134883 matches found
CVE-2026-82455 RubyGems before 4.0.13 Path Traversal via Symlink Resolution
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
EUVD-2026-68102
RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files that appear to be written under the destination directory can instead be writt...
CVE-2026-82455
...
CVE-2026-82455
RubyGems before 4.0.13 fails to re-validate path containment after filesystem symlink resolution during gem extraction. When a pre-existing symlink inside the destination directory points outside the extraction root, extracted files can be written outside the intended directory, breaking the extr...
Path Traversal
Apache Camel Azure-Storage Datalake component is vulnerable to Path Traversal. The vulnerability is due to DataLakeFileOperations.downloadToFile joining the configured fileDir with an unvalidated remote path name, allowing an attacker to influence Data Lake file names and cause files to be create...
Path Traversal
Apache Camel is vulnerable to Path Traversal. The vulnerability is due to the Azure Storage Blob component constructing local file paths directly from attacker-influenced blob names without path normalization or containment checks, which allows an attacker to create or overwrite files outside the...
CVE-2026-77012 Icollect <= 1.0.0 - Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write via Default Publishing Password
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated endpoints, relying on a hardcoded default, and does not validate the URLs or destination paths it is given, allowing unauthenticated attackers to read arbitrary files from the...
CVE-2026-77012
The 爱采集数据采集和发布插件 WordPress plugin (versions
CVE-2026-77012 Icollect <= 1.0.0 - Unauthenticated Arbitrary File Read, SSRF and Path Traversal File Write via Default Publishing Password
The 爱采集数据采集和发布插件 WordPress plugin through 1.0.0 does not require a per-install secret for one of its unauthenticated endpoints, relying on a hardcoded default, and does not validate the URLs or destination paths it is given, allowing unauthenticated attackers to read arbitrary files from the...
Exploit for CVE-2026-82286
CVE-2026-82286 — gpt-crawler Unauthenticated Arbitrary File Wr...
EUVD-2026-67954
IBM Langflow OSS 1.0.0 through 1.11.1 could allow a remote attacker to read arbitrary files due to path traversal...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001469)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001469 advisory. In the Linux kernel, the following vulnerability has been resolved: net: gtp: Fix Use-After-Free in gtpdellink Since callrcu, which is called in the...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-001422)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-001422 advisory. In the Linux kernel, the following vulnerability has been resolved: firmwareloader: Block path traversal Most firmware names are hardcoded strings, or are constructe...
PT-2026-83434
Name of the Vulnerable Software and Affected Versions RubyGems versions prior to 4.0.13 Description RubyGems fails to re-validate path containment after filesystem symlink resolution during gem extraction. If a pre-existing symlink within the destination directory points outside the extraction...
CVE-2026-82460: Improper Limitation of a Pathname to a Restricted Directory
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
PT-2026-83440
Cloud Commander before 19.20.2 contains a directory traversal vulnerability in REST file-operation and markdown endpoints that fails to properly validate path normalization. Attackers can use path traversal sequences to read, write, move, or copy files outside the configured root directory...
CVE-2026-82481: Incorrect Behavior Order: Validate Before Canonicalize
The cohttp package before 6.3.0 for OCaml allows directory traversal...
Unity Linux 20.1070e Security Update: spice-vdagent (UTSA-2026-104950)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104950 advisory. A path traversal vulnerability was found in spice-vdagent. This flaw allows a malicious or compromised SPICE host to write arbitrary files to any location on the gue...
Unity Linux 20.1070e Security Update: python-Keras (UTSA-2026-104956)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-104956 advisory. A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archive that bypasses the filtersafetarinfos validation in...