CVE-2014-5254 (xcfa)

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.

View Full Alert

Related Posts

  • CVE-2014-10381

    The user-domain-whitelist plugin before 1.5 for WordPress has CSRF. View Full Alert

  • CVE-2014-10376

    The i-recommend-this plugin before 3.7.3 for WordPress has SQL injection. View Full Alert

  • CVE-2014-10377

    The cforms2 plugin before 13.2 for WordPress has XSS in lib_ajax.php. View Full Alert