coreutils (>=0.0.14, <=0.0.16), findutils (>=0.3.0, <=0.4.0) +104 more potentially affected by CVE-2026-35362 via uucore (>=0.0.4, <=0.0.17)

uucore CARGO version =0.0.4, =0.0.14, =0.3.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.8, =0.0.1, =0.0.8, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =0.0.16 and more Source cves: CVE-2026-35362 Source advisory: OSV:GHSA-W6XC-G9QJ-VP32...

CVE-2026-35362

The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...

CVE-2026-35362

The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...

CVE-2026-35362

The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...

CVE-2026-35362

The CVE-2026-35362 entry concerns the safe_traversal module in uutils coreutils, which is described as failing to provide TOCTOU protections on non-Linux Unix-like systems (e.g., macOS, FreeBSD). The vulnerability, as stated, affects directory traversal operations due to the lack of these protect...

CVE-2026-35362

The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...

Linux Distros Unpatched Vulnerability : CVE-2026-35362

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of- Use TOCTOU symlink races using file-descriptor-relativ...

MAL-2025-35362 Malicious code in test-mlw2-fools-owlet (npm)

The package test-mlw2-fools-owlet was found to contain malicious code...

CVE-2020-35362

DEXT5Upload 2.7.1262310 and earlier is affected by Directory Traversal in handler/dext5handler.jsp. This could allow remote files to be downloaded via a dext5CMD=downloadRequest action with traversal in the fileVirtualPath parameter the attacker must provide the correct fileOrgName value...

CVE-2024-35362

creationtimestamp| type| source ---|---|--- 2025-03-27 21:27:59+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/9230...

CVE-2024-35362

Ecshop 3.6 is vulnerable to Cross Site Scripting XSS via ecshop/articlecat.php...

CVE-2024-35362

Ecshop 3.6 is vulnerable to Cross Site Scripting XSS via ecshop/articlecat.php...

CVE-2024-35362

Ecshop 3.6 is vulnerable to Cross Site Scripting XSS via ecshop/articlecat.php...

CVE-2024-35362

Ecshop version 3.6 is vulnerable to a Reflective Cross-Site Scripting (XSS) vulnerability within the ecshop/article_cat.php file. An attacker could potentially inject malicious scripts into the website, which may affect user sessions. As of the current documentation, no patch or newer version con...

CVE-2023-35362

creationtimestamp| type| source ---|---|--- 2023-07-11 22:36:05+00:00| seen| https://t.me/cibsecurity/66435...

CVE-2023-35362 Windows Clip Service Elevation of Privilege Vulnerability

...

CVE-2023-35362

Technical details for CVE-2023-35362 are not publicly provided in the supplied documents. Monitor for updates from Microsoft and CVE repositories.

CVE-2022-35362

...

CVE-2022-35362

CVE-2022-35362 is rejected/not used per the initial description.

CVE-2020-35362

CVE-2020-35362 affects DEXT5Upload 2.7.1262310 and earlier. The issue is Directory Traversal in handler/dext5handler.jsp, allowing remote files to be downloaded via a dext5CMD=downloadRequest action when traversal is used in the fileVirtualPath parameter and the attacker provides the correct file...