Approved changes feed: RSS · Atom

cpe:2.3:a:singular:singular:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSingular (a50160eb-41c4-59aa-9ac0-277a6eb3bfb3)
ProductSingular (682b8ccb-2eb2-5004-95b3-931085776ef2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:composer/singular/singular purl2cpe 2026-06-01 10:13:16.225806
pkg:github/singular/singular purl2cpe 2026-06-01 10:13:16.225808

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40299 vulnerable 2026-06-08 05:48:24.631010 Details available
In Singular before 4.3.1, a predictable /tmp pathname is used (e.g., by sdb.cc), which allows local users to gain the privileges of other users via a procedure in a file under /tmp. NOTE: this CVE Record is about sdb.cc and similar files in the Singular interface that have predictable /tmp pathnames; this CVE Record is not about the lack of a safe temporary-file creation capability in the Singular language.
Published: 2022-09-09T00:18:03.000Z
Updated: 2024-08-03T12:14:40.045Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.