Lucene search
+L

23682 matches found

CNNVD
CNNVD
added 2026/03/18 12:0 a.m.14 views

HTSlib 输入验证错误漏洞

HTSlib is a C-language library developed by samtools. Versions of HTSlib prior to 1.23.1, 1.22.2, and 1.21.1 contained a vulnerability related to input validation errors. This vulnerability stemmed from insufficient validation of feature data sequences, which could lead to information leakage...

9.1CVSS5.8AI score0.00518EPSS
SaveExploits0References5
Positive Technologies
Positive Technologies
added 2026/03/18 12:0 a.m.10 views

PT-2026-26186

Name of the Vulnerable Software and Affected Versions Free5GC versions prior to 1.4.2 Description Free5GC is an open-source Linux Foundation project for 5th generation 5G mobile core networks. Versions prior to 1.4.2 are susceptible to a procedure panic caused by a Nil Pointer Dereference in the...

8.7CVSS7AI score0.00486EPSS
SaveExploits1
Positive Technologies
Positive Technologies
added 2026/03/18 12:0 a.m.9 views

PT-2026-26153

SAMtools is a program for reading, manipulating and writing bioinformatics file formats. The mpileup command outputs DNA sequences that have been aligned against a known reference. On each output line it writes the reference position, optionally the reference DNA base at that position obtained fr...

9.8CVSS5.7AI score0.00516EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/03/18 12:0 a.m.28 views

PT-2026-26203

Summary The Allure report generator is vulnerable to an arbitrary file read via path traversal when processing test results. An attacker can craft a malicious result file -result.json, -container.json, or .plist that points an attachment source to a sensitive file on the host system. During repor...

8.6CVSS6.1AI score0.00539EPSS
SaveExploits1References7
OSV
OSV
added 2026/03/17 9:31 p.m.11 views

GHSA-J3MH-QMJJ-XP83 Ray Dashboard is vulnerable to path traversal through its static file handling mechanism

A path traversal vulnerability was identified in Ray Dashboard default port 8265 in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences e.g., ../ to access files outside the...

8.7CVSS7.7AI score0.00929EPSS
SaveExploits1References5
Github Security Blog
Github Security Blog
added 2026/03/17 9:31 p.m.24 views

Ray Dashboard is vulnerable to path traversal through its static file handling mechanism

A path traversal vulnerability was identified in Ray Dashboard default port 8265 in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences e.g., ../ to access files outside the...

8.7CVSS7.7AI score0.00929EPSS
SaveExploits1References6Affected Software1
EUVD
EUVD
added 2026/03/17 9:31 p.m.10 views

EUVD-2026-12635

A path traversal vulnerability was identified in Ray Dashboard default port 8265 in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences e.g., ../ to access files outside the...

8.7CVSS5.8AI score0.00929EPSS
SaveExploits1References4
NVD
NVD
added 2026/03/17 8:16 p.m.7 views

CVE-2026-32981

A path traversal vulnerability was identified in Ray Dashboard default port 8265 in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences e.g., ../ to access files outside the...

8.7CVSS0.00929EPSS
SaveExploits1References12
OSV
OSV
added 2026/03/17 8:16 p.m.19 views

PYSEC-2026-130

A path traversal vulnerability was identified in Ray Dashboard default port 8265 in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences e.g., ../ to access files outside the...

7.5CVSS7.3AI score0.00929EPSS
SaveExploits1References4
PyPA
PyPA
added 2026/03/17 8:16 p.m.17 views

PYSEC-2026-130

A path traversal vulnerability was identified in Ray Dashboard default port 8265 in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences e.g., ../ to access files outside the...

8.7CVSS7.3AI score0.00929EPSS
SaveExploits1References4Affected Software1
CVE
CVE
added 2026/03/17 7:33 p.m.51 views

CVE-2026-32981

Ray Dashboard on port 8265 has a path traversal flaw in versions prior to 2.8.1 due to improper validation/sanitization of user-supplied paths in the static file handling, allowing access to files outside the static directory and causing local file disclosure. Reported with high severity (CVSS 3....

