Lucene search
K

23 matches found

RedhatCVE
RedhatCVE
added 2026/04/24 8:32 p.m.3 views

CVE-2026-35340

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS5.3AI score0.00015EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2026/04/22 4:7 p.m.1 views

CVE-2026-35340 uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS5.7AI score0.00015EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/04/22 4:7 p.m.22 views

CVE-2026-35340 uutils coreutils chown and chgrp False Success Exit Code in Recursive Mode

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS0.00015EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2026/04/22 12:0 a.m.0 views

PT-2026-34476

A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The final exit code is determined only by the last file processed. If the last operation succeeds, the command returns 0 even if earlier ownershi...

5.5CVSS5.7AI score0.00015EPSS
Exploits0References3
Tenable Nessus
Tenable Nessus
added 2026/04/22 12:0 a.m.1 views

Linux Distros Unpatched Vulnerability : CVE-2026-35340

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw in the ChownExecutor used by uutils coreutils chown and chgrp causes the utilities to return an incorrect exit code during recursive operations. The fina...

5.5CVSS5.8AI score0.00015EPSS
Exploits0References3
EUVD
EUVD
added 2025/10/07 12:30 a.m.1 views

EUVD-2017-9215

Malware in sbrugna...

7.8CVSS6.1AI score0.00084EPSS
Exploits3References13
Debian CVE
Debian CVE
added 2025/09/11 2:5 p.m.4 views

CVE-2025-58145

This CNA information record relates to multiple CVEs; the text explains which aspects/vulnerabilities correspond to which CVE. There are two issues related to the mapping of pages belonging to other domains: For one, an assertion is wrong there, where the case actually needs handling. A NULL...

7.5CVSS5.2AI score0.00067EPSS
Exploits0
Tenable Nessus
Tenable Nessus
added 2025/09/05 12:0 a.m.2 views

Linux Distros Unpatched Vulnerability : CVE-2021-44038

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Quagga through 1.2.4. Unsafe chown/chmod operations in the suggested spec file allow users with control of the non-root-owned directo...

7.8CVSS7.5AI score0.00195EPSS
Exploits1References2
Tenable Nessus
Tenable Nessus
added 2025/09/02 12:0 a.m.3 views

Linux Distros Unpatched Vulnerability : CVE-2024-36137

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A vulnerability has been identified in Node.js, affecting users of the experimental permission model when the --allow-fs-write flag is used. Node.js Permission...

3.3CVSS6.1AI score0.00095EPSS
Exploits0References2
RedHat Linux
RedHat Linux
added 2024/02/01 12:39 p.m.1 views

rpm: races with chown/chmod/capabilities calls during installation

A symbolic link issue was found in rpm. It occurs when rpm sets the desired permissions and credentials after installing a file. A local unprivileged user could use this flaw to exchange the original file with a symbolic link to a security-critical file and escalate their privileges on the system...

6.7CVSS7.1AI score0.00149EPSS
Exploits1References5
Code423n4
Code423n4
added 2022/09/26 12:0 a.m.10 views

Lack of address check for contract ownership changes

Lines of code Vulnerability details Impact Not Checking for zero address input can cause to lose of ownership by accident . Proof of Concept owner try to change ownership to a zero address and it cause to lose of funds . Tools Used Recommended Mitigation Steps Add a check that address in not zero...

6.8AI score
Exploits0
0day.today
0day.today
added 2018/10/06 12:0 a.m.26 views

Chrome OS /sbin/crash_reporter Symlink Traversal Vulnerability

Exploit for windows platform in category dos / poc Chrome OS: symlink traversal issue in /sbin/crashreporter Tested on: Version 69.0.3473.0 Official Build dev 64-bit CreateDirectoryWithSettings in https://chromium.googlesource.com/chromiumos/platform2/+/master/crash-reporter/crashcollector.cc107 ...

7.4AI score
Exploits0
Cvelist
Cvelist
added 2018/08/13 5:0 p.m.22 views

CVE-2017-7500

It was found that rpm did not properly handle RPM installations when a destination path was a symbolic link to a directory, possibly changing ownership and permissions of an arbitrary directory, and RPM files being placed in an arbitrary destination. An attacker, with write access to a directory ...

7.3CVSS6.8AI score0.00049EPSS
Exploits0References3
RedhatCVE
RedhatCVE
added 2018/01/29 2:52 p.m.20 views

CVE-2017-18078

systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protectedhardlinks sysctl is turned off, which allows local users to bypass intended access restrictions via vectors involving a hard link to a file for which the user lacks...

7.8CVSS2AI score0.00084EPSS
Exploits3References1
OSV
OSV
added 2018/01/29 5:29 a.m.1 views

DEBIAN-CVE-2017-18078

systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protectedhardlinks sysctl is turned off, which allows local users to bypass intended access restrictions via vectors involving a hard link to a file for which the user lacks...

7.8CVSS5.6AI score0.00084EPSS
Exploits3References1
OSV
OSV
added 2018/01/29 5:29 a.m.19 views

CVE-2017-18078

systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protectedhardlinks sysctl is turned off, which allows local users to bypass intended access restrictions via vectors involving a hard link to a file for which the user lacks...

7.8CVSS7.6AI score
Exploits0References9
Cvelist
Cvelist
added 2018/01/29 5:0 a.m.18 views

CVE-2017-18078

systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protectedhardlinks sysctl is turned off, which allows local users to bypass intended access restrictions via vectors involving a hard link to a file for which the user lacks...

7.4AI score0.00084EPSS
Exploits3References9
Debian CVE
Debian CVE
added 2018/01/29 5:0 a.m.39 views

CVE-2017-18078

systemd-tmpfiles in systemd before 237 attempts to support ownership/permission changes on hardlinked files even if the fs.protectedhardlinks sysctl is turned off, which allows local users to bypass intended access restrictions via vectors involving a hard link to a file for which the user lacks...

7.8CVSS5.9AI score0.00084EPSS
Exploits3
OpenVAS
OpenVAS
added 2011/03/09 12:0 a.m.24 views

Gentoo Security Advisory GLSA 201006-08 (nano)

The remote host is missing updates announced in advisory GLSA 201006-08. SPDX-FileCopyrightText: 2011 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

3.7CVSS6.5AI score0.00079EPSS
Exploits0References2
OpenVAS
OpenVAS
added 2011/03/09 12:0 a.m.16 views

Gentoo Security Advisory GLSA 201006-08 (nano)

The remote host is missing updates announced in advisory GLSA 201006-08. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

3.7CVSS0.2AI score0.00079EPSS
Exploits0
Rows per page
Query Builder