Lucene search
+L

8 matches found

OSV
OSV
•added 2026/04/22 6:31 p.m.•19 views

GHSA-XF75-659H-CGG5 uutils coreutils has a Link Following Issue

A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU tail, the uutils implementation continues to monitor a path after it has been replaced by a symbolic link, subsequently outputting the...

5.3CVSS5.7AI score0.001EPSS
SaveExploits1References3
NVD
NVD
•added 2026/04/22 5:16 p.m.•16 views

CVE-2026-35345

A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU tail, the uutils implementation continues to monitor a path after it has been replaced by a symbolic link, subsequently outputting the...

5.3CVSS0.001EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2026/04/22 4:07 p.m.•56 views

CVE-2026-35345 uutils coreutils tail Privileged Information Disclosure via Symlink Replacement Race

A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU tail, the uutils implementation continues to monitor a path after it has been replaced by a symbolic link, subsequently outputting the...

5.3CVSS0.001EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/22 4:07 p.m.•52 views

CVE-2026-35345

CVE-2026-35345 concerns the tail utility in uutils coreutils. The vulnerability arises with the --follow=name option: the implementation continues watching a path after it has been replaced by a symlink and then outputs the contents of the link’s target. In environments where a privileged user mo...

5.3CVSS5.7AI score0.001EPSS
SaveExploits1References1Affected Software1
attackerkb
attackerkb
•added 2026/04/22 4:07 p.m.•11 views

CVE-2026-35345

A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU tail, the uutils implementation continues to monitor a path after it has been replaced by a symbolic link, subsequently outputting the...

5.3CVSS5.7AI score0.001EPSS
SaveExploits1References2
Tenable Nessus
Tenable Nessus
•added 2026/04/22 12:00 a.m.•9 views

Linux Distros Unpatched Vulnerability : CVE-2026-35345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU...

5.3CVSS5.8AI score0.001EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/04/22 12:00 a.m.•27 views

uutils coreutils 后置链接漏洞

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. uutils coreutils has a post-installation link vulnerability. This vulnerability arises because the tail utility may disclose sensitive file contents when using the --follow=name option. Unlike GNU tail...

5.3CVSS5.7AI score0.001EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•12 views

PT-2026-34481

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A flaw in the tail utility occurs when using the '--follow=name' option. The implementation continues to monitor a path even after it has been replaced by a symbolic link, which lead...

5.3CVSS5.6AI score0.001EPSS
SaveExploits1References11
Rows per page
Query Builder