10164 matches found
MINI-23VQ-7VPQ-FCM3
Bulletin has no description...
RHSA-2026:9666 Red Hat Security Advisory: wireshark security update
Bulletin has no description...
RHSA-2026:9644 Red Hat Security Advisory: kernel security update
Bulletin has no description...
ECHO-E17A-D8BD-8B20
Bulletin has no description...
ECHO-8B0A-B11C-14D1
Bulletin has no description...
DEBIAN-CVE-2026-3890
Bulletin has no description...
BELL-CVE-2026-4367
Bulletin has no description...
BELL-CVE-2026-31495
Bulletin has no description...
BELL-CVE-2026-31522
Bulletin has no description...
BELL-CVE-2026-22021
Bulletin has no description...
BELL-CVE-2026-22008
Bulletin has no description...
DEBIAN-CVE-2026-35367
The nohup utility in uutils coreutils creates its default output file, nohup.out, without specifying explicit restricted permissions. This causes the file to inherit umask-based permissions, typically resulting in a world-readable file 0644. In multi-user environments, this allows any user on the...
DEBIAN-CVE-2026-35362
The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...
DEBIAN-CVE-2026-35361
The mknod utility in uutils coreutils fails to handle security labels atomically by creating device nodes before setting the SELinux context. If labeling fails, the utility attempts cleanup using std::fs::removedir, which cannot remove device nodes or FIFOs. This leaves mislabeled nodes behind wi...
DEBIAN-CVE-2026-35346
The comm utility in uutils coreutils silently corrupts data by performing lossy UTF-8 conversion on all output lines. The implementation uses String::fromutf8lossy, which replaces invalid UTF-8 byte sequences with the Unicode replacement character U+FFFD. This behavior differs from GNU comm, whic...
DEBIAN-CVE-2026-35338
A vulnerability in the chmod utility of uutils coreutils allows users to bypass the --preserve-root safety mechanism. The implementation only validates if the target path is literally / and does not canonicalize the path. An attacker or accidental user can use path variants such as /../ or symbol...
CGA-CJ7R-VVX6-GQGJ
Bulletin has no description...
MINI-XX7Q-7XW5-XPV4
Bulletin has no description...