2% | May 6, 2021 |
31Monitor | CVE-2022-24411No exploit | Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability.dell · emc powerscale onefs · CWE-378 | High7.8 | — | 0.2% | Apr 12, 2022 |
31Monitor | CVE-2021-1430No exploit | Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilitiescisco · anyconnect secure mobility client · CWE-378 | High7.8 | — | 0.2% | May 6, 2021 |
31Monitor | CVE-2024-42052No exploit | The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation.splashtop · streamer · CWE-378 | High7.8 | — | 0.2% | Jul 27, 2024 |
31Monitor | CVE-2026-4137No exploit | Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflowlfprojects · mlflow · CWE-378 | High7.8 | — | 0.1% | May 18, 2026 |
31Monitor | CVE-2025-38747No exploit | Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability.dell · supportassist os recovery · CWE-378 | High7.8 | — | 0.1% | Aug 6, 2025 |
31Monitor | CVE-2025-46685No exploit | Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability.dell · supportassist os recovery · CWE-378 | High7.8 | — | 0.1% | Jan 13, 2026 |
29Monitor | CVE-2020-27216No exploit | In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like syseclipse · jetty · CWE-378 | High7.0 | — | 4.3% | Oct 23, 2020 |
29Monitor | CVE-2025-4953No exploit | Podman: build context bind mountred hat · red hat enterprise linux 8 · CWE-378 | High7.4 | — | 0.6% | Sep 16, 2025 |
29Monitor | CVE-2025-7647No exploit | Insecure Temporary File Handling in run-llama/llama_indexrun-llama · run-llama/llama_index · CWE-378 | High7.3 | — | 0.1% | Sep 27, 2025 |
28Monitor | CVE-2021-21363No exploit | Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directorysmartbear · swagger-codegen · CWE-378 | High7.0 | — | 0.4% | Mar 10, 2021 |
- CVE-2024-3987237Monitor
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).
CriticalCVSS 9.3No exploitEPSS 0%siemens · sinema remote connect serverJul 9, 2024
- CVE-2025-2714835Monitor
Gradle vulnerable to local privilege escalation through system temporary directory
HighCVSS 8.8No exploitEPSS 0%gradle · gradleFeb 25, 2025
- CVE-2025-3243835Monitor
Local privilege escalation in make-initrd-ng
HighCVSS 8.8No exploitEPSS 0%nixos · nixpkgsApr 15, 2025
- CVE-2026-2526535Monitor
Creation of Temporary File with Insecure Permissions in Qualcomm Software Center
HighCVSS 8.8No exploitEPSS 0%qualcomm · software centerSep 22, 2026
- CVE-2024-735834Monitor
Point B Ltd Getscreen Agent Installation getscreen.msi temp file
HighCVSS 8.5No exploitEPSS 0%point b ltd · getscreen agentAug 1, 2024
- GHSA-9q8j-chc7-wpgp33Monitor
Duplicate Advisory: OpenClaw session transcript files were created without forced user-only permissions
HighCVSS 8.4No exploitnpm · openclawMar 29, 2026
- CVE-2016-948531Monitor
On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privil
HighCVSS 7.8No exploitEPSS 1%forescout · secureconnectorJul 13, 2018
- CVE-2021-2565431Monitor
Avaya Aura Device Services Arbitrary Code Execution Vulnerability
HighCVSS 7.8No exploitEPSS 0%avaya · aura device servicesJun 25, 2021
- CVE-2021-2942831Monitor
Local privilege escalation through system temporary directory
HighCVSS 7.8No exploitEPSS 0%gradle · gradleApr 13, 2021
- CVE-2021-149631Monitor
Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
HighCVSS 7.8No exploitEPSS 0%cisco · anyconnect secure mobility clientMay 6, 2021
- CVE-2021-2531431Monitor
hawk: Insecure file permissions
HighCVSS 7.8No exploitEPSS 0%suse · hawk2Apr 14, 2021
- CVE-2021-142931Monitor
Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
HighCVSS 7.8No exploitEPSS 0%cisco · anyconnect secure mobility clientMay 6, 2021
- CVE-2021-142631Monitor
Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
HighCVSS 7.8No exploitEPSS 0%cisco · anyconnect secure mobility clientMay 6, 2021
- CVE-2021-142831Monitor
Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
HighCVSS 7.8No exploitEPSS 0%cisco · anyconnect secure mobility clientMay 6, 2021
- CVE-2021-142731Monitor
Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
HighCVSS 7.8No exploitEPSS 0%cisco · anyconnect secure mobility clientMay 6, 2021
- CVE-2022-2441131Monitor
Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability.
HighCVSS 7.8No exploitEPSS 0%dell · emc powerscale onefsApr 12, 2022
- CVE-2021-143031Monitor
Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking Vulnerabilities
HighCVSS 7.8No exploitEPSS 0%cisco · anyconnect secure mobility clientMay 6, 2021
- CVE-2024-4205231Monitor
The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation.
HighCVSS 7.8No exploitEPSS 0%splashtop · streamerJul 27, 2024
- CVE-2026-413731Monitor
Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow
HighCVSS 7.8No exploitEPSS 0%lfprojects · mlflowMay 18, 2026
- CVE-2025-3874731Monitor
Dell SupportAssist OS Recovery, versions prior to 5.5.14.0, contain a Creation of Temporary File With Insecure Permissions vulnerability.
HighCVSS 7.8No exploitEPSS 0%dell · supportassist os recoveryAug 6, 2025
- CVE-2025-4668531Monitor
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability.
HighCVSS 7.8No exploitEPSS 0%dell · supportassist os recoveryJan 13, 2026
- CVE-2020-2721629Monitor
In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like sys
HighCVSS 7.0No exploitEPSS 4%eclipse · jettyOct 23, 2020
- CVE-2025-495329Monitor
Podman: build context bind mount
HighCVSS 7.4No exploitEPSS 0%red hat · red hat enterprise linux 8Sep 16, 2025
- CVE-2025-764729Monitor
Insecure Temporary File Handling in run-llama/llama_index
HighCVSS 7.3No exploitEPSS 0%run-llama · run-llama/llama_indexSep 27, 2025
- CVE-2021-2136328Monitor
Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory
HighCVSS 7.0No exploitEPSS 0%smartbear · swagger-codegenMar 10, 2021