Lucene search
K

20836 matches found

Snyk
Snyk
added 2026/02/24 3:40 p.m.2 views

Directory Traversal

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 3:40 p.m.2 views

Directory Traversal

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 3:40 p.m.4 views

Directory Traversal

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 3:40 p.m.4 views

Directory Traversal

Overview Magick.NET-Q16-HDRI-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package a...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 3:40 p.m.4 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the path security policy enforcement. An attacker can access sensitive files by supplying specially crafted file paths containing traversal sequences like /etc/. Details A Directory Traversal attack also known as...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 3:40 p.m.3 views

Directory Traversal

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 3:40 p.m.2 views

Directory Traversal

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 3:40 p.m.3 views

Directory Traversal

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 3:40 p.m.4 views

Directory Traversal

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 3:40 p.m.2 views

Directory Traversal

Overview Magick.NET-Q16-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 3:40 p.m.4 views

Directory Traversal

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
Snyk
Snyk
added 2026/02/24 3:40 p.m.4 views

Directory Traversal

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS6.5AI score0.00751EPSS
Exploits0References2
NVD
NVD
added 2026/02/24 3:21 p.m.8 views

CVE-2026-27483

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution. The vulnerability exists in the...

8.8CVSS0.11113EPSS
Exploits4References3
EUVD
EUVD
added 2026/02/24 2:0 p.m.4 views

EUVD-2026-8466

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution. The vulnerability exists in the...

8.8CVSS5.8AI score0.11113EPSS
Exploits4References3
Vulnrichment
Vulnrichment
added 2026/02/24 2:0 p.m.5 views

CVE-2026-27483 MindsDB has Path Traversal in /api/files Leading to Remote Code Execution

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution. The vulnerability exists in the...

8.8CVSS6.1AI score0.11113EPSS
Exploits4References3
CVE
CVE
added 2026/02/24 2:0 p.m.15 views

CVE-2026-27483

The CVE-2026-27483 entry describes MindsDB prior to version 25.9.1.1 with a path traversal in the /api/files "Upload File" module. The vulnerability arises because multipart uploads do not filter the uploaded filename path, allowing an authenticated attacker to inject "../" sequences and cause fi...

8.8CVSS5.8AI score0.11113EPSS
Exploits4References3Affected Software1
Cvelist
Cvelist
added 2026/02/24 2:0 p.m.18 views

CVE-2026-27483 MindsDB has Path Traversal in /api/files Leading to Remote Code Execution

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution. The vulnerability exists in the...

8.8CVSS0.11113EPSS
Exploits4References3
OSV
OSV
added 2026/02/24 2:0 p.m.4 views

CVE-2026-27483 MindsDB has Path Traversal in /api/files Leading to Remote Code Execution

MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.9.1.1, there is a path traversal vulnerability in Mindsdb's /api/files interface, which an authenticated attacker can exploit to achieve remote command execution. The vulnerability exists in the...

8.8CVSS5.9AI score0.11113EPSS
Exploits4References5
Snyk
Snyk
added 2026/02/24 12:19 a.m.1 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the uniqueId parameter. An attacker can write files outside the intended media directory by setting the uniqueId to an absolute path when uploading a device image. Details A Directory Traversal attack also known ...

7.1CVSS6.5AI score0.0032EPSS
Exploits1References2
Positive Technologies
Positive Technologies
added 2026/02/24 12:0 a.m.4 views

PT-2026-21751

Name of the Vulnerable Software and Affected Versions MindsDB versions prior to 25.9.1.1 Description MindsDB, a platform for building artificial intelligence from enterprise data, has a path traversal flaw in its /api/files interface. An authenticated attacker can exploit this to achieve remote...

8.8CVSS6.3AI score0.11113EPSS
Exploits4References17
Rows per page
Query Builder