19 matches found
CVE-2026-35362
The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...
CVE-2026-35362
The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...
CVE-2026-35362
The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...
CVE-2026-35362
The CVE-2026-35362 entry concerns the safe_traversal module in uutils coreutils, which is described as failing to provide TOCTOU protections on non-Linux Unix-like systems (e.g., macOS, FreeBSD). The vulnerability, as stated, affects directory traversal operations due to the lack of these protect...
CVE-2026-35362
The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...
Linux Distros Unpatched Vulnerability : CVE-2026-35362
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of- Use TOCTOU symlink races using file-descriptor-relativ...
MAL-2025-35362 Malicious code in test-mlw2-fools-owlet (npm)
The package test-mlw2-fools-owlet was found to contain malicious code...
CVE-2020-35362
DEXT5Upload 2.7.1262310 and earlier is affected by Directory Traversal in handler/dext5handler.jsp. This could allow remote files to be downloaded via a dext5CMD=downloadRequest action with traversal in the fileVirtualPath parameter the attacker must provide the correct fileOrgName value...
CVE-2024-35362
creationtimestamp| type| source ---|---|--- 2025-03-27 21:27:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9230...
CVE-2024-35362
Ecshop 3.6 is vulnerable to Cross Site Scripting XSS via ecshop/articlecat.php...
CVE-2024-35362
Ecshop 3.6 is vulnerable to Cross Site Scripting XSS via ecshop/articlecat.php...
CVE-2024-35362
Ecshop 3.6 is vulnerable to Cross Site Scripting XSS via ecshop/articlecat.php...
CVE-2024-35362
Ecshop 3.6 is affected by a Cross-Site Scripting (XSS) flaw in ecshop/article_cat.php. Multiple sources (NVD, Red Hat, CVE records) confirm a reflective XSS issue reported for Ecshop 3.6. The CVSS v3.1 base score is 5.4 (Medium) with Network attack vector, required Privileges and User Interaction...
CVE-2023-35362
creationtimestamp| type| source ---|---|--- 2023-07-11 22:36:05+00:00| seen| https://t.me/cibsecurity/66435...
CVE-2023-35362
Technical details for CVE-2023-35362 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.
CVE-2023-35362 Windows Clip Service Elevation of Privilege Vulnerability
...
CVE-2022-35362
CVE-2022-35362 is rejected/not used per the initial description.
CVE-2020-35362
CVE-2020-35362 affects DEXT5Upload 2.7.1262310 and earlier. The issue is Directory Traversal in handler/dext5handler.jsp, allowing remote files to be downloaded via a dext5CMD=downloadRequest action when traversal is used in the fileVirtualPath parameter and the attacker provides the correct file...