133401 matches found
PT-2026-107641
Name of the Vulnerable Software and Affected Versions Quasar Framework versions 3.1.0 through 3.2.9 Description In @quasar/app-vite SSG, page definitions returned by the getSsgPages function could provide dir and filename values that were joined to build.distDir without verifying the final...
PT-2026-107581
Name of the Vulnerable Software and Affected Versions Cisco Jabber for Android versions prior to 15.3.1.311364 Description A path traversal issue exists where a malicious application can write files into the private data directory of the software. This is achieved by exploiting the exported...
PT-2026-107715
Name of the Vulnerable Software and Affected Versions Vault Enterprise versions prior to 2.1.2 Vault Enterprise versions prior to 1.21.12 Vault Enterprise versions prior to 1.20.17 Vault Enterprise versions prior to 1.19.23 Description The ACL policy cache allows namespace traversal when policy...
CVE-2026-106552
In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...
CVE-2026-41958: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...
UBUNTU-CVE-2026-106552
In sftp in OpenSSH before 10.6, a server can trigger directory traversal causing files to be written to unintended locations during a recursive copy operation...
PT-2026-107501
A path traversal vulnerability exists in the EmailSheet extract parts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability...
PT-2026-107395
A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...
CVE-2026-5703: Path Traversal: '.../...//'
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...
PT-2026-107433
Path traversal of 'trusted jar paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a relative path where the prefix matches a path specified in 'trusted jar paths'. The startup flag 'trusted jar paths' references URIs for loading files from local or remote filesystems. Path...
PT-2026-107429
Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the UR...
CVE-2026-105840
lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz...
Linux Distros Unpatched Vulnerability : CVE-2026-105840
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz receive utility's restricted mode that allows malicious ZMODEM senders to write files...
UBUNTU-CVE-2026-105840
lrzsz before 0.13.0 contains a path traversal vulnerability in the lrz...
PT-2026-107500
A path traversal vulnerability exists in the unzip http RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability...
VisiData VisiData unzip_http RemoteZipFile extract path traversal vulnerability
Summary A path traversal vulnerability exists in the unziphttp RemoteZipFile extract functionality of VisiData versions: dev commit 38b21f78. A specially crafted .zip file can lead to arbitrary file write. An attacker can provide a crafted URL to trigger this vulnerability. Confirmed Vulnerable...
VisiData VisiData EmailSheet extract_parts path traversal vulnerability
Summary A path traversal vulnerability exists in the EmailSheet extractparts functionality of VisiData versions: dev commit 38b21f78. A specially crafted .eml file can lead to arbitrary file write. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable Versio...
cve-2026-87902-poc
CVE-2026-87902 — WordPress Core: path traversal non autenticato nella risoluzione dei template di pagina Inclusione locale non autenticata di file PHP in WordPress Core tramite un valore pagename con doppia codifica — e, in specifiche condizioni di deployment, esecuzione di codice PHP con i...
CVE-2026-106491
Backstage is an open framework for building developer portals. Prior to 0.6.17, the @backstage/plugin-proxy-backend package is affected by improper input validation in proxy-backend. An authenticated Backstage user could craft a request URL that causes the proxy-backend to forward the request to ...
