Lucene search
+L

22883 matches found

Snyk
Snyk
added 2026/07/14 6:43 a.m.7 views

Directory Traversal

Overview keras is a Keras is a high-level neural networks API for Python.. Affected versions of this package are vulnerable to Directory Traversal in the filtersafetarinfos process. An attacker can create symlink entries in a crafted tar archive that bypass directory validation by exploiting...

3.1CVSS6.5AI score0.00301EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/14 4:37 a.m.6 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the writeFile function in the ACP ToolBridge Workspace Handler. An attacker can access or modify files outside the intended directory by supplying crafted path input remotely. Details A Directory Traversal attack...

6.5CVSS7AI score0.00294EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/14 4:37 a.m.8 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the writeFile function in the ACP ToolBridge Workspace Handler. An attacker can access or modify files outside the intended directory by supplying crafted path input remotely. Details A Directory Traversal attack...

6.5CVSS7AI score0.00294EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/14 12:31 a.m.10 views

EUVD-2026-43577

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API /system/buckets/api. The api method in modules/System/Controller/Buckets.php sanitizes the bucket name with pregreplace'/^a-zA-Z0-9-\./','', $bucket, which permits '..' and '../' sequences. The sanitized value is...

8.8CVSS6.1AI score0.00389EPSS
SaveExploits0References6
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.13 views

PT-2026-58055

An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' vulnerability CWE-113 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all...

3.4CVSS6.2AI score0.00238EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.8 views

PT-2026-58081

A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation of file paths within ACD project files. The software does not sanitize or validate file names embedded in the ACD file structure during the project opening procedure, allowing path traversal...

5.4CVSS6.2AI score0.00109EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.10 views

PT-2026-58056

An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' vulnerability CWE-113 vulnerability in Fortinet FortiOS 7.6.0 through 7.6.4, FortiOS 7.4 all versions, FortiOS 7.2 all versions, FortiProxy 7.6.0 through 7.6.4, FortiProxy 7.4 all versions, FortiProxy 7.2 all...

3.1CVSS6.2AI score0.00257EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.9 views

PT-2026-58059

openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker to read arbitrary files on the server via crafted path traversal sequences...

5.3CVSS6.2AI score0.00377EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
added 2026/07/14 12:0 a.m.10 views

PT-2026-57984

Name of the Vulnerable Software and Affected Versions Eclipse Grizzly versions prior to 5.0.2 Description An issue exists where the software cannot properly parse the trailer section in a malformed trailer header line. This flaw can be leveraged to perform HTTP request smuggling, a technique used...

6.3CVSS6.1AI score0.00188EPSS
SaveExploits0References4
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.47 views

Fortinet Fortigate Header injection in Web Filter warning page (FG-IR-26-152)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-152 advisory. - An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' vulnerability CWE-113 vulnerability ...

4.3CVSS6.2AI score0.00238EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/07/14 12:0 a.m.53 views

Fortinet Fortigate Header injection in captive portal authentication form (FG-IR-26-153)

The version of Fortigate installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-26-153 advisory. - An Improper Neutralization of CRLF Sequences in HTTP Headers 'HTTP Response Splitting' vulnerability CWE-113 vulnerability ...

4.3CVSS6.2AI score0.00257EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/13 11:16 p.m.11 views

CVE-2026-57856

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API /system/buckets/api. The api method in modules/System/Controller/Buckets.php sanitizes the bucket name with pregreplace'/^a-zA-Z0-9-\./','', $bucket, which permits '..' and '../' sequences. The sanitized value is...

8.8CVSS0.00389EPSS
SaveExploits0References5
Vulnrichment
Vulnrichment
added 2026/07/13 10:41 p.m.10 views

CVE-2026-57856 Cockpit CMS Path Traversal via Bucket Name in Bucket File Storage API

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API /system/buckets/api. The api method in modules/System/Controller/Buckets.php sanitizes the bucket name with pregreplace'/^a-zA-Z0-9-\./','', $bucket, which permits '..' and '../' sequences. The sanitized value is...

8.8CVSS6.1AI score0.00389EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/07/13 10:41 p.m.35 views

CVE-2026-57856 Cockpit CMS Path Traversal via Bucket Name in Bucket File Storage API

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API /system/buckets/api. The api method in modules/System/Controller/Buckets.php sanitizes the bucket name with pregreplace'/^a-zA-Z0-9-\./','', $bucket, which permits '..' and '../' sequences. The sanitized value is...

8.8CVSS0.00389EPSS
SaveExploits0References5
OSV
OSV
added 2026/07/13 10:41 p.m.5 views

CVE-2026-57856 Cockpit CMS Path Traversal via Bucket Name in Bucket File Storage API

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API /system/buckets/api. The api method in modules/System/Controller/Buckets.php sanitizes the bucket name with pregreplace'/^a-zA-Z0-9-\./','', $bucket, which permits '..' and '../' sequences. The sanitized value is...

8.7CVSS6.1AI score0.00389EPSS
SaveExploits0References7
ATTACKERKB
ATTACKERKB
added 2026/07/13 10:41 p.m.7 views

CVE-2026-57856

Cockpit CMS contains a path traversal vulnerability in the Bucket file storage API /system/buckets/api. The api method in modules/System/Controller/Buckets.php sanitizes the bucket name with pregreplace'/^a-zA-Z0-9-\./','', $bucket, which permits '..' and '../' sequences. The sanitized value is...

8.8CVSS6.1AI score0.00389EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/13 10:41 p.m.11 views

CVE-2026-57856

Cockpit CMS exposes a path traversal in the Bucket file storage API (/system/buckets/api). The api() function sanitizes the bucket name with a regex that still allows ".." and "../" sequences, which are then interpolated into uploads://buckets/{bucket} and not blocked by Flysystem’s WhitespacePat...

8.8CVSS6.1AI score0.00389EPSS
SaveExploits0References5
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/13 9:32 p.m.7 views

Security Bulletin: Due to use of NodeJS, IBM Cloud Pak System is affected by multiple vulnerabilities

Summary Due to use of NodeJS libraries, IBM Cloud Pak System Software is affected by multiple vulnerabilities. These have been addressed in IBM Cloud Pak System Software version 2.3.5.1. Vulnerability Details CVEID:CVE-2026-22036 DESCRIPTION: Undici is an HTTP/1.1 client for Node.js. Prior to...

9.8CVSS6.8AI score0.0115EPSS
SaveExploits0Affected Software1
Snyk
Snyk
added 2026/07/13 8:52 p.m.7 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the sanitizePath function in File.php. An attacker can write uploaded files to arbitrary locations by supplying a crafted directory path to MediaUploader::toDestination that survives the permissive sanitization a...

8.8CVSS6.6AI score0.00771EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/07/13 8:51 p.m.10 views

Directory Traversal

Overview hfs is a HTTP File Server Affected versions of this package are vulnerable to Directory Traversal through the lang query parameter in the language-loading code in src/api.lang.ts and src/lang.ts. An attacker can read certain JSON files outside the shared folders by sending a crafted...

6.9CVSS6.5AI score0.00452EPSS
SaveExploits0References2
Rows per page
Query Builder