A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by...
CVE-2026-91202
A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory co
#cwe-61
共收录 78 条相关情报。
← 返回所有主题A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory containing a symbolic link (symlink) and then using the pri...
CVE-2026-91202
A flaw was found in cockpit-files. A low-privileged local user can exploit this vulnerability by crafting a directory co
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several software components that could potentially enable remote ...
CVE-2026-91099
HP has identified and remediated multiple externally reported vulnerabilities within HPLIP. The findings affect several
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based chown() on the swtpm logfile without checking for symbolic ...
CVE-2026-77159
A symlink-following flaw was found in libvirt's qemuTPMEmulatorPrepareHost() function. The function uses a path-based ch
UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This issue affects LACT: through 0.10.0.
CVE-2026-75038
UNIX symbolic link (symlink) following vulnerability in ilya-zlobintsev/LACT allows for local denial-of-service. This is
Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-controlled backup archive and copies them into live applica...
CVE-2026-55168
Runtipi is a personal homeserver orchestrator. In 4.10.0 and earlier, Runtipi accepts symbolic links from an attacker-co
Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus user (a non-admin TLS/RBAC identity with `can_create_ima...
CVE-2026-63125
Incus is a system container and virtual machine manager. Prior to version 7.3.0, an unprivileged, project-confined Incus
Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the recursive-nix experimental feature can exploit a time-of-che...
CVE-2026-64846
Nix is a package manager for Linux and other Unix systems. Prior to 2.35.0, a malicious derivation executed with the rec
Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, Dell PowerMax Version 10.3.0, Dell Unity Version 5.4, Dell...
CVE-2026-32657
Dell AppSync Version 4.6.0.0, Dell Metro Node Version 8.0.0, Dell UCC Edge Version 3.0.1, Dell VxRail Version 8.0.322, D
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs `/dev` directory without `O_NOFOLL...
CVE-2026-47766
crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup open
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in in...
CVE-2026-53802
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the r
rsync < 3.5.0 Arbitrary File Read via Symlink Following
CVE-2026-53802
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the r
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prior to 5.8.2 (and 4.5.7 on the 4.x line), Security::_checkD...
CVE-2026-62992
Smarty is a template engine for PHP, facilitating the separation of presentation (HTML/CSS) from application logic. Prio
Smarty: Symlink path traversal out of trusted directories
CVE-2026-62992
When Smarty's Security policy is enabled, secure_dir (and the configured template/trusted directories) restrict which lo
proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro install extracted plain tarball root filesystems through _extract_plain_tar() in pr...
CVE-2026-54574
proot-distro is a utility for managing proot containers. Prior to version 5.1.5, proot-distro install extracted plain ta
`proot-distro install` has a Symlink Escape (Arbitrary Host File Write) via Malicious Tar Archive
CVE-2026-54574
**Repository:** `termux/proot-distro` **Component:** `proot_distro/commands/install.py` → `_extract_plain_tar()`; also
skilo add follows symbolic links, allowing arbitrary local file disclosure from a malicious skill source
### Impact `skilo add` installs a skill by recursively copying the skill directory into the target skills directory. Th
Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authenticated attacker with Pack import and pipeline preview p...
CVE-2026-56748
Improper validation of symbolic links in the Pack Git import feature in Cribl Stream before 4.18.2 allows a remote authe
A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.externalLocation of the file src/main/java/spark/resource/Exte...
CVE-2026-17459
CVE-2026-17459 是 SparkJava (perwendel/spark) 组件中的一个路径遍历漏洞，影响版本 up to 2.9.4。该漏洞位于 ExternalResourceHandler.java 文件的 static
perwendel spark SparkJava ExternalResourceHandler.jav staticFiles.externalLocation symlink
CVE-2026-17459
A vulnerability was determined in perwendel spark up to 2.9.4. This vulnerability affects the function staticFiles.exter