CWE-377

Every one of the 97 is a mark on the map. Named now: 1 to 26, most at risk first.

1. The mkostemp function in login-utils in util-linux when used incorrectly allows remote attackers to cause file name collision and possibly other attacks.CVE-2015-5224CVSS 9.8 · 4.5% likely
2. Improper Handling and Insufficient Isolation of Specific Temporary Files in Splunk EnterpriseCVE-2026-20204Splunk · CVSS 7.1 · 3.2% likely

   Splunk

3. Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execution.CVE-2018-3710GitLab · 2.8% likely

   GitLab

4. The sync-exec module is used to simulate child_process.execSync in node versions <0.11.9. Sync-exec uses tmp directories as a buffer before returning values. Other users on the se…CVE-2017-16024HackerOne · 2.5% likely

   HackerOne

5. golang/go in 1.0.2 fixes all.bash on shared machines. dotest() in src/pkg/debug/gosym/pclntab_test.go creates a temporary file with predicable name and executes it as shell script.CVE-2012-2666go/golang · 1.9% likely
6. In VOS and overly permissive "umask" may allow for authorized users of the server to gain unauthorized access through insecure file permissions that can result in an arbitrary rea…CVE-2018-16494Versa-Networks · 1.9% likely
7. caml-light <= 0.75 uses mktemp() insecurely, and also does unsafe things in /tmp during make install.CVE-2011-4119caml-light · 1.9% likely
8. A file write vulnerability exists in the httpd upload.cgi functionality of InHand Networks InRouter302 V3.5.4. A specially-crafted HTTP request can lead to arbitrary file upload.…CVE-2022-21809InHand Networks · CVSS 9.9 · 1.8% likely

   InHand Networks

9. Insecure Temporary File in mlflow/mlflowCVE-2022-0736mlflow · CVSS 8.2 · 1.6% likely

   MLflow

10. In a openshift node, there is a cron job to update mcollective facts that mishandles a temporary file. This may lead to loss of confidentiality and integrity.CVE-2013-4561openshift-origin-msg-node-mcollective · 1.4% likely
11. In the ebuild package through smokeping-2.7.3-r1 for SmokePing on Gentoo, the initscript uses a PID file that is writable by the smokeping user. By writing arbitrary PIDs to that…CVE-2017-20147CVSS 6.5 · 1.0% likely
12. In Jenkins 2.423 and earlier, LTS 2.414.1 and earlier, processing file uploads using MultipartFormDataParser creates temporary files in the default system temporary directory with…CVE-2023-43498Jenkins Project · 1.0% likely

    Jenkins

13. Insecure Temporary File in horovod/horovodCVE-2022-0315horovod · CVSS 8.2 · 1.0% likely
14. devent globalpom-utils FileResourceManagerProvider.java createTmpDir temp fileCVE-2018-25068devent · CVSS 6.3 · 0.9% likely
15. The deployment script in the unsupported "OpenShift Extras" set of add-on scripts, in Red Hat Openshift 1, installs a default public key in the root user's authorized_keys file.CVE-2013-4253Red Hat Openshift · CVSS 7.5 · 0.7% likely
16. Previously Firefox for macOS and Linux would download temporary files to a user-specific directory in <code>/tmp</code>, but this behavior was changed to download them to <code>/t…CVE-2022-26386Mozilla · CVSS 6.5 · 0.7% likely

    Mozilla

17. A privacy issue was addressed with improved handling of temporary files. This issue is fixed in iOS 17.4 and iPadOS 17.4, macOS Sonoma 14.4, watchOS 10.4. An app may be able to ac…CVE-2024-23287Apple · CVSS 6.5 · 0.7% likely

    Apple

18. McAfee Agent (MA) non-Windows versions incorrect use of temporary file vulnerabilityCVE-2018-6706McAfee · CVSS 2.3 · 0.6% likely

    McAfee

19. OpenKM FileUtils.java getFileExtension temp fileCVE-2022-3969Openkm · CVSS 2.6 · 0.6% likely

    Openkm

20. PAN-OS: Temporary file race condition vulnerability in PAN-OS leads to local privilege escalationCVE-2020-2016Palo Alto Networks · CVSS 7 · 0.6% likely

    Palo Alto Networks

21. centic9 jgit-cookbook temp fileCVE-2022-4817centic9 · CVSS 3.1 · 0.6% likely
22. Information disclosure through temporary directory permissionsCVE-2021-29429gradle · CVSS 4 · 0.5% likely

    Gradle

23. In postgresql 9.3.x before 9.3.21, 9.4.x before 9.4.16, 9.5.x before 9.5.11, 9.6.x before 9.6.7 and 10.x before 10.2, pg_upgrade creates file in current working directory containi…CVE-2018-1053The PostgreSQL Global Development Group · 0.5% likely

    PostgreSQL Global Development Group

24. Static temporary filename allows overwriting of filesCVE-2018-19637SUSE · CVSS 2.8 · 0.5% likely

    SUSE

25. A logging issue was addressed with improved data redaction. This issue is fixed in iOS 26.3 and iPadOS 26.3, macOS Sequoia 15.8.2, macOS Tahoe 26.3, tvOS 26.3, watchOS 26.3. A use…CVE-2026-20649Apple · CVSS 5.5 · 0.5% likely

    Apple

26. Oozie local privilege escalationCVE-2020-35451Apache Software Foundation · 0.4% likely

    Apache

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.