#cwe-59

共收录 498 条相关情报。

漏洞预警2026-10-21 发布INFO

Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServer: from 32.3 before 36.6 and from 37.1 before 37.2.

CVE-2026-114462

Improper link resolution before file access ('link following') vulnerability in Velneo vServer. This issue affects vServ

来源摘录 · NVD

#cve #cwe-59

安全公告2026-10-21 发布INFO

Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout...

CVE-2026-114096

Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout(paths=[...]) that allo

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-59 #severity:high

漏洞预警2026-10-20 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safe_delete() deletion error handler responds to a failed removal by reading mode b...

CVE-2026-113724

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the safe_delete() deletion err

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-10-20 发布MEDIUM

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator._generate() removes an existing output only when Path.exists() is ...

CVE-2026-113721

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, ViaTemplateActivator._generate

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-20 发布INFO

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensure_dir() for executable, library, and package directories...

CVE-2026-113716

virtualenv is a tool for creating isolated virtual python environments. Prior to 21.14.9, the builtin creator calls ensu

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-10-20 发布INFO

Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authenticated customers to take ownership of arbitrary host dir...

CVE-2026-113678

Froxlor before 2.3.15 contains a symlink following vulnerability in Statistics::makeChownWithNewStats that allows authen

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

漏洞预警2026-10-20 发布INFO

filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock versions from 3.20.4 resolve the lock path and pass it to ...

CVE-2026-112936

filelock is a platform-independent file lock for Python. From 3.20.4 until 4.0.9, ReadWriteLock and AsyncReadWriteLock v

历史摘要 · 未重新核验 · NVD

#cve #cwe-59 #cwe-668

漏洞预警2026-10-20 发布INFO

filelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow a swapped symbolic link during the conditional os.access writability ch...

CVE-2026-112912

filelock is a platform-independent file lock for Python. From 3.32.6 until 4.2.1, SoftFileLock can follow a swapped symb

历史摘要 · 未重新核验 · NVD

#cve #cwe-59

安全公告2026-10-15 发布INFO

Appium: Symlink based Zip Slip in @appium/support ZIP extraction

CVE-2026-103975

### Summary CVE-2026-30973 [(GHSA-rfx7-4xw3-gh4m)](https://github.com/appium/appium/security/advisories/GHSA-rfx7-4xw3-

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #npm #cwe-59 #severity:medium

安全公告2026-10-15 发布INFO

GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which...

CVE-2026-110860

GitPython from 3.1.62 before 3.2.0 contains a symlink-following flaw in Submodule.move(), which checks the destination o

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #cwe-59 #severity:medium

漏洞预警2026-10-14 发布MEDIUM

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0, FileRise validates archive entry names but extracts them...

CVE-2026-104109

FileRise is a self-hosted web-based file manager with multi-file upload, editing, and batch operations. Prior to 3.23.0,

来源摘录 · NVD

#cve #cwe-59

安全公告2026-10-14 发布INFO

BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extraction

CVE-2026-14966

BBOT's `unarchive` module rejects archives containing symlink entries before extraction, but for zip and 7z archives it

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #pip #cwe-22 #cwe-59 #severity:low

安全公告2026-10-13 发布INFO

Microsoft Security Advisory CVE-2026-96225 - .NET and Visual Studio Elevation of Privilege Vulnerability

CVE-2026-96225

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-59 #severity:high

安全公告2026-10-13 发布INFO

Microsoft Security Advisory CVE-2026-96231 - .NET and Visual Studio Elevation of Privilege Vulnerability

CVE-2026-96231

## Executive summary Microsoft is releasing this security advisory to provide information about a vulnerability in Micr

历史摘要 · 未重新核验 · GitHub Advisory

#advisory #nuget #cwe-59 #severity:high

漏洞预警2026-10-13 发布HIGH

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-88133

Improper authorization in Windows Portable Device Enumerator Service allows an authorized attacker to elevate privileges

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-13 发布HIGH

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized attacker to elevate privileges locally.

CVE-2026-85849

Improper link resolution before file access ('link following') in Windows AppX Deployment Service allows an authorized a

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-13 发布HIGH

Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to elevate privileges locally.

CVE-2026-85343

Improper link resolution before file access ('link following') in Windows Hyper-V allows an authorized attacker to eleva

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-13 发布MEDIUM

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to disclose information locally.

CVE-2026-83933

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authoriz

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-13 发布HIGH

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authorized attacker to elevate privileges locally.

CVE-2026-83793

Improper link resolution before file access ('link following') in Windows Update Orchestrator Service allows an authoriz

来源摘录 · NVD

#cve #cwe-59

漏洞预警2026-10-13 发布HIGH

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorized attacker to elevate privileges locally.

CVE-2026-83704

Improper link resolution before file access ('link following') in Microsoft Windows Search Component allows an authorize

来源摘录 · NVD

#cve #cwe-59