Lucene search
+L

31522 matches found

OSV
OSV
added 2026/04/22 7:23 p.m.8 views

GHSA-J99G-7RQW-Q9JG nimiq-blockchain: Peer-triggerable panic during history sync

Impact HistoryStore::puthistorictxns uses an assert! to enforce invariants about HistoricTransaction.blocknumber must be within the macro block being pushed and within the same epoch. During history sync, a peer can influence the history: &HistoricTransaction input passed into...

5.3CVSS5.7AI score0.00242EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/04/22 6:31 p.m.14 views

Duplicate Advisory: uutils coreutils has an Improper Handling of Unicode Encoding Issue

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jcjr-rh8q-7xqf. This link is maintained to preserve external references. Original Description A logic error in the ln utility of uutils coreutils causes the program to reject source paths containing non-UTF-8...

5.5CVSS5.9AI score0.00121EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/04/22 6:31 p.m.24 views

GHSA-X2WV-9P67-MH9W uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origin...

6.6CVSS5.8AI score0.00125EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2026/04/22 6:31 p.m.16 views

Duplicate Advisory: uutils coreutils has an Improper Preservation of Permissions issue

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r9hw-mj3w-phcq. This link is maintained to preserve external references. Original Description The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before...

4.4CVSS5.9AI score0.00142EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/04/22 6:31 p.m.14 views

uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origin...

6.6CVSS5.2AI score0.00125EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/04/22 6:31 p.m.24 views

GHSA-79RC-QPW3-JV92 Duplicate Advisory: uutils coreutils has an Improper Preservation of Permissions issue

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r9hw-mj3w-phcq. This link is maintained to preserve external references. Original Description The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before...

3.4CVSS5.9AI score0.00142EPSS
SaveExploits1References5
OSV
OSV
added 2026/04/22 6:31 p.m.15 views

GHSA-W8M4-4V35-V6X3 Duplicate Advisory: uutils coreutils allows unauthorized modification of permissions on existing files

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pmf6-rcx4-v53v. This link is maintained to preserve external references. Original Description A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files...

7.1CVSS6AI score0.00165EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/04/22 5:28 p.m.13 views

CVE-2026-31448

A flaw was found in the Linux kernel's ext4 filesystem. When creating a directory or node, if an extent insertion fails, the system may not properly clear residual data. This can lead to a situation where both directory and extended attribute xattr blocks simultaneously use the same memory buffer...

9.4CVSS5.3AI score0.00443EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/22 5:16 p.m.20 views

CVE-2026-35361

The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std::fs::removedir, which cannot remove device nodes or FIFOs. This leaves mislabeled nodes behind wi...

4.4CVSS0.00142EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/22 4:09 p.m.10 views

CVE-2026-35373 uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenames

A logic error in the ln utility of uutils coreutils causes the program to reject source paths containing non-UTF-8 filename bytes when using target-directory forms e.g., ln SOURCE... DIRECTORY. While GNU ln treats filenames as raw bytes and creates the links correctly, the uutils implementation...

3.3CVSS5.7AI score0.00121EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/04/22 4:08 p.m.40 views

CVE-2026-35361 uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems

The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std::fs::removedir, which cannot remove device nodes or FIFOs. This leaves mislabeled nodes behind wi...

3.4CVSS0.00142EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/22 4:08 p.m.9 views

CVE-2026-35361 uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems

The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std::fs::removedir, which cannot remove device nodes or FIFOs. This leaves mislabeled nodes behind wi...

3.4CVSS5.8AI score0.00142EPSS
SaveExploits1References2
CVE
CVE
added 2026/04/22 4:08 p.m.23 views

CVE-2026-35361

The CVE-2026-35361 issue affects the mknod utility in uutils coreutils. It describes non-atomic handling of security labels for created device nodes: mknod creates the nodes before applying the SELinux context, and on labeling failure attempts cleanup via std::fs::remove_dir, which cannot remove ...

4.4CVSS5.8AI score0.00142EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/04/22 4:08 p.m.11 views

CVE-2026-35361 uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems

The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std::fs::removedir, which cannot remove device nodes or FIFOs. This leaves mislabeled nodes behind wi...

3.4CVSS5.9AI score
SaveExploits0References6
CVE
CVE
added 2026/04/22 4:08 p.m.37 views

CVE-2026-35350

The CVE-2026-35350 entry concerns the cp utility in uutils coreutils. When using -p (preserve), if chown fails, the tool applies the source’s mode bits, potentially producing a user-owned copy with privileged bits (setuid/setgid) and violating local security policies. This behavior differs from G...

6.6CVSS5.7AI score0.00125EPSS
SaveExploits1References1Affected Software1
EUVD
EUVD
added 2026/04/22 3:31 p.m.15 views

EUVD-2026-24945

An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, leading to the backend no longer able to run on the next restart, requiring manual operation to fix it...

7.4CVSS5.8AI score0.00383EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/22 3:31 p.m.12 views

EUVD-2026-24821

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: only publish modedata after clone setup iptfsclonestate stores x-modedata before allocating the reorder window. If that allocation fails, the code frees the cloned state and returns -ENOMEM, leaving x-modedata pointi...

5.7AI score0.00127EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/04/22 3:31 p.m.9 views

EUVD-2026-24831

In the Linux kernel, the following vulnerability has been resolved: ksmbd: do not expire session on binding failure When a multichannel session binding request fails e.g. wrong password, the error path unconditionally sets sess-state = SMB2SESSIONEXPIRED. However, during binding, sess points to t...

5.6AI score0.00499EPSS
SaveExploits0References7
EUVD
EUVD
added 2026/04/22 3:31 p.m.11 views

EUVD-2026-24798

In the Linux kernel, the following vulnerability has been resolved: mm/damon/sysfs: fix paramctx leak on damonsysfsnewtestctx failure Patch series "mm/damon/sysfs: fix memory leak and NULL dereference issues", v4. DAMONSYSFS can leak memory under allocation failure, and do NULL pointer dereferenc...

5.6AI score0.00121EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/22 2:16 p.m.13 views

CVE-2026-33608

An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, leading to the backend no longer able to run on the next restart, requiring manual operation to fix it...

9.8CVSS0.00383EPSS
SaveExploits0References1
Rows per page
Query Builder