Lucene search
+L

23325 matches found

CNNVD
CNNVD
•added 2026/05/08 12:00 a.m.•28 views

Linux Kernel Security Vulnerabilities

The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the USB Yurex driver’s detection process. During this process, the BBU members are not set to an...

4.7CVSS5.5AI score0.00089EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/05/07 9:30 p.m.•57 views

EUVD-2026-28422

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.8AI score0.00179EPSS
SaveExploits0References5
osv_debian
osv_debian
•added 2026/05/07 8:16 p.m.•42 views

DEBIAN-CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS6.6AI score0.00179EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2026/05/07 8:16 p.m.•10 views

AZL-98826 CVE-2026-39819 affecting package golang 1.27.1-1

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS6.6AI score0.00179EPSS
SaveExploits0References1
NVD
NVD
•added 2026/05/07 8:16 p.m.•42 views

CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS0.00179EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/05/07 8:16 p.m.•36 views

UBUNTU-CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS6.6AI score0.00179EPSS
SaveExploits0References8
UbuntuCve
UbuntuCve
•added 2026/05/07 8:16 p.m.•29 views

CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS6.6AI score0.00179EPSS
SaveExploits0References7
osv_cve
osv_cve
•added 2026/05/07 7:41 p.m.•27 views

CVE-2026-39819 Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS6.1AI score
SaveExploits0References7
attackerkb
attackerkb
•added 2026/05/07 7:41 p.m.•22 views

CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.8AI score0.00179EPSS
SaveExploits0References5Affected Software1
Mend
Mend
•added 2026/05/07 7:41 p.m.•4 views

CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.8CVSS6.6AI score0.00179EPSS
SaveExploits0References7
Vulnrichment
Vulnrichment
•added 2026/05/07 7:41 p.m.•15 views

CVE-2026-39819 Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.8AI score0.00179EPSS
SaveExploits0References4
AlpineLinux
AlpineLinux
•added 2026/05/07 7:41 p.m.•52 views

CVE-2026-39819

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS6.6AI score0.00179EPSS
SaveExploits0
osv_go
osv_go
•added 2026/05/07 7:21 p.m.•29 views

GO-2026-4978 Invoking "go bug" follows symlinks in predictable temporary filenames in cmd/go

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS6.6AI score0.00179EPSS
SaveExploits0References3
Snyk
Snyk
•added 2026/05/07 7:21 p.m.•18 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack. Go Vulnerability Report: The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in o...

6.8CVSS5.8AI score0.00179EPSS
SaveExploits0References3
osv_clsa
osv_clsa
•added 2026/05/07 8:23 a.m.•32 views

CLSA-2026-1778142227 nginx: Fix of 2 CVEs

CVE-2026-27651: fix null pointer dereference in ngxmailauthhttpmodule when authentication retry is enabled with CRAM-MD5 or APOP - CVE-2026-32647: fix buffer over-read/write in ngxhttpmp4module when processing crafted mp4 files with empty stco/co64 atoms...

8.7CVSS7.3AI score0.00955EPSS
SaveExploits0References1
osv_clsa
osv_clsa
•added 2026/05/07 4:57 a.m.•35 views

CLSA-2026-1778129870 nginx: Fix of 2 CVEs

CVE-2026-27651: fix null pointer dereference in ngxmailauthhttpmodule when authentication retry is enabled with CRAM-MD5 or APOP - CVE-2026-32647: fix buffer over-read/write in ngxhttpmp4module when processing crafted mp4 files with empty stco/co64 atoms...

8.7CVSS7.3AI score0.00955EPSS
SaveExploits0References1
osv_ghsa
osv_ghsa
•added 2026/05/07 1:23 a.m.•38 views

GHSA-5V3H-X4WF-5C35 Rancher Extensions have arbitrary file access via path traversal

Impact A vulnerability has been identified in Rancher's Extensions where malicious code can be injected in Rancher through a path traversal in the compressedEndpoint field inside a UIPlugin deployment. A malicious UI extension could abuse that to: - Overwrite Rancher binaries or configuration to...

8.4CVSS7.7AI score0.00369EPSS
SaveExploits0References4
Snyk
Snyk
•added 2026/05/07 1:23 a.m.•13 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the compressedEndpoint field in a UIPlugin deployment. An attacker can overwrite binaries or configuration files, tamper with cluster state, or write to the host node filesystem by exploiting path traversal in th...

9.3CVSS8AI score0.00369EPSS
SaveExploits0References2
Github Security Blog
Github Security Blog
•added 2026/05/07 1:23 a.m.•34 views

Rancher Extensions have arbitrary file access via path traversal

Impact A vulnerability has been identified in Rancher's Extensions where malicious code can be injected in Rancher through a path traversal in the compressedEndpoint field inside a UIPlugin deployment. A malicious UI extension could abuse that to: - Overwrite Rancher binaries or configuration to...

8.4CVSS7.7AI score0.00369EPSS
SaveExploits0References4Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/05/07 12:00 a.m.•5 views

CVE-2026-39819: Undefined Security Weakness

The "go bug" command writes to two files with predictable names in the system temporary directory for example, "/tmp". An attacker with access to the temporary directory can create a symlink in one of these names, causing "go bug" to overwrite the target of the symlink...

5.3CVSS6.6AI score0.00179EPSS
SaveExploits0References4
Rows per page
Query Builder