17836 matches found
CVE-2026-90932
LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in core-upgrade backup handling. The CoreUpgradeController and BackupService concatenate a user-supplied backup_file/filename value directly onto the backup directory path without normalisation or path-containment c...
CVE-2026-90932 LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE
LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...
EUVD-2026-77450
LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...
CVE-2026-90932 LaraDashboard 0.9.2 through 1.2.2 Path Traversal RCE
LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backupfile/filename value directly onto the backup directory path without...
Astra Linux – Vulnerability in Firefox and Thunderbird
Sandbox escape in the Profile Backup component. This vulnerability was fixed in Firefox 150.0.3, Firefox ESR 115.36, Firefox ESR 140.11, and Thunderbird 140.11...
Astra Linux – Vulnerability in targetcli-fb
The Open-iSCSI TargetCLI-fb version up to 2.1.52 has weak permissions for the /etc/target directory as well as for the backup directory and backup files...
CVE-2026-82786
Insufficiently protected credentials issue exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. If this vulnerability is exploited, sensitive information may be restored from a backup file...
EUVD-2026-77239
Insufficiently protected credentials issue exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. If this vulnerability is exploited, sensitive information may be restored from a backup file...
CVE-2026-82786
CVE-2026-82786 affects the Contec Remote I/O Coupler Unit (Server Type) CPSN-MCB271- *. The root cause is an insufficiently protected credentials issue: if exploited, sensitive information may be restored from a backup file . The vulnerability is scored 6.3 (CVSS v3.1, MEDIUM) and 8.2 (CVSS v4.0,...
CVE-2026-82786
Insufficiently protected credentials issue exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. If this vulnerability is exploited, sensitive information may be restored from a backup file...
CVE-2026-82786
Insufficiently protected credentials issue exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. If this vulnerability is exploited, sensitive information may be restored from a backup file...
CVE-2023-34854
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...
UBUNTU-CVE-2023-34854
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...
CVE-2023-34854
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...
PT-2026-91208
LaraDashboard versions 0.9.2 through 1.2.2 contain a path traversal vulnerability in the core-upgrade backup handling. CoreUpgradeController and BackupService e.g. BackupService::deleteBackup concatenate the user-supplied backup file/filename value directly onto the backup directory path without...
EUVD-2023-60662
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...
CVE-2023-34854
HotelDruid before 3.0.6 has insufficient file upload sanitation in the backup/restore function...
CVE-2026-82786: Insufficiently Protected Credentials
Insufficiently protected credentials issue exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. If this vulnerability is exploited, sensitive information may be restored from a backup file...
PT-2026-91090
Insufficiently protected credentials issue exists in Remote I/O Coupler Unit Server Type CPSN-MCB271-. If this vulnerability is exploited, sensitive information may be restored from a backup file...