Lucene search
+L

5812 matches found

BDU FSTEC
BDU FSTEC
•added 2026/04/29 12:00 a.m.•10 views

The vulnerability of the iscsi_target_sk_data_ready() function in Linux operating system kernels allows attackers to compromise the accessibility of protected information.

The vulnerability of the iscsitargetskdataready function in Linux operating systems is related to synchronization errors when using shared resources. Exploiting this vulnerability can allow an attacker to compromise the accessibility of protected information...

4.7CVSS6.3AI score0.00274EPSS
SaveExploits0References8Affected Software3
BDU FSTEC
BDU FSTEC
•added 2026/04/29 12:00 a.m.•7 views

The vulnerability of the zswap_writeback_entry() function in the mm/zswap.c module of the Linux kernel’s memory management subsystem allows a hacker to cause a service failure.

The vulnerability of the zswapwritebackentry function in the mm/zswap.c module of the Linux kernel’s memory management subsystem is related to synchronization errors when using shared resources “Race Conditions”. Exploiting this vulnerability can allow an attacker to cause a service failure...

4.7CVSS7.6AI score0.00121EPSS
SaveExploits0References8Affected Software4
Tenable Nessus
Tenable Nessus
•added 2026/04/29 12:00 a.m.•14 views

Linux Distros Unpatched Vulnerability : CVE-2026-31541

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - tracing: Fix tracemarker copy link list updates When the copytracemarker option is enabled for an instance, anything written into /sys/kernel/tracing/tracemarke...

7.8CVSS7.4AI score0.00173EPSS
SaveExploits0References2
NVD
NVD
•added 2026/04/28 7:37 p.m.•20 views

CVE-2026-41397

OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchronization operations. Remote attackers can bypass sandbox restrictions by crafting malicious symlinks in mirror sync operations to...

9.6CVSS0.00625EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
•added 2026/04/28 6:09 p.m.•11 views

CVE-2026-41397 OpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversal

OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchronization operations. Remote attackers can bypass sandbox restrictions by crafting malicious symlinks in mirror sync operations to...

7.6CVSS6.3AI score0.00625EPSS
SaveExploits0References4
attackerkb
attackerkb
•added 2026/04/28 6:09 p.m.•11 views

CVE-2026-41397

OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchronization operations. Remote attackers can bypass sandbox restrictions by crafting malicious symlinks in mirror sync operations to...

7.6CVSS6.3AI score0.00625EPSS
SaveExploits0References5
Cvelist
Cvelist
•added 2026/04/28 6:09 p.m.•52 views

CVE-2026-41397 OpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversal

OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchronization operations. Remote attackers can bypass sandbox restrictions by crafting malicious symlinks in mirror sync operations to...

7.6CVSS0.00625EPSS
SaveExploits0References4
EUVD
EUVD
•added 2026/04/28 6:09 p.m.•19 views

EUVD-2026-26105

OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchronization operations. Remote attackers can bypass sandbox restrictions by crafting malicious symlinks in mirror sync operations to...

7.6CVSS6.3AI score0.00625EPSS
SaveExploits0References4
CVE
CVE
•added 2026/04/28 6:09 p.m.•68 views

CVE-2026-41397

OpenClaw is affected: OpenClaw before 2026.3.31 has a sandbox escape vulnerability that lets an attacker bypass sandbox restrictions by crafting malicious symlinks during Mirror Sync/file synchronization, enabling traversal of directory boundaries. Affected component is the file synchronization/s...

9.6CVSS6.3AI score0.00625EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2026/04/28 6:09 p.m.•16 views

CVE-2026-41397 OpenClaw < 2026.3.31 - Sandbox Escape via Unrestricted File Sync and Symlink Traversal

OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchronization operations. Remote attackers can bypass sandbox restrictions by crafting malicious symlinks in mirror sync operations to...

7.6CVSS6.1AI score
SaveExploits0References6
RedhatCVE
RedhatCVE
•added 2026/04/28 1:22 a.m.•16 views

CVE-2026-7062

A security vulnerability has been detected in Intina47 context-sync up to 2.0.0. This affects an unknown part of the file src/git-integration.ts of the component Git Integration. Such manipulation leads to os command injection. The attack can be executed remotely. The exploit has been disclosed...

