OpenClaw < 2026.6.9 Symlink Following via Mirror Sync
CVE-2026-62189
OpenClaw versions before 2026.6.9 contain a symlink following vulnerability in the mirror sync feature that allows lower
#cwe-367
共收录 358 条相关情报。
← 返回所有主题Kernel software installed and running inside a Host VM may post improper commands to the GPU...
CVE-2026-45203
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memor
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory write outside the permitted range of memory for the hos...
CVE-2026-45203
Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memor
9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetching, but open-sse/translator/concerns/image.js performs the...
CVE-2026-56676
9Router is an AI router & token saver. Prior to 0.5.2, 9router validates image URLs by resolving the host before fetchin
ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2.14, UbuntuCorpusTrainer.extract() uses a predictable home-rooted output direc...
CVE-2026-58198
ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2.14, UbuntuCorpusTrai
ChatterBot: Symlink-Following Arbitrary Write via UbuntuCorpusTrainer
CVE-2026-58198
ChatterBot is a machine learning, conversational dialog engine for creating chat bots. Prior to 1.2.14, UbuntuCorpusTrai
varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF inside the VM involving mapping a buffer prepared by OVMF...
CVE-2025-58151
varstored is a component of the Xapi toolstack handling UEFI Variables for a VM. It has a communication path with OVMF
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1, CoreWCF NetNamedPipe transport accepts attachment to a pr...
CVE-2026-54777
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1,
CoreWCF NetNamedPipe transport accepts attach to a pre-existing named pipe instance
CVE-2026-54777
CoreWCF is a port of the service side of Windows Communication Foundation (WCF) to .NET Core. Prior to 1.8.1 and 1.9.1,
@better-auth/oauth-provider's OAuth authorization-code grant allows concurrent redemption when two token requests race the find-then-delete primitive
CVE-2026-53518
### Am I affected? Users are affected if all of the following are true: - Their project depends on `@better-auth/oauth
Better Auth: OAuth refresh-token rotation forks the token family on concurrent redemption
CVE-2026-53517
### Am I affected? Users are affected if all of the following are true: - Their project depends on `@better-auth/oauth
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, a race condition in the cart checkout flow allows an authenticated client to app...
CVE-2026-43927
FOSSBilling is a free, open-source billing and client management system. Prior to version 0.8.0, a race condition in the
Memory Corruption when processing asynchronous input parameters due to improper handling of...
CVE-2026-25271
Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between chec
Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between check and use.
CVE-2026-25271
Memory Corruption when processing asynchronous input parameters due to improper handling of modified values between chec
uucore: safe_traversal TOCTOU protection only enabled on Linux
CVE-2026-35362
The safe_traversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use (TOCTOU) s
mkdir: -m exposes directory with umask perms before chmod (race window)
CVE-2026-35353
The mkdir utility in uutils coreutils incorrectly applies permissions when using the -m flag by creating a directory wit
install -D: symlink race in directory creation allows arbitrary file overwrite
CVE-2026-35356
The `-D` path runs `fs::create_dir_all` on a pathname then later opens the destination via path-based `File::create`/`fs
install: TOCTOU symlink race (unlink-then-create without O_EXCL) allows arbitrary file overwrite
CVE-2026-35355
`copy_file` in `install/src/install.rs` removes the destination then recreates it by pathname via `File::create` / `fs::
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an...
CVE-2026-58299
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execu
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execute code over a network.
CVE-2026-58299
Time-of-check time-of-use (toctou) race condition in Microsoft Edge for Android allows an unauthorized attacker to execu