134883 matches found
CVE-2026-82460
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
CVE-2026-82460 Cloud Commander before 19.20.2 Directory Traversal via REST and Markdown
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
EUVD-2026-68117
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
CVE-2026-82460 Cloud Commander before 19.20.2 Directory Traversal via REST and Markdown
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
Exploit for CVE-2026-12243
CVE-2026-12243 — NLTK Path Traversal Lab !CVEhttps://img...
CVE-2026-82481
The cohttp package before 6.3.0 for OCaml allows directory traversal...
CVE-2026-82481
The cohttp package before 6.3.0 for OCaml allows directory traversal...
UBUNTU-CVE-2026-82481
The cohttp package before 6.3.0 for OCaml allows directory traversal...
Header Injection
Apache Camel Knative component is vulnerable to Header Injection. The vulnerability is due to structured CloudEvent extension fields being copied into Exchange headers without filtering, allowing an attacker to inject Camel-internal headers and influence downstream components, potentially enablin...
CVE-2026-82481
The cohttp package before 6.3.0 for OCaml allows directory traversal...
CVE-2026-82481
CVE-2026-82481 affects the cohttp HTTP client/server library for OCaml , prior to version 6.3.0 , which allows directory traversal . The CVSS 4.0 base score is 8.7 (HIGH) , with a HIGH confidentiality impact on the vulnerable system, low attack complexity, and no privileges or user interaction re...
CVE-2026-82481
The cohttp package before 6.3.0 for OCaml allows directory traversal...
CVE-2026-82481
The cohttp package before 6.3.0 for OCaml allows directory traversal...
EUVD-2026-68116
The cohttp package before 6.3.0 for OCaml allows directory traversal...
CVE-2026-82481
The cohttp package before 6.3.0 for OCaml allows directory traversal...
CVE-2026-82481
The cohttp package before 6.3.0 for OCaml allows directory traversal...
CVE-2026-82455
Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security vulnerability, so no vulnerability exists for this record to describe...
AZL-98403 CVE-2026-82455 affecting package ruby 3.3.5-9
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
CVE-2026-82455
Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior during gem extraction is not a security vulnerability, so no vulnerability exists for this record to describe...
UBUNTU-CVE-2026-82455
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...