Lucene search
+L

23256 matches found

Snyk
Snyk
added 2026/05/19 3:55 p.m.44 views

Directory Traversal

Overview n8n-nodes-base is a Base nodes of n8n Affected versions of this package are vulnerable to Directory Traversal via the ExecuteWorkflow node's localFile source option. An attacker can enumerate arbitrary files on the server host and in some instances can achieve arbitrary code execution by...

6.4CVSS6.3AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/19 3:47 p.m.18 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal due to the improper validation of annotations from org.opencontainers.image.title in pullArtifact methods in Registry and OCILayout. An attacker can manipulate this annotation to create a path that escapes the output...

8.1CVSS6.2AI score
SaveExploits0References2
Snyk
Snyk
added 2026/05/19 3:38 p.m.7 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal due to improper path validation in the repository checkout process. An attacker can modify files outside the intended target directory, including .git directories, by supplying a maliciously crafted repository payloa...

5.4CVSS6.3AI score0.00297EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/19 3:38 p.m.7 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal due to improper path validation in the repository checkout process. An attacker can modify files outside the intended target directory, including .git directories, by supplying a maliciously crafted repository payloa...

5.4CVSS6.3AI score0.00297EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/19 3:38 p.m.10 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal due to improper path validation in the repository checkout process. An attacker can modify files outside the intended target directory, including .git directories, by supplying a maliciously crafted repository payloa...

5.4CVSS6.3AI score0.00297EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/19 3:31 p.m.8 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the process handling HTTP requests. An attacker can access arbitrary files on the server by sending specially crafted requests containing directory traversal sequences. Details A Directory Traversal attack also...

7.3CVSS7.8AI score0.00523EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/19 3:16 p.m.9 views

Directory Traversal

Overview zrok is a zrok Affected versions of this package are vulnerable to Directory Traversal due to Alice exposing a Python SDK ProxyShare with a fixed target URL. Bob sends a request to the share with an absolute URL in the path. The Flask handler passes that path to urllib.parse.urljoin, whi...

10CVSS6.4AI score0.00361EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/19 2:1 p.m.6 views

OPENSUSE-SU-2026:20771-1 Security update for perl-YAML-Syck

This update for perl-YAML-Syck fixes the following issues: Changes in perl-YAML-Syck: - updated to 1.450.0 1.45 Bug Fixes - Fix: use syckbase64free to fix Windows "Free to wrong pool" crash in base64 encode/decode buffers; also plugs a memory leak PR 189 - Fix: clear type tag on blessed scalar...

9.1CVSS6AI score0.00429EPSS
SaveExploits0References4
RedHat Linux
RedHat Linux
added 2026/05/19 1:41 p.m.18 views

org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation

An improper input neutralization flaw has been discovered in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a...

9.6CVSS7.3AI score0.10137EPSS
SaveExploits0References6
OSV
OSV
added 2026/05/19 12:31 p.m.10 views

GHSA-C72X-MC2P-WV7X TYPO3 ke_search path traversal due to lack of normalization on config directory from file indexer

In TYPO3 faceted fulltext search kesearch, the file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences. This has been patche...

5.9CVSS5.9AI score0.00404EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/05/19 12:31 p.m.22 views

TYPO3 ke_search path traversal due to lack of normalization on config directory from file indexer

In TYPO3 faceted fulltext search kesearch, the file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences. This has been patche...

5.9CVSS5.9AI score0.00404EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
added 2026/05/19 10:42 a.m.13 views

Improper Validation of Syntactic Correctness of Input

Overview org.keycloak:keycloak-saml-core is an Identity and Access Management plugin for Keycloak. Affected versions of this package are vulnerable to Improper Validation of Syntactic Correctness of Input in the SAMLParser and SAML11ParserUtil code paths that handle SAML 1.1 assertions and protoc...

8.7CVSS5.9AI score0.00743EPSS
SaveExploits0References2
NVD
NVD
added 2026/05/19 10:16 a.m.19 views

CVE-2026-46724

The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences...

5.9CVSS0.00404EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2026/05/19 9:24 a.m.11 views

CVE-2026-46724 Path Traversal in extension "Faceted Search" (ke_search)

The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences...

5.9CVSS5.9AI score0.00404EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/05/19 9:24 a.m.23 views

EUVD-2026-30864

The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences...

5.9CVSS5.9AI score0.00404EPSS
SaveExploits0References1
CVE
CVE
added 2026/05/19 9:24 a.m.32 views

CVE-2026-46724

CVE-2026-46724 affects the Typo3 extension Faceted Search (ke_search). The file indexer does not normalize the configured directory path, allowing a backend user with permission to edit indexer configurations to index documents from arbitrary server file-system locations via path traversal. CVSS ...

5.9CVSS5.9AI score0.00404EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/05/19 9:24 a.m.46 views

CVE-2026-46724 Path Traversal in extension "Faceted Search" (ke_search)

The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences...

5.9CVSS0.00404EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/19 9:24 a.m.10 views

CVE-2026-46724

The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences...

5.9CVSS5.9AI score0.00404EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/05/19 9:24 a.m.10 views

CVE-2026-46724 Path Traversal in extension "Faceted Search" (ke_search)

The file indexer does not normalize the configured directory path. A backend user with permission to edit indexer configurations can index documents from arbitrary locations on the server file system through path traversal sequences...

5.9CVSS6.1AI score
SaveExploits0References5
RedHat Linux
RedHat Linux
added 2026/05/19 9:22 a.m.14 views

org.apache.tomcat/tomcat-juli: tomcat: Apache Tomcat: console manipulation

An improper input neutralization flaw has been discovered in Apache Tomcat. Tomcat did not escape ANSI escape sequences in log messages. If Tomcat was running in a console on a Windows operating system, and the console supported ANSI escape sequences, it was possible for an attacker to use a...

9.6CVSS7.3AI score0.10137EPSS
SaveExploits0References6
Rows per page
Query Builder