Insecure cache directory creation
The VLC cache directory is created world-readable. Does not sound like a very good idea in terms of privacy.
This is probably valid for the the "VLC home" directory too, as it may contain password in vlcrc for instance.
Edited by Rémi Denis-Courmont