116223 matches found
Exploit for Path Traversal in Apache Http_Server
AI 오케스트레이션 기반 CVE 분석 — CVE-2021-41773 AI에게 CVE 분석을 시키고, A...
GHSA-9XWG-3R6F-JCX2 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-67422 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-61632 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-12061 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-59936 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-55H5-XMCQ-C37V vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-FG7F-2386-8897 vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-59935 vulnerabilities
Vulnerabilities for packages: open-webui...
GHSA-5XF7-4P34-54QR vulnerabilities
Vulnerabilities for packages: open-webui...
CVE-2026-44763
SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on condition...
EUVD-2025-210676
The affected TP-Link Aginet devices do not properly validate symbolic links created on external USB storage devices. By placing a crafted symbolic link on supported storage media, an attacker may cause the system to resolve the link. Successful exploitation may allow unauthorized read access to...
CVE-2026-58236
The CVE-2026-58236 entry concerns SAP NetWeaver Application Server ABAP and ABAP Platform, where an attacker with high privileges can bypass a missing security control on an internal code path and trigger OS command execution. The impact description indicates OS-level command execution that could...
EUVD-2026-55863
SAP Manufacturing Integration and Intelligence allows a privileged attacker to exploit insufficient file path validation in certain functions using specially crafted input. Exploitation also requires a legitimate user to subsequently access the attacker-influenced content and depends on condition...
CVE-2026-44763
Technical details about CVE-2026-44763 are not publicly available in the provided documents; monitor SAP security advisories and the referenced notes for updates.
SUSE CVE-2026-15059
Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a missing path traversal validation...
PT-2026-70879
electerm is an open-sourced terminal/ssh/sftp/telnet/serialport/RDP/VNC/Spice/ftp client. Prior to 3.15.120, electerm allows a malicious RDP server to write attacker-controlled content outside the selected save directory because the RDP clipboard download path in...
PT-2026-70175
n8n before 2.31.5 and 2.32.x before 2.32.1 contain a path-confinement bypass in the @n8n/computer-use file-search search files tool. A crafted search pattern can bypass the base-directory confinement check and expand to locations outside the configured directory, causing the tool to return the...
PT-2026-70337
Name of the Vulnerable Software and Affected Versions gaudi-container-runtime versions prior to 1.24.0 Description A path traversal issue exists within Ring 3: User Applications, which may allow an authenticated, unprivileged software adversary to escalate privileges. This can occur via local...