Lucene search
+L

8 matches found

osv_ghsa
osv_ghsa
•added 2026/04/22 6:31 p.m.•23 views

GHSA-XF75-659H-CGG5 uutils coreutils has a Link Following Issue

A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU tail, the uutils implementation continues to monitor a path after it has been replaced by a symbolic link, subsequently outputting the...

5.3CVSS5.6AI score0.00096EPSS
SaveExploits1References3
NVD
NVD
•added 2026/04/22 5:16 p.m.•26 views

CVE-2026-35345

A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU tail, the uutils implementation continues to monitor a path after it has been replaced by a symbolic link, subsequently outputting the...

5.3CVSS0.00096EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2026/04/22 4:07 p.m.•15 views

CVE-2026-35345

A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU tail, the uutils implementation continues to monitor a path after it has been replaced by a symbolic link, subsequently outputting the...

5.3CVSS5.6AI score0.00096EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2026/04/22 4:07 p.m.•68 views

CVE-2026-35345 uutils coreutils tail Privileged Information Disclosure via Symlink Replacement Race

A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU tail, the uutils implementation continues to monitor a path after it has been replaced by a symbolic link, subsequently outputting the...

5.3CVSS0.00096EPSS
SaveExploits1References1
CVE
CVE
•added 2026/04/22 4:07 p.m.•64 views

CVE-2026-35345

CVE-2026-35345 concerns the tail utility in uutils coreutils. The vulnerability arises with the --follow=name option: the implementation continues watching a path after it has been replaced by a symlink and then outputs the contents of the link’s target. In environments where a privileged user mo...

5.3CVSS5.6AI score0.00096EPSS
SaveExploits1References1Affected Software1
Tenable Nessus
Tenable Nessus
•added 2026/04/22 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-35345

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability in the tail utility of uutils coreutils allows for the exfiltration of sensitive file contents when using the --follow=name option. Unlike GNU...

5.3CVSS5.7AI score0.00096EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2026/04/22 12:00 a.m.•32 views

uutils coreutils post-linkage vulnerability

uutils coreutils is a cross-platform core command-line toolset developed by Uutils Open Source. uutils coreutils has a post-installation link vulnerability. This vulnerability arises because the tail utility may disclose sensitive file contents when using the --follow=name option. Unlike GNU tail...

5.3CVSS5.7AI score0.00096EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2026/04/22 12:00 a.m.•15 views

PT-2026-34481

Name of the Vulnerable Software and Affected Versions uutils coreutils affected versions not specified Description A flaw in the tail utility occurs when using the '--follow=name' option. The implementation continues to monitor a path even after it has been replaced by a symbolic link, which lead...

5.3CVSS5.4AI score0.00096EPSS
SaveExploits1References11
Rows per page
Query Builder