115437 matches found
CVE-2026-66384
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-65940
In WhatsUp Gold versions released before 2026.0.2, a privileged attacker can write arbitrary files to a web-accessible location on the host server...
CVE-2026-18536
A flaw was found in Data-Entropy. This component reads remote entropy randomness sources over unencrypted HTTP. An on-path attacker, such as one on an open Wi-Fi network or a compromised internet service provider ISP, can intercept and alter the responses from these sources. This allows the...
External Control of File Name or Path
Overview SSH.NET is a Secure Shell SSH library for .NET, optimized for parallelism and with broad framework support. Affected versions of this package are vulnerable to External Control of File Name or Path via server-controlled SCP filenames through the recursive download path in...
SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames
Summary ScpClient.Downloadstring directoryName, DirectoryInfo directoryInfo writes files and directories using names returned by the remote SCP server during recursive downloads, with no validation that the resulting path stays inside the requested local directory. A malicious, compromised, or...
GHSA-Q939-RPR3-3284 SSH.NET: ScpClient Recursive Download Allows Arbitrary File Write via Server-Controlled SCP Filenames
Summary ScpClient.Downloadstring directoryName, DirectoryInfo directoryInfo writes files and directories using names returned by the remote SCP server during recursive downloads, with no validation that the resulting path stays inside the requested local directory. A malicious, compromised, or...
CVE-2026-73291
Seerr is an open-source media request and discovery manager for Jellyfin, Plex, and Emby. Prior to version 3.4.0, Seerr's ImageProxy in server/lib/imageproxy.ts uses the upstream ETag and Content-Type response headers to build a cache filename for the unauthenticated GET...
CVE-2026-66382
An authenticated user may write files outside the intended Artifactory work directory under specific conditions...
CVE-2026-66381
A repository reader with cache-deploy permission may access content outside a configured upstream path under specific conditions...
CVE-2025-59321
CPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 contains a default TPM PCR policy that fails to consider the system boot state. This allows the TPM to be unsealed via an unintended execution path or from another hardware platform...
EUVD-2026-57256
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384 Authenticated users may write data outside the intended Docker cache path
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions...
CVE-2026-66384
JFrog Artifactory is affected by an improper limitation of a pathname to a restricted directory , allowing an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions. The vulnerability carries a CVSS score of 5.3 (MEDIUM) with high integ...
CVE-2026-66382 Authenticated users may write files outside the intended Artifactory work directory
An authenticated user may write files outside the intended Artifactory work directory under specific conditions...
CVE-2026-66382
Technical details for CVE-2026-66382 are not publicly available in the provided documents. Monitor official advisories for updates.
EUVD-2026-57251
An authenticated user may write files outside the intended Artifactory work directory under specific conditions...