CVE-2026-18477

A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory being backed up to influence the restore process if the attacker has access to the system where the restore is being performed. During...

Linux Distros Unpatched Vulnerability : CVE-2026-18477

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A TOCTOU Time-of-Check Time-of-Use vulnerability in GNU tar's incremental dumpdir 'X' rename handling allows a local attacker with write access to a directory...

Moderate: Red Hat Security Advisory: Red Hat Hardened Images RPMs Security Update

An update for Red Hat Hardened Images RPMs is now available. This update includes the following RPMs: tar: tar-1.35-9.1.hum1 aarch64, x8664 tar-1.35-9.1.hum1.src src Security Fixes: tar: CVE-2026-18477...

CVE-2020-18477

SQL Injection vulnerability in Hucart CMS 5.7.4 via the purchase enquiry field found in the Message concontent field...

CVE-2020-18477

CVE-2020-18477 affects HuCartCMS 5.7.4. The vulnerability is an SQL injection in the Message con_content field used during purchase enquiries, enabling potentially unauthorized database access. Multiple connected sources (Red Hat advisory, CNVD CNVD-2021-68441, CNVD/CVELIST entries, and NVD entry...

CVE-2019-18477

CVE-2019-18477 is rejected/not used per the initial description.

CVE-2019-18477

...

CVE-2017-18477

CVE-2017-18477 : Affects cPanel before 62.0.4 where Exim transports could execute in the context of the nobody account (SEC-206). Root cause described as a context execution issue within Exim transports. Impact: potential privilege context exposure/run as nobody; document does not quantify additi...

Product update: Virtuozzo Infrastructure Platform 2.5 Update 5 (2.5.0-1639)

This update provides a new feature as well as stability and usability fixes. Vulnerability id: VSTOR-20558 The same data path ID was assigned to VLAN interfaces in OVS bridges. Vulnerability id: VSTOR-20913 Unable to update storage license. Vulnerability id: VSTOR-21089 Under certain circumstance...