Lucene search
+L

12 matches found

Tenable Nessus
Tenable Nessus
added 2026/05/11 12:0 a.m.12 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: grub2 (UTSA-2026-017467)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-017467 advisory. A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain command...

7.2CVSS6.9AI score0.01017EPSS
Exploits0References4
CNVD
CNVD
added 2026/03/24 12:0 a.m.11 views

OpenClaw has an unspecified vulnerability (CNVD-2026-14829)

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that stems from an allowable list bypass issue with the exec safeBins policy, which can be exploited by an attacker to write to arbitrary files using a short option payload...

7.1CVSS6AI score0.00258EPSS
Exploits0References1
NVD
NVD
added 2026/03/19 10:16 p.m.7 views

CVE-2026-32017

OpenClaw versions prior to 2026.2.19 contain an allowlist bypass vulnerability in the exec safeBins policy that allows attackers to write arbitrary files using short-option payloads. Attackers can bypass argument validation by attaching short options like -o to whitelisted binaries, enabling...

7.1CVSS0.00258EPSS
Exploits0References5
Vulnrichment
Vulnrichment
added 2026/03/19 10:6 p.m.5 views

CVE-2026-32017 OpenClaw < 2026.2.19 - Arbitrary File Write via Short-Option Bypass in exec Allowlist

OpenClaw versions prior to 2026.2.19 contain an allowlist bypass vulnerability in the exec safeBins policy that allows attackers to write arbitrary files using short-option payloads. Attackers can bypass argument validation by attaching short options like -o to whitelisted binaries, enabling...

7.1CVSS5.9AI score0.00258EPSS
Exploits0References5
Cvelist
Cvelist
added 2026/03/19 10:6 p.m.23 views

CVE-2026-32017 OpenClaw < 2026.2.19 - Arbitrary File Write via Short-Option Bypass in exec Allowlist

OpenClaw versions prior to 2026.2.19 contain an allowlist bypass vulnerability in the exec safeBins policy that allows attackers to write arbitrary files using short-option payloads. Attackers can bypass argument validation by attaching short options like -o to whitelisted binaries, enabling...

7.1CVSS0.00258EPSS
Exploits0References5
ATTACKERKB
ATTACKERKB
added 2026/03/19 10:6 p.m.2 views

CVE-2026-32017

OpenClaw versions prior to 2026.2.19 contain an allowlist bypass vulnerability in the exec safeBins policy that allows attackers to write arbitrary files using short-option payloads. Attackers can bypass argument validation by attaching short options like -o to whitelisted binaries, enabling...

6CVSS5.8AI score0.00258EPSS
Exploits0References6
CNNVD
CNNVD
added 2026/03/19 12:0 a.m.10 views

OpenClaw 安全漏洞

OpenClaw is an intelligent artificial assistant open-sourced by OpenClaw. OpenClaw has a security vulnerability that stems from an allowable list bypass issue with the exec safeBins policy, which can be exploited by an attacker to write to arbitrary files using a short option payload...

7.1CVSS5.9AI score0.00258EPSS
Exploits0References5
OSV
OSV
added 2026/03/03 9:48 p.m.5 views

GHSA-3X3X-H76W-HP98 OpenClaw exec allowlist safeBins short-option bypass could permit arbitrary file write

Summary OpenClaw exec allowlist/safeBins policy could be bypassed with attached short-option payloads for example sort -o/tmp/poc, enabling file-write operations while still satisfying safeBins checks. Affected Packages / Versions - Package: openclaw npm - Affected versions: = 2026.2.17 - Latest...

7.1CVSS5.9AI score0.00258EPSS
Exploits0References7
Positive Technologies
Positive Technologies
added 2026/03/03 12:0 a.m.12 views

PT-2026-26398

Summary OpenClaw exec allowlist/safeBins policy could be bypassed with attached short-option payloads for example sort -o/tmp/poc, enabling file-write operations while still satisfying safeBins checks. Affected Packages / Versions - Package: openclaw npm - Affected versions: = 2026.2.17 - Latest...

6.9CVSS5.8AI score0.00258EPSS
Exploits0References9
OSV
OSV
added 2021/03/03 5:15 p.m.3 views

DEBIAN-CVE-2021-20225

A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and...

6.7CVSS6.9AI score0.01017EPSS
Exploits0References1
OSV
OSV
added 2021/03/02 6:0 p.m.6 views

UBUNTU-CVE-2021-20225

A flaw was found in grub2 in versions prior to 2.06. The option parser allows an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options. The highest threat from this vulnerability is to data confidentiality and...

6.7CVSS7AI score0.01017EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2021/02/03 12:0 a.m.9 views

PT-2021-5817

Name of the Vulnerable Software and Affected Versions grub2 versions prior to 2.06 Description A flaw was found in the option parser of grub2, allowing an attacker to write past the end of a heap-allocated buffer by calling certain commands with a large number of specific short forms of options...

8.2CVSS5.7AI score0.04153EPSS
Exploits1References108
Rows per page
Query Builder