Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-108305
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
#cwe-59
共收录 498 条相关情报。
← 返回所有主题Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
CVE-2026-108304
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
FileBrowser Quantum: Symlink following escapes user scope allowing arbitrary file read outside the served directory
CVE-2026-116682
FileBrowser Quantum is a free, self-hosted, web-based file manager. Prior to 1.5.2-stable and 2.0.1-beta, file read hand
systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) implementation uses the caller-supplied interface value in ...
CVE-2026-116673
systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) im
systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net
CVE-2026-116673
systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStats(iface) im
A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary ...
CVE-2026-93864
A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution a
An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only (Device Mo...
CVE-2026-90464
An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote,
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's...
CVE-2026-76654
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a sym
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a symbolic link that points to an attacker-controlled network ...
CVE-2026-76654
An NTLM coercion vulnerability exists on Windows nodes when the subPath supplied in a pod's volumeMounts is set to a sym
Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link placed inside a user's home folder to access files outsid...
CVE-2026-112344
Syncplify Server! 6.0.0 before 8.8.0 contains a path traversal vulnerability that allows attackers with a symbolic link
filelock: SoftFileLock stale-break restore follows a swapped-in symbolic link and hard-links a file of the user running the lock into the lock directory
CVE-2026-112914
When a soft-lock stale break finds that the marker (the lock file at ``) it renamed aside was a live one recreated by a
filelock ReadWriteLock: SQLite reopens the lock database by name, so a planted symlink or journal file makes the lock user's process overwrite or unlink its own files
CVE-2026-112940
`ReadWriteLock` and `AsyncReadWriteLock` (the SQLite-backed reader/writer lock) hand SQLite a name they do not control.
Fallow: Jest and Vitest `projects` entries let an analyzed repository make Fallow read files outside the project root
CVE-2026-115569
### Impact Fallow reads the Jest and Vitest configs of the repository that it analyzes. A Jest `projects` entry or a Vi
Fallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3.34.0, Fallow follows attacker-controlled Jest projects paths outside the project root t...
CVE-2026-115569
Fallow is a codebase intelligence tool for TypeScript and JavaScript. From 2.68.0 until 3.34.0, Fallow follows attacker-
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual...
CVE-2026-110063
Improper link resolution before file access ('link following') in VM Inspector for Azure Virtual Machines allows an unau
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allows malicious migration sources to write host files by plan...
CVE-2026-115377
Incus before 6.0.7, 6.1.0 before 7.0.2, and 7.1.0 before 7.5.0 contains an arbitrary file write vulnerability that allow
virtualenv: Generated files can follow existing destination links
CVE-2026-113721
## Summary Generated activation files and pyvenv.cfg can follow existing links and write outside the requested environm
Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endpoints that allows authenticated members to read arbitrary...
CVE-2026-114665
Goploy 1.18.0 before 1.18.1 contains a link following vulnerability in the /deploy/fileDiff and /deploy/fileCompare endp
virtualenv: Builtin creation follows linked environment directories
CVE-2026-113716
## Summary The builtin creator accepts existing directory symlinks through ensure_dir() and writes environment files th
virtualenv: Deletion recovery can change a symlink target's mode
CVE-2026-113724
## Summary The deletion error handler obtains permission bits with lstat() but applies them through chmod(), which foll