#cwe-59

共收录 499 条相关情报。

← 返回所有主题
漏洞预警2026-06-01 发布INFO

CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to access sensitive credentials or tamper with build artifacts by...

CVE-2026-49135

CodexBar prior to 0.32.0 contains an insecure temporary file handling vulnerability that allows local attackers to acces

历史摘要 · 未重新核验 · NVD

漏洞预警2026-06-01 发布INFO

A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable by the API server process (read-path attack — e.g. `/etc/p...

CVE-2026-40861

A Dag author could either (a) create a symlink under their task's log directory pointing to an arbitrary file readable b

历史摘要 · 未重新核验 · NVD

安全公告2026-05-29 发布INFO

Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta

CVE-2026-47121

## Summary Binary delta apply intermediate-symlink traversal in malicious .delta `Autoupdate/SUBinaryDeltaApply.m` enf

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-29 发布INFO

Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with login privileges to exploit a specially crafted symbolic...

CVE-2026-6892

Improper handling of symbolic links in the installer of CUPS Printer Driver for macOS(*) may allow a local attacker with

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-29 发布INFO

Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a local attacker with login privileges to exploit a speciall...

CVE-2026-6891

Improper handling of symbolic links in the installer of My Image Garden for macOS Version 3.6.8 or earlier may allow a l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to 1.13.0, the AnythingLLM agent filesystem cop...

CVE-2026-45403

AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatti

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-28 发布INFO

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used to manage Docker, Swarm, Kubernetes and ACI environments. ...

CVE-2026-44881

Portainer Community Edition is a lightweight service delivery platform for containerized applications that can be used t

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pad directory and pad files enable authentication bypass an...

CVE-2026-44711

pam_usb provides hardware authentication for Linux using ordinary removable media. Prior to 0.8.7, symlink attacks on pa

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-27 发布INFO

Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared libraries, allowing attackers able to control the content ...

CVE-2026-48921

Jenkins Pipeline: Groovy Libraries Plugin 797.v90ea_a_9b_e45a_0 and earlier does not prohibit symbolic links in shared l

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

FastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink attack via predictable file paths in /tmp. The statistics file path defaults to '/tmp/fastnetmon.dat'...

CVE-2026-48693

FastNetMon Community Edition through 1.2.9 is vulnerable to a local symlink attack via predictable file paths in /tmp. T

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with edit permissions in a single namespace to exploit improper ...

CVE-2026-7374

A flaw was found in KubeVirt's virt-handler component. This vulnerability allows an authenticated OpenShift user with ed

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directory. _make_special_file() passes the tar header's linknam...

CVE-2026-42497

Archive::Tar versions before 3.08 for Perl extract hardlinks to attacker controlled paths outside the extraction directo

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-26 发布INFO

Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory. _make_special_file() passes the tar header's link...

CVE-2026-42496

Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction dire

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileges on affected installations. Please note: an attacker...

CVE-2025-71212

A link following vulnerability in the Trend Micro Apex One scan engine could allow a local attacker to escalate privileg

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-21 发布INFO

An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read arbitrary files or overwrite arbitrary files via attacke...

CVE-2026-44051

An improper link resolution vulnerability in Netatalk 3.0.2 through 4.4.2 allows a remote authenticated attacker to read

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

Improper link resolution before file access ('link following') in Azure Portal Windows Admin...

CVE-2026-42834

Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized

历史摘要 · 未重新核验 · GitHub Advisory

安全公告2026-05-20 发布INFO

Improper link resolution before file access ('link following') in Microsoft Defender allows an...

CVE-2026-41091

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to el

历史摘要 · 未重新核验 · GitHub Advisory

漏洞预警2026-05-20 发布INFO

Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized attacker to elevate privileges locally.

CVE-2026-42834

Improper link resolution before file access ('link following') in Azure Portal Windows Admin Center allows an authorized

历史摘要 · 未重新核验 · NVD

漏洞预警2026-05-20 发布INFO

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to elevate privileges locally.

CVE-2026-41091

Improper link resolution before file access ('link following') in Microsoft Defender allows an authorized attacker to el

历史摘要 · 未重新核验 · NVD

安全公告2026-05-20 发布INFO

Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system...

CVE-2026-43619

Rsync version 3.4.2 and prior contain symlink race condition vulnerabilities in path-based system calls including chmod,

历史摘要 · 未重新核验 · GitHub Advisory