Xcfa Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Xcfa Project records in CISA KEV

No Xcfa Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2014-04290 CVE-2014-5255 · GHSA-mrc9-9rhm-fccj

LOW 31

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.

CVSS 3.1HIGH 7.0 Local Low privileges No interaction EPSS 0.00366 Published 2019-11-21 No fix listed CWE-362

TI-2014-04289 CVE-2014-5254 · GHSA-h7rq-6wgr-h57c

LOW 22

xcfa before 5.0.1 creates temporary files insecurely which could allow local users to launch a symlink attack and overwrite arbitrary files.

CVSS 3.1MEDIUM 4.7 Local Low privileges No interaction EPSS 0.00344 Published 2019-11-21 No fix listed CWE-362