https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 03 Oct 2026 00:41:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-11782 EUVD-2026-11782 https://cve.radiocsirt.org/vuln/euvd-2026-11782 https://cve.radiocsirt.org/vuln/fkie_cve-2022-1537 <p>file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privileged user has write access to both source and destination directories as the lower-privileged user can create a symlink to the GruntJS user&#39;s .bashrc file or replace /etc/shadow file if the GruntJS user is root.</p> <p>file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privileged user has write access to both source and destination directories as the lower-privileged user can create a symlink to the GruntJS user&#39;s .bashrc file or replace /etc/shadow file if the GruntJS user is root.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-1537 https://cve.radiocsirt.org/vuln/ghsa-rm36-94g8-835r <p><strong>Affected:</strong> npm: grunt</p> <p>file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privileged user has write access to both source and destination directories as the lower-privileged user can create a symlink to the GruntJS user&#39;s .bashrc file or replace /etc/shadow file if the GruntJS user is root.</p> <p><strong>Affected:</strong> npm: grunt</p> <p>file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privileged user has write access to both source and destination directories as the lower-privileged user can create a symlink to the GruntJS user&#39;s .bashrc file or replace /etc/shadow file if the GruntJS user is root.</p> https://cve.radiocsirt.org/vuln/ghsa-rm36-94g8-835r https://cve.radiocsirt.org/vuln/gsd-2022-1537 gsd-2022-1537 https://cve.radiocsirt.org/vuln/gsd-2022-1537 https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1537 <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: grunt, Ubuntu:Pro:20.04:LTS: grunt, Ubuntu:Pro:22.04:LTS: grunt</p> <p>file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privileged user has write access to both source and destination directories as the lower-privileged user can create a symlink to the GruntJS user&#39;s .bashrc file or replace /etc/shadow file if the GruntJS user is root.</p> <p><strong>Affected:</strong> Ubuntu:Pro:18.04:LTS: grunt, Ubuntu:Pro:20.04:LTS: grunt, Ubuntu:Pro:22.04:LTS: grunt</p> <p>file.copy operations in GruntJS are vulnerable to a TOCTOU race condition leading to arbitrary file write in GitHub repository gruntjs/grunt prior to 1.5.3. This vulnerability is capable of arbitrary file writes which can lead to local privilege escalation to the GruntJS user if a lower-privileged user has write access to both source and destination directories as the lower-privileged user can create a symlink to the GruntJS user&#39;s .bashrc file or replace /etc/shadow file if the GruntJS user is root.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2022-1537 https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2460 <p>Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> <p>Ein Angreifer kann mehrere Schwachstellen in Atlassian Bamboo, Bitbucket, Confluence, Fisheye, Crucible, Jira und Jira Service Management ausnutzen, um beliebigen Code auszuführen, erweiterte Berechtigungen zu erlangen, Sicherheitsmaßnahmen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand auszulösen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2460