Lucene search
+L

23049 matches found

Snyk
Snyk
added 2026/06/12 6:15 p.m.7 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the FileInfo.Name field during federation sync. An attacker can overwrite or create files in arbitrary locations within the server's filestore by sending specially crafted filenames containing path traversal...

7.6CVSS6.5AI score0.00305EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/06/12 6:15 p.m.4 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal in the FileInfo.Name field during federation sync. An attacker can overwrite or create files in arbitrary locations within the server's filestore by sending specially crafted filenames containing path traversal...

7.6CVSS6.5AI score0.00305EPSS
SaveExploits0References2
NVD
NVD
added 2026/06/12 5:16 p.m.18 views

CVE-2026-6961

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 Mattermost fails to sanitize FileInfo.Name received from federated peers during shared channel file sync, which allows an attacker who controls a federated server to write files to arbitrary locations...

7.6CVSS0.00305EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/06/12 3:56 p.m.35 views

CVE-2026-6961 CVE-2026-6961: Path traversal via unsanitized FileInfo.Name in Mattermost federation sync

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 Mattermost fails to sanitize FileInfo.Name received from federated peers during shared channel file sync, which allows an attacker who controls a federated server to write files to arbitrary locations...

7.6CVSS0.00305EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/06/12 3:56 p.m.13 views

CVE-2026-6961 CVE-2026-6961: Path traversal via unsanitized FileInfo.Name in Mattermost federation sync

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 Mattermost fails to sanitize FileInfo.Name received from federated peers during shared channel file sync, which allows an attacker who controls a federated server to write files to arbitrary locations...

7.6CVSS5.4AI score0.00305EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/06/12 3:56 p.m.17 views

EUVD-2026-36504

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 Mattermost fails to sanitize FileInfo.Name received from federated peers during shared channel file sync, which allows an attacker who controls a federated server to write files to arbitrary locations...

7.6CVSS5.4AI score0.00305EPSS
SaveExploits0References1
CVE
CVE
added 2026/06/12 3:56 p.m.26 views

CVE-2026-6961

Mattermost CVE-2026-6961 affects Mattermost versions 11.6.x <= 11.6.1, 11.5.x <= 11.5.4, and 10.11.x <= 10.11.15/10.11.x

7.6CVSS5.5AI score0.00305EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/06/12 3:56 p.m.5 views

CVE-2026-6961 CVE-2026-6961: Path traversal via unsanitized FileInfo.Name in Mattermost federation sync

Mattermost versions 11.6.x = 11.6.1, 11.5.x = 11.5.4, 10.11.x = 10.11.15, 10.11.x = 10.11.16 Mattermost fails to sanitize FileInfo.Name received from federated peers during shared channel file sync, which allows an attacker who controls a federated server to write files to arbitrary locations...

7.6CVSS6AI score
SaveExploits0References3
Github Security Blog
Github Security Blog
added 2026/06/12 3:7 p.m.16 views

SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator

Programs using swift-nio is vulnerable to HTTP request smuggling and HTTP response splitting attacks, caused by insufficient validation of outbound HTTP/1.1 request and response start line components. This vulnerability affects all swift-nio versions from 2.0.0 to 2.99.0. It is fixed in 2.100.0 a...

5.7AI score0.00044EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/06/12 3:7 p.m.71 views

GHSA-CQ87-8R7H-962V SwiftNIO: CRLF Injection in outbound HTTP request URI via NIOHTTPRequestHeadersValidator

Programs using swift-nio is vulnerable to HTTP request smuggling and HTTP response splitting attacks, caused by insufficient validation of outbound HTTP/1.1 request and response start line components. This vulnerability affects all swift-nio versions from 2.0.0 to 2.99.0. It is fixed in 2.100.0 a...

8.9CVSS5.7AI score0.00044EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/12 12:27 p.m.8 views

OESA-2026-2670 gvfs security update

Gvfs is a userspace virtual filesystem implementation for GIO a library available in GLib. It comes with a set of backends, including trash support, SFTP, SMB, HTTP, DAV, and many others. Gvfs also contains modules for GIO that implement volume monitors and persistent metadata storage. Security...

