115402 matches found
CVE-2026-64826 rConfig < 8.2.13 Path Traversal File Read via FileDownloadController
rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory traversal sequences in the filename GET parameter of the downloadexport method. Attackers can craft requests with ../ sequences to escape th...
CVE-2026-64826 rConfig < 8.2.13 Path Traversal File Read via FileDownloadController
rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory traversal sequences in the filename GET parameter of the downloadexport method. Attackers can craft requests with ../ sequences to escape th...
CVE-2026-64826 rConfig < 8.2.13 Path Traversal File Read via FileDownloadController
rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory traversal sequences in the filename GET parameter of the downloadexport method. Attackers can craft requests with ../ sequences to escape th...
EUVD-2026-57612
rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory traversal sequences in the filename GET parameter of the downloadexport method. Attackers can craft requests with ../ sequences to escape th...
CVE-2026-64826
rConfig before 8.2.13 contains a path traversal vulnerability that allows authenticated attackers to read arbitrary files by supplying unsanitized directory traversal sequences in the filename GET parameter of the downloadexport method. Attackers can craft requests with ../ sequences to escape th...
CVE-2026-64826
rConfig before 8.2.13 suffers a path traversal vulnerability in the download_export() method that allows authenticated attackers to read arbitrary files by unsafely handling directory traversal sequences in the filename GET parameter. Exploitable via crafted requests containing ../ sequences to e...
CVE-2026-13105
CVE-2026-13105 affects IBM i Access Client Solutions (ACS) versions 1.1.2.0–1.1.9.13. The vulnerability is a zip slip/path traversal issue that occurs when importing a configuration, arising from improper handling of archive paths. Impact is high (C:H/I:H/A:H) as per IBM’s CVSS vector, with netwo...
CVE-2026-13105 IBM i Access Client Solutions (ACS) is Affected By Multiple Vulnerabilities
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration...
EUVD-2026-57611
IBM i Access Client Solutions 1.1.2.0 through 1.1.9.13 is vulnerable to zip slip path traversal exploit when importing a configuration...
EUVD-2026-57610
Astro is a web framework for content-driven websites. Prior to 8.1.2, the Astro Netlify adapter converts each image.remotePatterns entry into a regular expression written to .netlify/v1/config.json under images.remoteimages for Netlify's Image CDN allowlist. In...
GHSA-M65R-RPRJ-R5RG vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-68930 vulnerabilities
Vulnerabilities for packages: yazi...
GHSA-CQJC-RMPQ-XPRQ vulnerabilities
Vulnerabilities for packages: yazi...
GHSA-RP2P-6CMP-JXJ9 vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-WP74-JGXH-GV4Q vulnerabilities
Vulnerabilities for packages: dotnet-bootstrap...
GHSA-G9HV-X236-4QP3 vulnerabilities
Vulnerabilities for packages: yazi...
GHSA-CQJC-RMPQ-XPRQ vulnerabilities
Vulnerabilities for packages: yazi...
GHSA-M65R-RPRJ-R5RG vulnerabilities
Vulnerabilities for packages: yazi...