← Back

Xcfa

xcfa

Vendor: Xcfa Project • 2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2014-5255
2Debian
Xcfa Project
2Debian Linux
Xcfa
Nov 21, 2024
Nov 21, 2019
N/A· v4
7.0 HIGH· v3
4.4 MEDIUM· v2
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files. Note: A different vulnerability than CVE-2014-5254.
CVE-2014-5254
1Xcfa Project
1Xcfa
Nov 21, 2024
Nov 21, 2019
N/A· v4
4.7 MEDIUM· v3
3.3 LOW· v2
xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.