CVE-2026-35357 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35357 vulnerabilities

Vulnerabilities for packages: uutils...

CVE-2026-35357

The cp utility in uutils coreutils is vulnerable to an information disclosure race condition. Destination files are initially created with umask-derived permissions e.g., 0644 before being restricted to their final mode e.g., 0600 later in the process. A local attacker can race to open the file...

DEBIAN-CVE-2026-35357

The cp utility in uutils coreutils is vulnerable to an information disclosure race condition. Destination files are initially created with umask-derived permissions e.g., 0644 before being restricted to their final mode e.g., 0600 later in the process. A local attacker can race to open the file...

UBUNTU-CVE-2026-35357

The cp utility in uutils coreutils is vulnerable to an information disclosure race condition. Destination files are initially created with umask-derived permissions e.g., 0644 before being restricted to their final mode e.g., 0600 later in the process. A local attacker can race to open the file...

MAL-2025-35357 Malicious code in test-mlw2-fluey-fates (npm)

The package test-mlw2-fluey-fates was found to contain malicious code...

CVE-2020-35357 affecting package gsl for versions less than 2.8-1

CVE-2020-35357 affecting package gsl for versions less than 2.8-1. An upgraded version of the package is available that resolves this issue...

CVE-2024-35357

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=deleteitem. Manipulating the argument id can result in SQL injection...

Debian: Security Advisory (DLA-3985-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DLA 3985-1] gsl security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-3985-1 [email protected] https://www.debian.org/lts/security/ Adrian Bunk December 07, 2024 https://wiki.debian.org/LTS -...

Debian dla-3985 : gsl-bin - security update

The remote Debian 11 host has packages installed that are affected by a vulnerability as referenced in the dla-3985 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3985-1 [email protected] https://www.debian.org/lts/security/...

RHEL 8 : gsl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 8 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gsl: Stack buffer overflow in gslstatsquantilefromsorteddata CVE-2020-35357 Note that Nessus has not tested for thi...

RHEL 9 : gsl (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 9 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched. - gsl: Stack buffer overflow in gslstatsquantilefromsorteddata CVE-2020-35357 Note that Nessus has not tested for thi...

CVE-2024-35357

A vulnerability has been discovered in Diño Physics School Assistant version 2.3. The vulnerability impacts an unidentified code within the file /classes/Master.php?f=deleteitem. Manipulating the argument id can result in SQL injection...

CVE-2024-35357

Diño Physics School Assistant version 2.3 contains a SQL injection vulnerability in the delete_item path. The issue arises from unvalidated input passed through /classes/Master.php?f=delete_item with the id parameter, enabling SQL injection (public details confirm CVE-2024-35357 with a base score...

CVE-2023-35357

creationtimestamp| type| source ---|---|--- 2024-04-18 16:45:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/04/the-windows-registry-adventure-1.html 2024-12-19 18:03:00+00:00| seen| https://googleprojectzero.blogspot.com/2024/12/the-windows-registry-adventure-5-regf.html 2025-05-23...

openSUSE: Security Advisory for gsl (SUSE-SU-2023:3858-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for gsl (SUSE-SU-2023:3527-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM / 23.04 : GNU Scientific Library vulnerability (USN-6472-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS / 22.04 ESM / 23.04 host has packages installed that are affected by a vulnerability as referenced in the USN-6472-1 advisory. It was discovered that GNU Scientific Library incorrectly handled certain inputs. If a user or an automated system wer...

SUSE SLED12 / SLES12 Security Update : gsl (SUSE-SU-2023:4051-1)

The remote SUSE Linux SLED12 / SLEDSAP12 / SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4051-1 advisory. - CVE-2020-35357: Fixed a stack out of bounds read in gslstatsquantilefromsorteddata. bsc1214681 Tenable has extracted...