Lucene search
+L

1697 matches found

Snyk
Snyk
•added 2026/10/13 8:51 p.m.•11 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack in the handling of Unix named-mutex and shared-memory paths via insecure global directories, symlink races, and unsafe permission changes. An attacker can truncate or overwrite files, widen directory permissions, or eleva...

8.5CVSS5.8AI score0.00411EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 8:44 p.m.•10 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

8.5CVSS5.8AI score0.00411EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 8:44 p.m.•10 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

8.5CVSS5.8AI score0.00411EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 8:44 p.m.•9 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

8.5CVSS5.8AI score0.00411EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 8:44 p.m.•9 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

8.5CVSS5.8AI score0.00411EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 8:44 p.m.•9 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

8.5CVSS5.8AI score0.00411EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 8:44 p.m.•10 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

8.5CVSS5.8AI score0.00411EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 8:44 p.m.•13 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

8.5CVSS5.8AI score0.00411EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/10/13 8:44 p.m.•11 views

Symlink Attack

Overview Affected versions of this package are vulnerable to Symlink Attack via the handling of Unix named-mutex and shared-memory paths in global directories. An attacker can gain elevated privileges, truncate or overwrite files, or widen directory permissions by exploiting symlink races or...

8.5CVSS5.8AI score0.00411EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
•added 2026/10/13 2:37 p.m.•10 views

CVE-2026-90181

A flaw was found in the Linux kernel's ublk universal block driver. A local attacker could trigger an xarray allocation failure during the teardown of a shared memory zero-copy SHMEMZC buffer. This issue causes the teardown process to enter an infinite retry loop, preventing forward progress and...

5.5CVSS5.7AI score0.00213EPSS
SaveExploits0References4
osv_ubuntu
osv_ubuntu
•added 2026/10/13 12:00 a.m.•28 views

UBUNTU-CVE-2026-107612

Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global...

7.8CVSS5.7AI score0.00104EPSS
SaveExploits0References4
Kitploit
Kitploit
•added 2026/10/11 11:03 p.m.•34 views

nanoclaw

Un asistente de IA que ejecuta agentes de forma segura en sus propios contenedores. Ligero, diseñado para ser fácilmente comprensible y completamente personalizable según tus necesidades. nanoclaw.dev • docs • 中文 • 日本語 • 한국어 • • Agentes en Slack: una app por agente La configuración aprovisiona a...

6.1AI score
SaveExploits0References7
CVE
CVE
•added 2026/10/08 1:39 p.m.•33 views

CVE-2026-107612

GlavSoft TightVNC Server for Windows versions prior to 2.8.88 contains an incorrect permission assignment in its inter-process communication (IPC) mechanism. The software creates a shared memory segment in the *Global* namespace with a NULL DACL , allowing local authenticated users to read or ove...

7.8CVSS5.7AI score0.00104EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/10/08 12:00 a.m.•14 views

PT-2026-107953

Name of the Vulnerable Software and Affected Versions GlavSoft TightVNC Server for Windows versions prior to 2.8.88 Description Incorrect permission assignment allows a local authenticated user to read or overwrite the inter-process communication IPC handles used between the TightVNC service and...

7.8CVSS5.7AI score0.00104EPSS
SaveExploits0References7
NVD
NVD
•added 2026/10/06 7:16 a.m.•19 views

CVE-2026-25291

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...

7.8CVSS0.0007EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 6:29 a.m.•42 views

CVE-2026-25291 Use After Free in Graphics

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...

7.8CVSS0.0007EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/10/06 6:29 a.m.•13 views

CVE-2026-25291 Use After Free in Graphics

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...

7.8CVSS6AI score0.0007EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 6:29 a.m.•9 views

EUVD-2026-92977

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...

7.8CVSS6AI score0.0007EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 6:29 a.m.•25 views

CVE-2026-25291

A Use After Free vulnerability exists in Graphics components due to a lack of proper synchronization mechanisms when performing concurrent operations on shared memory page lists . This memory corruption can lead to high confidentiality, integrity, and availability impacts. No specific software ve...

7.8CVSS6AI score0.0007EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/10/06 12:00 a.m.•10 views

CVE-2026-25291: Use After Free

Memory corruption when performing concurrent operations on shared memory page lists due to lack of proper synchronization mechanisms...

7.8CVSS6AI score0.0007EPSS
SaveExploits0References3
Rows per page
Query Builder