Lucene search
+L

22637 matches found

Tenable Nessus
Tenable Nessus
•added 2026/03/07 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-27139

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root ...

2.5CVSS6.8AI score0.00219EPSS
SaveExploits0References4
osv_debian
osv_debian
•added 2026/03/06 10:16 p.m.•17 views

DEBIAN-CVE-2026-27139

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

2.5CVSS6.8AI score0.00219EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/03/06 10:16 p.m.•25 views

AZL-79541 CVE-2026-27139 affecting package golang for versions less than 1.2.58-1

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

2.5CVSS6.8AI score0.00219EPSS
SaveExploits0References1
osv_alpine
osv_alpine
•added 2026/03/06 10:16 p.m.•3 views

ALPINE-CVE-2026-27139

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

2.5CVSS6.7AI score0.00219EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/03/06 10:16 p.m.•21 views

AZL-79535 CVE-2026-27139 affecting package golang 1.22.7-5

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

2.5CVSS6.8AI score0.00219EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/03/06 10:16 p.m.•22 views

AZL-79532 CVE-2026-27139 affecting package golang 1.18.8-10

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

2.5CVSS6.8AI score0.00219EPSS
SaveExploits0References1
NVD
NVD
•added 2026/03/06 10:16 p.m.•22 views

CVE-2026-27139

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

2.5CVSS0.00219EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/03/06 10:16 p.m.•30 views

UBUNTU-CVE-2026-27139

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

2.5CVSS6.8AI score0.00219EPSS
SaveExploits0References7
Cvelist
Cvelist
•added 2026/03/06 9:28 p.m.•47 views

CVE-2026-27139 FileInfo can escape from a Root in os

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

0.00219EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/03/06 9:28 p.m.•10 views

CVE-2026-27139 FileInfo can escape from a Root in os

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

5.9AI score0.00219EPSS
SaveExploits0References4
Mend
Mend
•added 2026/03/06 9:28 p.m.•4 views

CVE-2026-27139

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

2.5CVSS6.8AI score0.00219EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/03/06 9:28 p.m.•23 views

CVE-2026-27139 FileInfo can escape from a Root in os

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

2.5CVSS6.9AI score
SaveExploits0References7
attackerkb
attackerkb
•added 2026/03/06 9:28 p.m.•14 views

CVE-2026-27139

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

5.9AI score0.00219EPSS
SaveExploits0References5Affected Software1
Debian CVE
Debian CVE
•added 2026/03/06 9:28 p.m.•16 views

CVE-2026-27139

On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference a file outside of the Root in which the File was opened. The impact of this escape is limited to reading metadata provided by lstat from arbitrary locations on the...

2.5CVSS6.7AI score0.00219EPSS
SaveExploits0
NVD
NVD
•added 2026/03/06 9:16 p.m.•30 views

CVE-2026-30233

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authorization flaw in OliveTin allows authenticated users with view: false permission to enumerate action bindings and metadata via dashboard and API endpoints. Although execution exec may be...

6.5CVSS0.0046EPSS
SaveExploits1References3
Cvelist
Cvelist
•added 2026/03/06 9:05 p.m.•37 views

CVE-2026-30233 OliveTin: View permission not being checked when returning dashboards

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authorization flaw in OliveTin allows authenticated users with view: false permission to enumerate action bindings and metadata via dashboard and API endpoints. Although execution exec may be...

6.5CVSS0.0046EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
•added 2026/03/06 9:05 p.m.•5 views

CVE-2026-30233 OliveTin: View permission not being checked when returning dashboards

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authorization flaw in OliveTin allows authenticated users with view: false permission to enumerate action bindings and metadata via dashboard and API endpoints. Although execution exec may be...

6.5CVSS7.9AI score0.0046EPSS
SaveExploits1References3
attackerkb
attackerkb
•added 2026/03/06 9:05 p.m.•19 views

CVE-2026-30233

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authorization flaw in OliveTin allows authenticated users with view: false permission to enumerate action bindings and metadata via dashboard and API endpoints. Although execution exec may be...

6.5CVSS8AI score0.0046EPSS
SaveExploits1References4Affected Software1
Mend
Mend
•added 2026/03/06 9:05 p.m.•11 views

CVE-2026-30233

OliveTin gives access to predefined shell commands from a web interface. Prior to version 3000.11.1, an authorization flaw in OliveTin allows authenticated users with view: false permission to enumerate action bindings and metadata via dashboard and API endpoints. Although execution exec may be...

7.1CVSS7.9AI score0.0046EPSS
SaveExploits1References6
CVE
CVE
•added 2026/03/06 9:05 p.m.•48 views

CVE-2026-30233

Technical details for CVE-2026-30233 are not publicly available in the provided connected documents. Monitor for updates.

6.5CVSS7.9AI score0.0046EPSS
SaveExploits1References3Affected Software1
Rows per page
Query Builder