72 matches found
osv.dev
ドキュメント 包括的なドキュメントはこちらで入手できます。 API ドキュメントはこちらで入手できます。 データダンプ gs://osv-vulnerabilities の GCS バケットからデータダンプを利用できます。詳細については、ドキュメントをご覧ください。 Web UI の表示 OSV の Web UI のインスタンスは https://osv.dev にデプロイされています。 スキャナーの使用 依存関係をスキャンし、OSV API を介して OSV データベースに対して既知の脆弱性をチェックする Go ベースのツールを提供しています。 現在、さまざまなロックファイル、Debi...
Cortex-XDR-Config-Extractor
Cortex XDR 設定抽出ツール ⚠️ 詳細については、https://laokoon-security.com/cortex-xdr-config-exctractor/ をご覧ください（現在はドイツ語のみ） このツールは、レッドチーム評価中やXDR設定の監査のために使用することを目的としています。 このツールを使用すると、Palo Alto NetworksのCortex XDR Agentのデータベースロックファイルを解析し、エージェント設定、アンインストールパスワードのハッシュとソルト、および可能な除外設定を抽出できます。 対応抽出項目...
PYSEC-2026-2009 virtualenv Has TOCTOU Vulnerabilities in Directory Creation
Impact TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's appdat...
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
ImpactTOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's appdata...
EulerOS Virtualization 2.13.1 : python-virtualenv (EulerOS-SA-2026-2148)
According to the versions of the python-virtualenv package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU...
CLSA-2026-1779204030 mod_jk: Fix of CVE-2024-46544
CVE-2024-46544: fix insecure file permissions on shared memory and lock files...
PT-2026-51155
Name of the Vulnerable Software and Affected Versions picklescan versions prior to 1.0.1 Description Unsafe pickle deserialization allows unauthenticated attackers to create arbitrary zero-byte files. This is achieved through the instantiation of the logging.FileHandler class. By crafting malicio...
EUVD-2026-1869
virtualenv Has TOCTOU Vulnerabilities in Directory Creation...
virtualenv Has TOCTOU Vulnerabilities in Directory Creation
Impact TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a race condition between directory existence checks and creation to redirect virtualenv's appdat...
FreeBSD : virtualenv -- CWE-59: Improper Link Resolution Before File Access ('Link Following') (fd3855b8-efbc-11f0-9e3f-b0416f0c4c67)
The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the fd3855b8-efbc-11f0-9e3f-b0416f0c4c67 advisory. https://github.com/pypa/virtualenv/security/advisories/GHSA-597g-3phw-6986 reports: virtualenv is a too...
AZL-74237 CVE-2026-22702 affecting package python-virtualenv for versions less than 20.36.1-1
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...
CVE-2026-22702
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...
CVE-2026-22702
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...
CVE-2026-22702 virtualenv Has TOCTOU Vulnerabilities in Directory Creation
virtualenv is a tool for creating isolated virtual python environments. Prior to version 20.36.1, TOCTOU Time-of-Check-Time-of-Use vulnerabilities in virtualenv allow local attackers to perform symlink-based attacks on directory creation operations. An attacker with local access can exploit a rac...
CVE-2026-22702
CVE-2026-22702 concerns the Python tool for creating isolated environments, virtualenv. The issue is a TOCTOU race in directory creation where a local attacker can exploit a window between existence checks and creation to redirect virtualenv’s app_data and lock files to attacker-controlled locati...
SUSE CVE-2025-68146
filelock is a platform-independent file lock for Python. In versions prior to 3.20.1, a Time-of-Check-Time-of-Use TOCTOU race condition allows local attackers to corrupt or truncate arbitrary user files through symlink attacks. The vulnerability exists in both Unix and Windows lock file creation...
A Reality Check on SBOM-Based Vulnerability Management: An Empirical Study and a Path Forward
The Software Bill of Materials SBOM is a critical tool for securing the software supply chain SSC, but its practical utility is undermined by inaccuracies in both its generation and its application in vulnerability scanning. This paper presents a large-scale empirical study on 2,414 open-source...
EUVD-1999-1408
Malware in sbrugna...