#cwe-59
共收录 499 条相关情报。
← 返回所有主题 漏洞预警2026-06-01 发布INFO
CVE-2026-49135
CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to acces
历史摘要 · 未重新核验 · NVD
漏洞预警2026-06-01 发布INFO
CVE-2026-40861
A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable b
历史摘要 · 未重新核验 · NVD
安全公告2026-05-29 发布INFO
CVE-2026-47121
## Summary
Binary delta apply intermediate-symlink traversal in malicious .delta
`Autoupdate/SUBinaryDeltaApply.m` enf
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-29 发布INFO
CVE-2026-6892
Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-29 发布INFO
CVE-2026-6891
Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a l
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-28 发布INFO
CVE-2026-45403
AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatti
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-28 发布INFO
CVE-2026-44881
Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-44711
pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pa
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-27 发布INFO
CVE-2026-48921
Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared l
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-26 发布INFO
CVE-2026-48693
FastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink attack via predictable file paths in /tmp. T
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-26 发布INFO
CVE-2026-7374
A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with ed
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-26 发布INFO
CVE-2026-42497
Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directo
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-26 发布INFO
CVE-2026-42496
Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction dire
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-21 发布INFO
CVE-2025-71212
A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileg
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-21 发布INFO
CVE-2026-44051
An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read
历史摘要 · 未重新核验 · NVD
安全公告2026-05-20 发布INFO
CVE-2026-42834
Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized
历史摘要 · 未重新核验 · GitHub Advisory
安全公告2026-05-20 发布INFO
CVE-2026-41091
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to el
历史摘要 · 未重新核验 · GitHub Advisory
漏洞预警2026-05-20 发布INFO
CVE-2026-42834
Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized
历史摘要 · 未重新核验 · NVD
漏洞预警2026-05-20 发布INFO
CVE-2026-41091
Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to el
历史摘要 · 未重新核验 · NVD
安全公告2026-05-20 发布INFO
CVE-2026-43619
Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod,
历史摘要 · 未重新核验 · GitHub Advisory