# CWE-379. Every Advisory and CVE whose sources give the weakness CWE-379, newest first. ## Records, newest first (an older page) - [Adobe Premiere Elements Privilege Escalation Vulnerability](https://agentprime.io/advisories/CVE-2021-28623.md) `CVE-2021-28623` · CVE record: Adobe Premiere · CVSS 6.2 Medium · Not analysed yet · Published 28 Jun 2021 · Tags: CWE-379 - [Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link](https://agentprime.io/advisories/CVE-2021-28597.md) `CVE-2021-28597` · CVE record: Adobe Photoshop Elements · CVSS 6.2 Medium · Not analysed yet · Published 28 Jun 2021 · Tags: CWE-379 - [Creation of Temporary File in Directory with Insecure Permissions in auto-generated Java, Scala code](https://agentprime.io/advisories/GHSA-cqxr-xf2w-943w.md) `GHSA-cqxr-xf2w-943w`, `CVE-2021-21430` · Maven `org.openapitools:openapi-generator`: affected `<5.1.0`, fixed in `5.1.0` · CVSS 6.2 Medium · Not analysed yet · Published 11 May 2021 · Tags: Privilege escalation, Information disclosure, CWE-377, CWE-378 - [Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI-Generator online generator](https://agentprime.io/advisories/GHSA-23x4-m842-fmwf.md) `GHSA-23x4-m842-fmwf`, `CVE-2021-21428` · Maven `org.openapitools:openapi-generator-online`: affected `<5.1.0`, fixed in `5.1.0` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 11 May 2021 · Tags: Privilege escalation, Information disclosure, CWE-377, CWE-378 - [Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19](https://agentprime.io/advisories/GHSA-p826-8vhq-h439.md) `GHSA-p826-8vhq-h439`, `CVE-2021-31411` · Maven `com.vaadin:vaadin-bom`: affected `>=14.0.3, <14.5.3 || >=15.0.0, <19.0.5`, fixed in `14.5.3`, `19.0.5` · CVSS 6.3 Medium · Not analysed yet · Published 6 May 2021 · Tags: CWE-379 - [Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19](https://agentprime.io/advisories/GHSA-c57f-4vp2-jqhm.md) `GHSA-c57f-4vp2-jqhm` · Maven `com.vaadin:flow-server`: affected `>=2.0.9, <2.5.3 || >=3.0.0, <6.0.6`, fixed in `2.5.3`, `6.0.6` · CVSS 6.3 Medium · Not analysed yet · Published 6 May 2021 · Tags: CWE-379 - [Creation of Temporary File in Directory with Insecure Permissions in the OpenAPI Generator Maven plugin](https://agentprime.io/advisories/GHSA-867q-77cc-98mv.md) `GHSA-867q-77cc-98mv`, `CVE-2021-21429` · Maven `org.openapitools:openapi-generator-maven-plugin`: affected `<5.1.0`, fixed in `5.1.0` · CVSS 4.0 Medium · Not analysed yet · Published 29 Apr 2021 · Tags: Information disclosure, CWE-377, CWE-378, CWE-379 - [Local information disclosure via system temporary directory](https://agentprime.io/advisories/GHSA-c43q-5hpj-4crv.md) `GHSA-c43q-5hpj-4crv`, `CVE-2021-28168` · Maven `org.glassfish.jersey.core:jersey-common`: affected `>=2.28, <2.34 || >=3.0.0, <3.0.2`, fixed in `2.34`, `3.0.2` · CVSS 6.2 Medium · Not analysed yet · Published 23 Apr 2021 · Tags: Information disclosure, Broken access control, CWE-378, CWE-379 - [Adobe Digital Editions Arbitrary file system write vulnerability](https://agentprime.io/advisories/CVE-2021-21100.md) `CVE-2021-21100` · CVE record: Adobe Digital Editions · CVSS 7.8 High · Not analysed yet · Published 15 Apr 2021 · Tags: CWE-379 - [Local privilege escalation through system temporary directory](https://agentprime.io/advisories/CVE-2021-29428.md) `CVE-2021-29428` · CVE record: gradle gradle · CVSS 8.8 High · Not analysed