Advisories · Weakness
CWE-340.
Every Advisory and CVE whose sources give the weakness CWE-340, newest first.
-
Puppet uses predictable filenames, allowing arbitrary file overwrite
- CWE-340
<2.6.11 || >=2.7.0, <2.7.5 · fixed in 2.6.11, 2.7.5
GHSA-mpmx-gm5v-q789 · CVE-2011-3871 - CVSS 7.8 High
Permissions bypass in pleaser
- Path traversal
- CWE-340
<0.4.0 · fixed in 0.4.0
GHSA-pp74-39w2-v4w9 · CVE-2021-31154 - CVSS 4.4 Medium
Ratpack's default client side session signing key is highly predictable
- Weak cryptography or TLS
- CWE-340
<1.9.0 · fixed in 1.9.0
GHSA-2cc5-23r7-vc4v · CVE-2021-29480 - CVSS 7.5 High
Predictable SIF UUID Identifiers in github.com/sylabs/sif
- Weak cryptography or TLS
- CWE-340
<1.2.3 · fixed in 1.2.3
GHSA-4gh8-x3vv-phhg · CVE-2021-29499 -
Facebook WhatsApp for Android: Media ContentProvider URIs used for opening attachments in other apps were generated…
- Facebook WhatsApp for Android
- CWE-340