#cwe-59

共收录 498 条相关情报。

漏洞预警2026-08-13 发布INFO

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module root when use chroot is disabled and the module...

CVE-2026-53784

rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intend

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-08-13 发布INFO

rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricted shell wrapper that allows authenticated clients to esca...

CVE-2026-53783

rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricte

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-88

漏洞预警2026-08-13 发布INFO

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenti...

CVE-2026-15994

During an internal security assessment, an improper link following vulnerability was identified in Lenovo Vantage and Le

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-08-13 发布INFO

An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial Vantage that could allow a local authenticated user to per...

CVE-2026-12036

An improper link following vulnerability was reported in the VantageCoreAddin for Lenovo Vantage and Lenovo Commercial V

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

安全公告2026-08-13 发布INFO

rsync 2.3.3 < 3.5.0 Path Traversal via --partial-dir/--backup-dir Symlink

CVE-2026-70460

rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to escape the module roo

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-22 #cwe-59

安全公告2026-08-13 发布INFO

rsync < 3.5.0 Symlink Race Condition Directory Traversal

CVE-2026-53801

rsync before 3.5.0 contains a symlink race condition vulnerability in the sender's directory scanning logic that allows

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-367 #cwe-59

安全公告2026-08-13 发布INFO

rsync < 3.5.0 Symlink Race Condition via --remove-source-files

CVE-2026-53800

rsync before 3.5.0 contains a symlink race condition vulnerability in the --remove-source-files feature that allows atta

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-367 #cwe-59

安全公告2026-08-13 发布INFO

rsync < 3.5.0 Symlink Race Condition via ACL/xattr Application

CVE-2026-53799

rsync before 3.5.0 contains a symlink race condition vulnerability that allows local attackers to cause rsync to apply a

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-367 #cwe-59

安全公告2026-08-13 发布INFO

rsync < 3.5.0 TOCTOU Race Condition via Destination Directory Handling

CVE-2026-53796

rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the non-daemon recei

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-367 #cwe-59

安全公告2026-08-13 发布INFO

rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest

CVE-2026-53795

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the inten

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-59

安全公告2026-08-13 发布INFO

rsync < 3.5.0 Path Confinement Bypass via /./ Boundary Marker in Chroot Mode

CVE-2026-53793

rsync before 3.5.0 contains a path confinement bypass vulnerability that allows remote clients to escape the intended in

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-59

安全公告2026-08-13 发布INFO

rsync < 3.5.0 TOCTOU Race Condition Directory Escape via rrsync

CVE-2026-53783

rsync before 3.5.0 contains a time-of-check to time-of-use (TOCTOU) race condition vulnerability in the rrsync restricte

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-59 #cwe-88

安全公告2026-08-13 发布INFO

rsync < 3.5.0 Symlink Following Arbitrary File Overwrite

CVE-2026-53803

rsync before 3.5.0 contains a symlink following vulnerability that allows local attackers to overwrite arbitrary files b

历史摘要 · 未重新核验 · OSV.dev

#advisory #cwe-59

安全公告2026-08-13 发布INFO

ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

CVE-2026-55086

## Description `src/node/handler/ImportHandler.ts` and `src/node/handler/ExportHandler.ts` both compute their temporary

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-59 #cwe-377 #severity:medium

漏洞预警2026-08-13 发布INFO

filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction mechanism that allows authenticated users with only Crea...

CVE-2026-73613

filebrowser versions before 2.63.19 contain an out-of-scope file deletion vulnerability in the TUS upload cache eviction

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-08-13 发布INFO

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Linux platforms that enables a local low privileged user to...

CVE-2026-0291

An improper link resolution before file access vulnerability exists in the Palo Alto Networks Prisma® Access Agent on Li

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

安全公告2026-08-12 发布INFO

Ansible FreeBSD Jail Connection Plugin: Jail escape via symlink following in put_file (host-side root mv)

CVE-2026-55074

Through version 1.3.0, the jailexec connection plugin's put_file resolved a transfer's destination to a path on the jail

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-59 #severity:high

漏洞预警2026-08-12 发布INFO

A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During the import or unpacking of crafted image or backup archives...

CVE-2026-63294

A link following vulnerability in LXD allows an attacker to achieve root command execution on the host system. During th

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-08-12 发布INFO

A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host system. When importing or unpacking an image archive, LX...

CVE-2026-63293

A link following vulnerability in LXD allows an attacker to achieve arbitrary file read and write operations on the host

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-08-11 发布INFO

Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to elevate privileges locally.

CVE-2026-65680

Improper link resolution before file access ('link following') in Microsoft OneDrive allows an authorized attacker to el

历史摘要 · 未重新核验 · NVD

#cve #cwe-59