18 matches found
CVE-2026-35355
The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition during file installation. The implementation unlinks an existing destination file and then recreates it using a path-based operation without the OEXCL flag. A local attacker can exploit t...
DEBIAN-CVE-2026-35355
The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition during file installation. The implementation unlinks an existing destination file and then recreates it using a path-based operation without the OEXCL flag. A local attacker can exploit t...
Linux Distros Unpatched Vulnerability : CVE-2026-35355
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The install utility in uutils coreutils is vulnerable to a Time-of-Check to Time-of-Use TOCTOU race condition during file installation. The implementation unlin...
MAL-2025-35355 Malicious code in test-mlw2-flote-vegas-roper-caned (npm)
The package test-mlw2-flote-vegas-roper-caned was found to contain malicious code...
CVE-2024-35355
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=deletecategory. Manipulating the argument id can result in SQL injection...
CVE-2024-35355
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=deletecategory. Manipulating the argument id can result in SQL injection...
CVE-2024-35355
CVE-2024-35355 concerns Diño Physics School Assistant v2.3. The issue is in an unidentified code path under the file /classes/Master.php?f=delete_category, where manipulating the argument id enables an SQL injection. This is documented across multiple sources/collections and is associated with a ...
Microsoft Windows Multiple Vulnerabilities (KB5030219)
This host is missing an important security update according to Microsoft KB5030219 SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescriptio...
CVE-2023-35355
Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability...
CVE-2023-35355 Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability
...
CVE-2023-35355
CVE-2023-35355 is a Windows elevation-of-privilege vulnerability affecting the Windows Cloud Files Mini Filter Driver. The CVE is rated CVSSv3.1 base 7.8 (LOCAL exploit, LOW privileges required, no user interaction, HIGH impact to confidentiality, integrity, and availability) per Microsoft. Conne...
KB5030219: Windows 11 version 22H2 Security Update (September 2023)
The remote Windows host is missing security update 5030219. It is, therefore, affected by multiple vulnerabilities - Windows Themes Remote Code Execution Vulnerability CVE-2023-38146 - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2023-35355 - Windows GDI Elevati...
KB5030211: Windows 10 Version 21H2 / Windows 10 Version 22H2 Security Update (September 2023)
The remote Windows host is missing security update 5030211. It is, therefore, affected by multiple vulnerabilities - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2023-35355 - Windows GDI Elevation of Privilege Vulnerability CVE-2023-36804, CVE-2023-38161 - Windo...
KB5030217: Windows 11 version 21H2 Security Update (September 2023)
The remote Windows host is missing security update 5030217. It is, therefore, affected by multiple vulnerabilities - Windows Themes Remote Code Execution Vulnerability CVE-2023-38146 - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2023-35355 - Windows GDI Elevati...
KB5030216: Windows Server 2022 / Azure Stack HCI 22H2 Security Update (September 2023)
The remote Windows host is missing security update 5030216 or Azure Hot Patch 5030325. It is, therefore, affected by multiple vulnerabilities - Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability CVE-2023-35355 - DHCP Server Service Denial of Service Vulnerability...
CVE-2022-35355
CVE-2022-35355 is rejected/not used and does not represent an active vulnerability entry.
CVE-2024-35355
A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=deletecategory. Manipulating the argument id can result in SQL injection...