4.3CVSS8.8AI score0.0036EPSS
SaveExploits2References2
OSV
OSV
added 2026/06/12 12:27 p.m.11 views

OESA-2026-2669 gvfs security update

Gvfs is a userspace virtual filesystem implementation for GIO a library available in GLib. It comes with a set of backends, including trash support, SFTP, SMB, HTTP, DAV, and many others. Gvfs also contains modules for GIO that implement volume monitors and persistent metadata storage. Security...

4.3CVSS8.8AI score0.0036EPSS
SaveExploits2References3
OSV
OSV
added 2026/06/12 12:25 p.m.11 views

OESA-2026-2633 evolution-data-server security update

The evolution-data-server package provides a personal information management application that provides integrated mail, calendaring and address book functionality. The evolution-data-server package provides a single database for common, desktop-wide information, such as a user's address book or...

5.6CVSS5.5AI score0.00189EPSS
SaveExploits0References2
OSV
OSV
added 2026/06/12 12:25 p.m.11 views

OESA-2026-2632 evolution-data-server security update

The evolution-data-server package provides a personal information management application that provides integrated mail, calendaring and address book functionality. The evolution-data-server package provides a single database for common, desktop-wide information, such as a user's address book or...

5.6CVSS5.5AI score0.00189EPSS
SaveExploits0References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/12 11:10 a.m.13 views

Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition

Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate Developer Edition version 2.11.0 Vulnerability Details CVEID:CVE-2026-27139 DESCRIPTION: On Unix platforms, when listing the contents of a directory using File.ReadDir or File.Readdir the returned FileInfo could reference ...

9.8CVSS7AI score0.02415EPSS
SaveExploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/12 11:1 a.m.15 views

Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition

Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate Developer Edition version 2.11.0 Vulnerability Details CVEID:CVE-2026-40895 DESCRIPTION: follow-redirects is an open source, drop-in replacement for Node's http and https modules that automatically follows redirects. Prior...

9.3CVSS5.2AI score0.00808EPSS
SaveExploits4Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/12 10:57 a.m.15 views

Security Bulletin: Multiple vulnerabilities in IBM watsonx Orchestrate Developer Edition

Summary Multiple vulnerabilities were addressed in IBM watsonx Orchestrate Developer Edition version 2.11.0 Vulnerability Details CVEID:CVE-2026-42577 DESCRIPTION: Netty is an asynchronous, event-driven network application framework. From 4.2.0.Final to 4.2.13.Final , Netty's epoll transport fail...

9.8CVSS7AI score0.00745EPSS
SaveExploits5Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/12 6:40 a.m.11 views

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were addressed in IBM Observability with Instana OnPrem build 1.0.319 Vulnerability Details CVEID:CVE-2018-20225 DESCRIPTION: An issue was discovered in pip all versions because it installs the version with the highest version number, even if the user had intended...

9.1CVSS6AI score0.01736EPSS
SaveExploits7Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/06/12 2:27 a.m.16 views

Security Bulletin: Multiple vulnerabilities have been addressed in IBM Aspera Shares

Summary Multiple vulnerabilities have been addressed in IBM Aspera Shares Version 1.11.3 Vulnerability Details CVEID:CVE-2026-42245 DESCRIPTION: Net::IMAP implements Internet Message Access Protocol IMAP client functionality in Ruby. Prior to versions 0.4.24, 0.5.14, and 0.6.4,...

9.8CVSS7AI score0.61469EPSS
SaveExploits41Affected Software5
Packet Storm
Packet Storm
added 2026/06/12 12:0 a.m.129 views

📄 WordPress Gravity Forms 2.10.0.1 File Deletion / Path Traversal

This Metasploit module exploits a vulnerability in the Gravity Forms WordPress plugin versions 2.10.0.1 and below where file URLs stored in form entries are not properly validated. An attacker can inject a crafted entry containing path traversal sequences ../ to reference files outside the intend...

9.6CVSS5.3AI score0.00468EPSS
SaveExploits2
Rows per page
Query Builder