Approved changes feed: RSS · Atom

cpe:2.3:a:falktx:cadence:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFalktx (bb4d24fc-7967-5a94-ad72-e4d029f36125)
ProductCadence (f7c5eb0d-cb13-5a3a-9c53-4540e752a1d6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/falktx/cadence purl2cpe 2026-06-01 10:13:17.996242
pkg:rpm/fedora/Cadence purl2cpe 2026-06-01 10:13:17.996244
pkg:rpm/opensuse/cadence purl2cpe 2026-06-01 10:13:17.996246

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-43783 vulnerable 2026-06-08 06:12:38.001042 Details available
Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/cadence-wineasio.reg Temporary File. The filename is used even if it has been created by a local adversary before Cadence started. The adversary can leverage this to create or overwrite files via a symlink attack. In some kernel configurations, code injection into the Wine registry is possible.
Published: 2023-09-22T00:00:00.000Z
Updated: 2024-09-24T18:18:51.396Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-43782 vulnerable 2026-06-08 06:12:38.000562 Details available
Cadence through 0.9.2 2023-08-21 uses an Insecure /tmp/.cadence-aloop-daemon.x Temporary File. The file is used even if it has been created by a local adversary before Cadence started. The adversary can then delete the file, disrupting Cadence.
Published: 2023-09-22T00:00:00.000Z
Updated: 2024-09-24T18:19:55.663Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.