7.5CVSS5.1AI score0.02109EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/04/28 12:00 a.m.•28 views

OpenClaw 后置链接漏洞

OpenClaw is an open-source intelligent artificial assistant developed by OpenClaw. Versions of OpenClaw prior to 2026.3.31 had a post-link vulnerability due to a sandbox escape issue. This vulnerability could allow remote attackers to access arbitrary files by exploiting symbolic links during fil...

9.6CVSS6.4AI score0.00625EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/04/28 12:00 a.m.•18 views

PT-2026-35781

Name of the Vulnerable Software and Affected Versions OpenClaw versions prior to 2026.3.31 Description A sandbox escape allows attackers to traverse directory boundaries through symlink exploitation during file synchronization operations. Remote attackers can bypass sandbox restrictions by crafti...

9.6CVSS6AI score0.00625EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/04/28 12:00 a.m.•3 views

CVE-2026-41397: Improper Link Resolution Before File Access

OpenClaw before 2026.3.31 contains a sandbox escape vulnerability allowing attackers to traverse directory boundaries through symlink exploitation during file synchronization operations. Remote attackers can bypass sandbox restrictions by crafting malicious symlinks in mirror sync operations to...

9.6CVSS6.3AI score0.00625EPSS
SaveExploits0References6
Oracle linux
Oracle linux
•added 2026/04/27 12:00 a.m.•24 views

tigervnc security update

1.15.0-6.1 - Fix CVE-2026-33999, CVE-2026-34000, CVE-2026-34001, CVE-2026-34002, CVE-2026-34003 xorg-x11-server: various XKB and XSYNC vulnerabilities Resolves: RHEL-163212 Resolves: RHEL-163280 Resolves: RHEL-163266 - Fix CVE-2026-34352 Resolves: RHEL-167769...

9.8CVSS7AI score0.00525EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
•added 2026/04/27 12:00 a.m.•28 views

Linux Distros Unpatched Vulnerability : CVE-2026-31591

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Lock all vCPUs when synchronizing and encrypting VMSAs for SNP guests, as allowing...

5.5CVSS6AI score0.00162EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2026/04/26 12:00 a.m.•37 views

PT-2026-35269

Name of the Vulnerable Software and Affected Versions Intina47 context-sync versions prior to 2.0.0 Description A flaw in the Git Integration component, specifically within the src/git-integration.ts file, allows for remote OS command injection. This occurs when an attacker sends specially crafte...

7.5CVSS7.2AI score0.02109EPSS
SaveExploits0References10
SUSE CVE
SUSE CVE
•added 2026/04/25 1:38 a.m.•15 views

SUSE CVE-2026-31591

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Lock all vCPUs when synchronizing and encrypting VMSAs for SNP guests, as allowing userspace to manipulate and/or run a vCPU while its state is being...

6.5CVSS5.8AI score0.00162EPSS
SaveExploits0References10
RedhatCVE
RedhatCVE
•added 2026/04/24 4:50 p.m.•16 views

CVE-2026-31541

A flaw was found in the Linux kernel. When a tracing instance with the copytracemarker option is enabled and subsequently deleted, a critical synchronization step is bypassed. This can lead to a Use-After-Free UAF vulnerability, which may allow a local attacker to corrupt memory, potentially...

7.8CVSS5.7AI score0.00173EPSS
SaveExploits0References4
OSV
OSV
•added 2026/04/24 3:16 p.m.•15 views

DEBIAN-CVE-2026-31591

In the Linux kernel, the following vulnerability has been resolved: KVM: SEV: Lock all vCPUs when synchronzing VMSAs for SNP launch finish Lock all vCPUs when synchronizing and encrypting VMSAs for SNP guests, as allowing userspace to manipulate and/or run a vCPU while its state is being...

5.5CVSS5.9AI score0.00162EPSS
SaveExploits0References1
Rows per page
Query Builder