yet · Published 13 Apr 2021 · Tags: CWE-378, CWE-379 - [Adobe Creative Cloud installer arbitrary file overwrite vulnerability](https://agentprime.io/advisories/CVE-2021-21068.md) `CVE-2021-21068` · CVE record: Adobe Creative Cloud (desktop component) · CVSS 6.1 Medium · Not analysed yet · Published 12 Mar 2021 · Tags: CWE-379 - [Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directory](https://agentprime.io/advisories/GHSA-pc22-3g76-gm6j.md) `GHSA-pc22-3g76-gm6j`, `CVE-2021-21363` · Maven `io.swagger:swagger-codegen`: affected `<2.4.19`, fixed in `2.4.19` · CVSS 5.3 Medium · Not analysed yet · Published 11 Mar 2021 · Tags: CWE-378, CWE-379 - [Local Information Disclosure Vulnerability](https://agentprime.io/advisories/GHSA-2cxf-6567-7pp6.md) `GHSA-2cxf-6567-7pp6`, `CVE-2021-21331` · Maven `com.datadoghq:datadog-api-client`: affected `>=1.0.0-beta.6, <1.0.0-beta.9`, fixed in `1.0.0-beta.9` · CVSS 3.0 Low · Not analysed yet · Published 3 Mar 2021 · Tags: CWE-378, CWE-379 - [Local Information Disclosure Vulnerability in Netty on Unix-Like systems](https://agentprime.io/advisories/GHSA-5mcr-gq6c-3hq2.md) `GHSA-5mcr-gq6c-3hq2`, `CVE-2021-21290` · Maven `io.netty:netty` and 2 more: affected `*`, no fixed version yet · CVSS 6.2 Medium · Not analysed yet · Published 8 Feb 2021 · Tags: Information disclosure, CWE-378, CWE-379 - [Code injection in Apache Ant](https://agentprime.io/advisories/GHSA-f62v-xpxf-3v68.md) `GHSA-f62v-xpxf-3v68`, `BIT-gradle-2020-11979`, `CVE-2020-11979`, `GHSA-j45w-qrgf-25vm` · Maven `org.apache.ant:ant`: affected `<1.10.9`, fixed in `1.10.9` · CVSS 7.5 High · Not analysed yet · Published 3 Feb 2021 · Tags: Other injection, Code injection, CWE-379 - [Information Disclosure in Apache Groovy](https://agentprime.io/advisories/GHSA-rcjj-h6gh-jf3r.md) `GHSA-rcjj-h6gh-jf3r`, `CVE-2020-17521` · Maven `org.codehaus.groovy:groovy` and 1 more: affected `>=2.0.0, <2.4.21 || >=2.5.0, <2.5.14 || >=3.0.0, <3.0.7`, fixed in `2.4.21`, `2.5.14`, `3.0.7` · CVSS 5.5 Medium · Not analysed yet · Published 9 Dec 2020 · Tags: CWE-379 - [Local Temp Directory Hijacking Vulnerability](https://agentprime.io/advisories/GHSA-g3wg-6mcf-8jj6.md) `GHSA-g3wg-6mcf-8jj6`, `CVE-2020-27216` · Maven `org.eclipse.jetty:jetty-webapp` and 1 more: affected `<9.4.33.v20201020 || >=10.0.0.beta1, <10.0.0.beta3 || >=11.0.0.beta1, <11.0.0.beta3`, fixed in `9.4.33.v20201020`, `10.0.0.beta3`, `11.0.0.beta3` · CVSS 7.0 High · Not analysed yet · Published 4 Nov 2020 · Tags: Information disclosure, CWE-378, CWE-379 - [World writable root owned lock file created in user controllable location](https://agentprime.io/advisories/CVE-2020-8831.md) `CVE-2020-8831` · CVE record: Canonical Apport · CVSS 6.5 Medium · Not analysed yet · Published 22 Apr 2020 · Tags: CWE-379 - [On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoint because files are…](https://agentprime.io/advisories/CVE-2016-9486.md) `CVE-2016-9486` · CVE record: Microsoft Windows SecureConnector agent · No CVSS score · Not analysed yet · Published 13 Jul 2018 · Tags: CWE-379 - [Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation](https://agentprime.io/advisories/CVE-2013-1815.md) `CVE-2013-1815` · CVE record: Red Hat OpenStack Folsom for RHEL 6 and 2 more · CVSS 6.1 Medium · Not analysed yet · Published 10 Apr 2013 · Tags: CWE-379 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .