Creation of Temporary File With Insecure Permissions

Every one of the 43 is a mark on the map. Named now: 1 to 26, most at risk first.

1. In Eclipse Jetty versions 1.0 thru 9.4.32.v20200930, 10.0.0.alpha1 thru 10.0.0.beta2, and 11.0.0.alpha1 thru 11.0.0.beta2O, on Unix like systems, the system's temporary directory…CVE-2020-27216The Eclipse Foundation · 4.4% likely

   Eclipse Foundation

2. Local Information Disclosure Vulnerability in Netty on Unix-Like systems due temporary filesCVE-2021-21290netty · CVSS 6.2 · 1.8% likely

   Netty

3. On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoin…CVE-2016-9485Microsoft · 1.3% likely

   Microsoft

4. Temp directory permission issue in GuavaCVE-2020-8908Google LLC · CVSS 3.3 · 0.9% likely

   Google

5. Eclipse Jersey 2.28 to 2.33 and Eclipse Jersey 3.0.0 to 3.0.1 contains a local information disclosure vulnerability. This is due to the use of the File.createTempFile which create…CVE-2021-28168The Eclipse Foundation · CVSS 6.2 · 0.9% likely

   Eclipse Foundation

6. Avaya Aura Device Services Arbitrary Code Execution VulnerabilityCVE-2021-25654Avaya · CVSS 6.2 · 0.8% likely

   Avaya

7. Podman: build context bind mountCVE-2025-4953Redhat · CVSS 7.4 · 0.7% likely

   Red Hat

8. Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesCVE-2021-1496Cisco · CVSS 7 · 0.5% likely

   Cisco

9. A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected application does not properly assign rights to temporary files created…CVE-2024-39872Siemens · CVSS 9.6 · 0.5% likely

   Siemens

10. Apache Hadoop: Temporary File Local Information DisclosureCVE-2024-23454Apache Software Foundation · CVSS 6.2 · 0.4% likely

    Apache

11. hawk: Insecure file permissionsCVE-2021-25314SUSE · CVSS 7.8 · 0.4% likely

    SUSE

12. NETSCOUT nGeniusONE before 6.4.0 b2350 allows Arbitrary File Creation by authenticated users.CVE-2025-32979Netscout · CVSS 6.5 · 0.4% likely

    Netscout

13. Point B Ltd Getscreen Agent MSI Installer getscreen.msi temp fileCVE-2024-7358Point B Ltd · CVSS 7.8 · 0.3% likely
14. In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that…CVE-2023-0482Redhat · CVSS 5.5 · 0.3% likely

    Red Hat

15. Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesCVE-2021-1429Cisco · CVSS 7 · 0.2% likely

    Cisco

16. Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesCVE-2021-1428Cisco · CVSS 7 · 0.2% likely

    Cisco

17. Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesCVE-2021-1427Cisco · CVSS 7 · 0.2% likely

    Cisco

18. Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesCVE-2021-1426Cisco · CVSS 7 · 0.2% likely

    Cisco

19. Dell PowerScale OneFS 8.2.2 and above contain an elevation of privilege vulnerability. A local attacker with ISI_PRIV_LOGIN_SSH and/or ISI_PRIV_LOGIN_CONSOLE could potentially exp…CVE-2022-24411Dell · CVSS 7.8 · 0.2% likely

    Dell

20. Gradle vulnerable to local privilege escalation through system temporary directoryCVE-2025-27148gradle · CVSS 8.8 · 0.2% likely

    Gradle

21. Insecure permissions in Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell with Chime - firmware v3.0.0.4662_2503122283 allow attackers to arbitrarily change other users' passwords vi…CVE-2025-55629CVSS 6.5 · 0.2% likely
22. Cisco AnyConnect Secure Mobility Client for Windows DLL and Executable Hijacking VulnerabilitiesCVE-2021-1430Cisco · CVSS 7 · 0.2% likely

    Cisco

23. Zoom for MacOSclients prior to 5.14.0 contain an improper access control vulnerability. A malicious user may be able to delete/replace Zoom Client files potentially causing a loss…CVE-2023-28600Zoom Video Communications, Inc. · CVSS 5.2 · 0.2% likely

    Zoom Video Communications, Inc.

24. The MSI installer for Splashtop Streamer for Windows before 3.5.8.0 uses a temporary folder with weak permissions during installation. A local user can exploit this to escalate pr…CVE-2024-42052Splashtop · CVSS 7.8 · 0.2% likely

    Splashtop

25. Apache XML Graphics FOP: Temporary files on Unix-like systems are readable by other local usersCVE-2026-126627Apache Software Foundation · 0.2% likely

    Apache

26. In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that coul…CVE-2023-0481Quarkus · CVSS 3.3 · 0.2% likely

    Quarkus

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.