CVE-2014-2277
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2014-2277
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The make_temporary_filename function in perltidy 20120701-1 and earlier allows local users to obtain sensitive information or write to arbitrary files via a symlink attack, related to use of the tmpnam function.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Perl Perltidy 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Perl perlpritic是一个Perl源代码分析器；check-all-the-things是一个代码错误检查软件。Perltidy是其中的一套由软件开发者Steve Hancock所研发的Perl代码整理工具。 Perl Perltidy 20120701-1及之前的版本中的‘make_temporary_filename’函数存在不安全临时文件创建漏洞。本地攻击者可利用该漏洞实施符号链接攻击，破坏敏感文件或获取敏感信息的访问权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2014-2277
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2014-2277
Please Login to view more intelligence information
- https://bugzilla.redhat.com/show_bug.cgi?id=1074720x_refsource_CONFIRM
- http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130479.htmlvendor-advisoryx_refsource_FEDORA
- http://lists.fedoraproject.org/pipermail/package-announce/2014-March/130464.htmlvendor-advisoryx_refsource_FEDORA
- https://nvd.nist.gov/vuln/detail/CVE-2014-2277
Same Patch Batch · n/a · 2017-10-17 · 26 CVEs total
| CVE-2015-7806 | WordPress Form Manager插件安全漏洞 | |
| CVE-2017-9625 | Envitech EnviDAS Ultimate 授权问题漏洞 | |
| CVE-2017-15565 | Poppler 安全漏洞 | |
| CVE-2017-14013 | ProMinent MultiFLEX M10a Controller Web界面安全漏洞 | |
| CVE-2017-14011 | ProMinent MultiFLEX M10a Controller Web界面跨站请求伪造漏洞 | |
| CVE-2017-14009 | ProMinent MultiFLEX M10a Controller Web界面信息泄露漏洞 | |
| CVE-2017-14007 | ProMinent MultiFLEX M10a Controller Web界面安全漏洞 | |
| CVE-2017-14005 | ProMinent MultiFLEX M10a Controller Web界面安全漏洞 | |
| CVE-2017-13999 | Wecon LEVI Studio HMI Editor 缓冲区错误漏洞 | |
| CVE-2017-15539 | zorovavi/blog SQL注入漏洞 | |
| CVE-2017-15538 | ILIAS Media Objects组件跨站脚本漏洞 | |
| CVE-2017-8805 | Debian ftpsync 安全漏洞 | |
| CVE-2017-15537 | Linux kernel x86/fpu(Floating Point Unit)子系统安全漏洞 | |
| CVE-2017-13087 | WPA和WPA2 安全特征问题漏洞 | |
| CVE-2014-9118 | Zhone Technologies zNID GPON 2426A 安全漏洞 | |
| CVE-2014-8357 | Zhone Technologies zNID GPON 2426A 安全漏洞 | |
| CVE-2014-2664 | X2Engine X2CRM 安全漏洞 | |
| CVE-2014-9733 | nw.js 安全漏洞 | |
| CVE-2014-9697 | 多款Huawei产品安全漏洞 | |
| CVE-2014-9678 | FlexPaper 安全漏洞 |
Showing top 20 of 26 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-6667
PgBouncer missing authorization check in KILL_CLIENT admin c - CVE-2026-6666
PgBouncer crash in kill_pool_logins_server_error - CVE-2026-6665
PgBouncer buffer overflow in SCRAM - CVE-2026-6664
PgBouncer integer overflow in PgBouncer network packet parsi - CVE-2026-8127
eladmin Users API Endpoint UserController.java checkLevel ac
V. Comments for CVE-2014-2277
No comments yet