CWE-379

CWE-379 · 3 records · 2 with a public proof-of-concept

Records the NVD classes under CWE-379, highest CVSS first.

  1. MEDIUM 5.8CVE-2026-102740public PoC

    The AsyncHttpClient library allows Java applications to execute HTTP requests and asynchronously process HTTP responses. From 2.0.0 until 2.16.1 and 3.0.12, PropertiesBasedResumableProcessor stores resumable download state at the predictable shared path $java.…

    AI risk analysis on Exploit-DB.ai →

  2. UNSCOREDCVE-2026-118990

    CallBackery versions before 0.62.0 for Perl leave a world-readable dump of the configuration database in /tmp when taking a configuration backup. getConfigBlob() has the sqlite3 shell write the dump to /tmp/cbdump<pid> and never removes it. The file takes the…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-119193public PoC

    PHPUnit is a testing framework for PHP. From 13.4.0 until 13.4.4, the TestCase::coverageFilesDirectory() logic in src/Runner/Phpt/TestCase.php creates temporary files for PHPT code coverage in a predictable phpunit-phpt directory under sys_get_temp_dir() and r…

    AI risk analysis on Exploit-DB.ai →