8.7CVSS5.8AI score0.00929EPSS
SaveExploits1References12Affected Software1
Vulnrichment
Vulnrichment
added 2026/03/17 7:33 p.m.2 views

CVE-2026-32981 Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure

A path traversal vulnerability was identified in Ray Dashboard default port 8265 in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences e.g., ../ to access files outside the...

8.7CVSS5.8AI score0.00929EPSS
SaveExploits1References3
OSV
OSV
added 2026/03/17 7:33 p.m.7 views

CVE-2026-32981 Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure

A path traversal vulnerability was identified in Ray Dashboard default port 8265 in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences e.g., ../ to access files outside the...

8.7CVSS7.2AI score
SaveExploits0References14
ATTACKERKB
ATTACKERKB
added 2026/03/17 7:33 p.m.4 views

CVE-2026-32981

A path traversal vulnerability was identified in Ray Dashboard default port 8265 in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences e.g., ../ to access files outside the...

8.7CVSS5.8AI score0.00929EPSS
SaveExploits1References3
Cvelist
Cvelist
added 2026/03/17 7:33 p.m.31 views

CVE-2026-32981 Ray Dashboard <= 2.8.0 Path Traversal Leading to Local File Disclosure

A path traversal vulnerability was identified in Ray Dashboard default port 8265 in Ray versions prior to 2.8.1. Due to improper validation and sanitization of user-supplied paths in the static file handling mechanism, an attacker can use traversal sequences e.g., ../ to access files outside the...

8.7CVSS0.00929EPSS
SaveExploits1References3
Snyk
Snyk
added 2026/03/17 2:7 p.m.6 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal through the html2BlockDOM handler in kernel/api/lute.go and the asset-copying process in the desktop publish service. An attacker can exfiltrate sensitive local files readable by the desktop process by submitting HTM...

9.9CVSS6.4AI score0.00414EPSS
SaveExploits1References2
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/17 12:17 p.m.8 views

Security Bulletin: IBM Operations Analytics - Log Analysis is affected by security bypass, denial of service, cross-site scripting and remote code execution vulnerabilities due to WebSphere Application Server Liberty

Summary WebSphere Application Server Liberty is used by IBM Operations Analytics - Log Analysis as part of the web protection mechanism, interact with JSON data, authenticate and authorize client access for JMS messaging, manage the lifecycle of Java servlets and client, validation of user-suppli...

7.6CVSS6.1AI score0.00451EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/03/17 11:17 a.m.14 views

Security Bulletin: Multiple vulnerabilities in IBM Observability with Instana (OnPrem)

Summary Multiple vulnerabilities were remediated in IBM Observability with Instana OnPrem build 1.0.313 Vulnerability Details CVEID:CVE-2025-49177 DESCRIPTION: A flaw was found in the XFIXES extension. The XFixesSetClientDisconnectMode handler does not validate the request length, allowing a clie...

8.2CVSS6.8AI score0.01372EPSS
SaveExploits0Affected Software1
Kubernetes Security Advisories
Kubernetes Security Advisories
added 2026/03/17 5:54 a.m.23 views

CSI Driver for NFS path traversal via subDir may delete unintended directories on the NFS server

CVSS Rating: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H — Medium 6.5 A vulnerability was discovered in the Kubernetes CSI Driver for NFS where the subDir parameter in volume identifiers was insufficiently validated. Attackers with the ability to create PersistentVolumes referencing the NFS CSI...

6.5CVSS6.6AI score0.00539EPSS
SaveExploits0Affected Software1
Positive Technologies
Positive Technologies
added 2026/03/17 12:0 a.m.30 views

PT-2026-25942

Name of the Vulnerable Software and Affected Versions Kubernetes CSI Driver for NFS affected versions not specified Description A flaw exists in the Kubernetes CSI Driver for NFS related to insufficient validation of the subDir parameter within volume identifiers. An attacker capable of creating...

6.5CVSS6AI score0.00539EPSS
SaveExploits0
Rows per page
Query Builder