Lucene search
+L

31526 matches found

BDU FSTEC
BDU FSTEC
added 2026/04/23 12:00 a.m.9 views

The vulnerability in the function `serial8250_unregister_port()` of the `drivers/tty/serial/8250/8250_core.c` file, a driver for console TTY support on the serial port of the Linux kernel, allows a attacker to cause a service failure.

The vulnerability of the serial8250unregisterport function in the driver/tty/serial/8250/8250core.c file of the console support driver for the serial port in the Linux kernel is related to the failure to release resources after their useful period has ended. Exploiting this vulnerability could...

5.5CVSS6AI score0.00164EPSS
SaveExploits0References12Affected Software4
Cvelist
Cvelist
added 2026/04/22 8:15 p.m.35 views

CVE-2026-40937 RustFS missing admin authorization on notification target endpoints, which allows unauthenticated configuration of event webhooks

RustFS is a distributed object storage system built in Rust. Prior to 1.0.0-alpha.94, all four notification target admin API endpoints in rustfs/src/admin/handlers/event.rs use a checkpermissions helper that validates authentication only access key + session token, without performing any...

8.3CVSS0.00293EPSS
SaveExploits0References2
OSV
OSV
added 2026/04/22 7:23 p.m.8 views

GHSA-J99G-7RQW-Q9JG nimiq-blockchain: Peer-triggerable panic during history sync

Impact HistoryStore::puthistorictxns uses an assert! to enforce invariants about HistoricTransaction.blocknumber must be within the macro block being pushed and within the same epoch. During history sync, a peer can influence the history: &HistoricTransaction input passed into...

5.3CVSS5.7AI score0.00242EPSS
SaveExploits0References6
Github Security Blog
Github Security Blog
added 2026/04/22 6:31 p.m.14 views

Duplicate Advisory: uutils coreutils has an Improper Handling of Unicode Encoding Issue

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-jcjr-rh8q-7xqf. This link is maintained to preserve external references. Original Description A logic error in the ln utility of uutils coreutils causes the program to reject source paths containing non-UTF-8...

5.5CVSS5.9AI score0.00121EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/04/22 6:31 p.m.24 views

GHSA-X2WV-9P67-MH9W uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origin...

6.6CVSS5.8AI score0.00125EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2026/04/22 6:31 p.m.16 views

Duplicate Advisory: uutils coreutils has an Improper Preservation of Permissions issue

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r9hw-mj3w-phcq. This link is maintained to preserve external references. Original Description The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before...

4.4CVSS5.9AI score0.00142EPSS
SaveExploits1References5Affected Software1
Github Security Blog
Github Security Blog
added 2026/04/22 6:31 p.m.14 views

uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails

The cp utility in uutils coreutils fails to properly handle setuid and setgid bits when ownership preservation fails. When copying with the -p preserve flag, the utility applies the source mode bits even if the chown operation is unsuccessful. This can result in a user-owned copy retaining origin...

6.6CVSS5.2AI score0.00125EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2026/04/22 6:31 p.m.24 views

GHSA-79RC-QPW3-JV92 Duplicate Advisory: uutils coreutils has an Improper Preservation of Permissions issue

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-r9hw-mj3w-phcq. This link is maintained to preserve external references. Original Description The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before...

3.4CVSS5.9AI score0.00142EPSS
SaveExploits1References5
OSV
OSV
added 2026/04/22 6:31 p.m.15 views

GHSA-W8M4-4V35-V6X3 Duplicate Advisory: uutils coreutils allows unauthorized modification of permissions on existing files

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-pmf6-rcx4-v53v. This link is maintained to preserve external references. Original Description A vulnerability in uutils coreutils mkfifo allows for the unauthorized modification of permissions on existing files...

7.1CVSS6AI score0.00165EPSS
SaveExploits1References3
RedhatCVE
RedhatCVE
added 2026/04/22 5:28 p.m.13 views

CVE-2026-31448

A flaw was found in the Linux kernel's ext4 filesystem. When creating a directory or node, if an extent insertion fails, the system may not properly clear residual data. This can lead to a situation where both directory and extended attribute xattr blocks simultaneously use the same memory buffer...

