CWE-377

Insecure Temporary File

Parent: CWE-668 - Exposure of Resource to Wrong Sphere

Creating and using insecure temporary files can leave application and system data vulnerable to attack.

97 vulnerabilities with CWE-377
CVE-2025-7707 HIGH
Llama_index 0.12.33 - Info Disclosure
CVSS 7.8
CVE-2025-61659 MEDIUM
bash-git-prompt <2.7.1 - Info Disclosure
CVSS 6.8
CVE-2025-34194 HIGH
Vasion Print Virtual Appliance Host < 25.1.102 & Application < 25.1.1413 - Local Privilege Escalation
CVSS 7.8
CVE-2025-9474 MEDIUM
Mihomo Party <1.8.1 - Info Disclosure
CVSS 4.5
CVE-2024-49506 HIGH
System <non-default config> - DoS/Info Disclosure
CVE-2024-10372 MEDIUM
chidiwilliams buzz <1.1.0 - Info Disclosure
CVSS 4.5
CVE-2024-6654 MEDIUM
ESET Cyber Security and Endpoint Security for macOS - Denial of Service via Insecure Temporary File
CVE-2024-34490 MEDIUM
Maxima < 5.47.0 - Insecure Temporary File via Predictable /tmp Filenames
CVSS 5.1
CVE-2024-2313 LOW
bpftrace < 0.20.2 - Insecure Temporary File Handling in Kernel Header Extraction
CVSS 2.8
CVE-2024-23287 MEDIUM
iPadOS < 17.4 - Unprotected User Data Exposure via Temporary File Handling
CVSS 5.5
CVE-2024-22236 LOW
Spring Cloud Contract <4.1.1, <4.0.5, <3.1.10 - Info Disclosure
CVSS 3.3
CVE-2023-49347 MEDIUM
Budgie Extras Windows Previews - Info Disclosure
CVSS 6.0
CVE-2023-49346 MEDIUM
Budgie Extras WeatherShow - Info Disclosure
CVSS 6.0
CVE-2023-49345 MEDIUM
Budgie Extras Takeabreak - Info Disclosure
CVSS 6.0
CVE-2023-49344 MEDIUM
Budgie Extras Window Shuffler - Info Disclosure
CVSS 6.0
CVE-2023-49342 MEDIUM
Budgie Extras Clockworks - Info Disclosure
CVSS 6.0
CVE-2023-43498 HIGH
Jenkins <2.423-2.414.1 - Info Disclosure
CVSS 8.1
CVE-2023-2800 MEDIUM
huggingface/transformers <4.30.0 - Info Disclosure
CVSS 4.7
CVE-2022-34387 MEDIUM
Dell SupportAssist < 3.11.4 (Home) / < 3.2.0 (Business) - Privilege Escalation via Insecure Temporary File
CVSS 6.4
CVE-2022-24913 MEDIUM
java-merge-sort < 1.1.0 - Insecure Temporary File via StdTempFileProvider
CVSS 5.5
CVE-2022-4817 LOW
centic9 jgit-cookbook - Insecure Temp File
CVSS 3.1
CVE-2022-26386 MEDIUM
Firefox ESR < 91.7 - Info Disclosure
CVSS 6.5
CVE-2022-4641 LOW
pig-vector - Insecure Temporary File in LogisticRegression Function
CVSS 2.5
CVE-2022-41954 LOW
mpxj < 10.14.1 - Insecure Temporary File Permissions on Unix-like Systems
CVSS 3.3
CVE-2022-41946 MEDIUM
PostgreSQL JDBC Driver 42.2.0-42.2.27 - Insecure Temporary File Creation via InputStream Handling
CVSS 4.7
Details
Vulnerabilities 97