10213 matches found
CVE-2026-39822 Root escape via symlink plus trailing slash in os
On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a path is a symbolic link and the path ends in /. For example, 'root.Open"symlink/"' will open "symlink" even when "symlink" is a symbolic link pointing...
GHSA-QCXP-RJ5J-4RR9 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-gcp, linux-vmware, linux-qemu-melange, linux-aws...
GHSA-VCCQ-H5J4-92QR vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-gcp, linux-vmware, linux-qemu-melange, linux-aws...
GHSA-VG6G-9H68-878W vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-gcp, linux-vmware, linux-qemu-melange, linux-aws...
CVE-2026-53181 vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-gcp, linux-vmware, linux-qemu-melange, linux-aws...
GHSA-8CG3-6H68-W2CJ vulnerabilities
Vulnerabilities for packages: linux-azure, linux-qemu, linux-gcp, linux-vmware, linux-qemu-melange, linux-aws...
golang: Go os.Root: Symlink following vulnerability allows directory traversal
A flaw was found in the os.Root functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in os.Root with such a path, the symbolic link is...
ROS-20260708-73-0082
The vulnerability of the PostgreSQL database management system is related to integer overflow. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...
Symlink Attack
Overview std/os is a Go standard library package std/os Affected versions of this package are vulnerable to Symlink Attack. Go Vulnerability Report:On Unix systems, opening a file in an os.Root improperly follows symlinks to locations outside of the Root when the final path component of the a pat...
SUSE CVE-2026-58386
unknown...
CVE-2026-55204 vulnerabilities
Vulnerabilities for packages: haproxy...
SUSE CVE-2026-59674
A UNIX Symbolic Link Symlink Following vulnerability in openSUSE Tumbleweed suricata package allows the suricata user to escalate to root. This issue affects openSUSE Tumbleweed: from ? before 8.0.5-2.1; openSUSE Tumbleweed: from ? before 8.0.5-2.1...
ROS-20260707-73-0013
The vulnerability in libexif is related to integer overflow. Exploiting this vulnerability could allow an attacker to cause a service failure...
ROS-20260707-73-0053
The vulnerability in gpac is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2026-13698
A memory leak in OpenVPN version 2.5.0 through 2.5.11, 2.6.0 through 2.6.20 and 2.7alpha1 through 2.7.4 allows remote attackers with a valid tls-crypt-v2 client key to potentially cause a denial of service...
ROS-20260706-73-0053
The vulnerability in frr is related to the improper assignment of privileges. Exploiting this vulnerability can allow an attacker to enhance their privileges...
CVE-2026-14647
A weakness has been identified in onnx up to 1.21.x. This vulnerability affects the function convPoolShapeInferenceopset19 of the file onnx/defs/nn/old.cc of the component onnxruntime. This manipulation causes out-of-bounds read. It is possible to initiate the attack remotely. The exploit has bee...
CVE-2026-53362
In the Linux kernel, the following vulnerability has been resolved: ipv6: account for fraggap on the paged allocation path In ip6appenddata, when the paged-allocation branch is taken MSGMORE / NETIFFSG / large fraglen, alloclen and pagedlen are computed as alloclen = fragheaderlen + transhdrlen;...
SUSE CVE-2026-49852
joserfc is a Python library that provides an implementation of several JSON Object Signing and Encryption JOSE standards. Prior to 1.6.8, joserfc.jwt.decode accepts attacker-forged HMAC-signed tokens when the caller-supplied verification key is the empty string or None, because HMACAlgorithm.sign...