9.4CVSS5.3AI score0.00443EPSS
SaveExploits0References4
NVD
NVD
added 2026/04/22 5:16 p.m.20 views

CVE-2026-35361

The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std::fs::removedir, which cannot remove device nodes or FIFOs. This leaves mislabeled nodes behind wi...

4.4CVSS0.00142EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/22 4:09 p.m.10 views

CVE-2026-35373 uutils coreutils ln Local Denial of Service via Improper Handling of Non-UTF-8 Filenames

A logic error in the ln utility of uutils coreutils causes the program to reject source paths containing non-UTF-8 filename bytes when using target-directory forms e.g., ln SOURCE... DIRECTORY. While GNU ln treats filenames as raw bytes and creates the links correctly, the uutils implementation...

3.3CVSS5.7AI score0.00121EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2026/04/22 4:08 p.m.40 views

CVE-2026-35361 uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems

The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std::fs::removedir, which cannot remove device nodes or FIFOs. This leaves mislabeled nodes behind wi...

3.4CVSS0.00142EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/04/22 4:08 p.m.9 views

CVE-2026-35361 uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems

The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std::fs::removedir, which cannot remove device nodes or FIFOs. This leaves mislabeled nodes behind wi...

3.4CVSS5.8AI score0.00142EPSS
SaveExploits1References2
CVE
CVE
added 2026/04/22 4:08 p.m.23 views

CVE-2026-35361

The CVE-2026-35361 issue affects the mknod utility in uutils coreutils. It describes non-atomic handling of security labels for created device nodes: mknod creates the nodes before applying the SELinux context, and on labeling failure attempts cleanup via std::fs::remove_dir, which cannot remove ...

4.4CVSS5.8AI score0.00142EPSS
SaveExploits1References2Affected Software1
OSV
OSV
added 2026/04/22 4:08 p.m.11 views

CVE-2026-35361 uutils coreutils mknod Security Label Inconsistency and Broken Cleanup on SELinux Systems

The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std::fs::removedir, which cannot remove device nodes or FIFOs. This leaves mislabeled nodes behind wi...

3.4CVSS5.9AI score
SaveExploits0References6
CVE
CVE
added 2026/04/22 4:08 p.m.37 views

CVE-2026-35350

The CVE-2026-35350 entry concerns the cp utility in uutils coreutils. When using -p (preserve), if chown fails, the tool applies the source’s mode bits, potentially producing a user-owned copy with privileged bits (setuid/setgid) and violating local security policies. This behavior differs from G...

6.6CVSS5.7AI score0.00125EPSS
SaveExploits1References1Affected Software1
EUVD
EUVD
added 2026/04/22 3:31 p.m.15 views

EUVD-2026-24945

An attacker can send a notify request that causes a new secondary domain to be added to the bind backend, but causes said backend to update its configuration to an invalid one, leading to the backend no longer able to run on the next restart, requiring manual operation to fix it...

7.4CVSS5.8AI score0.00383EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/04/22 3:31 p.m.12 views

EUVD-2026-24821

In the Linux kernel, the following vulnerability has been resolved: xfrm: iptfs: only publish modedata after clone setup iptfsclonestate stores x-modedata before allocating the reorder window. If that allocation fails, the code frees the cloned state and returns -ENOMEM, leaving x-modedata pointi...

5.7AI score0.00127EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/04/22 3:31 p.m.9 views

EUVD-2026-24831

In the Linux kernel, the following vulnerability has been resolved: ksmbd: do not expire session on binding failure When a multichannel session binding request fails e.g. wrong password, the error path unconditionally sets sess-state = SMB2SESSIONEXPIRED. However, during binding, sess points to t...

5.6AI score0.00499EPSS
SaveExploits0References7
Rows per page
Query Builder