134493 matches found
AlmaLinux 9.2 [TuxCare] Security Update: python-unversioned-command / python3 / python3-debug / etc (ALMALINUX9.2:CLSA-2025:1741125595)
The AlmaLinux 9.2 host has packages installed that are affected by a vulnerability as referenced in the TuxCare ALMALINUX9.2:CLSA-2025:1741125595 advisory. - Directory traversal vulnerability in the 1 extract and 2 extractall functions in the tarfile module in Python allows user-assisted remote...
CentOS Linux 7 [TuxCare] Security Update: exim / exim-greylist / exim-mon / exim-mysql / exim-pgsql / etc Multiple Vulnerabilities (CENTOS7:CLSA-2026:1787322589)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2026:1787322589 advisory. - Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because...
CentOS Linux 7 [TuxCare] Security Update: curl / libcurl / libcurl-devel Multiple Vulnerabilities (CENTOS7:CLSA-2023:1697816385)
The CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS7:CLSA-2023:1697816385 advisory. - libcurl would reuse a previously created connection even when a TLS or SSHrelated option had been changed that should have prohibited...
CentOS Linux 8.4 [TuxCare] Security Update: rsync / rsync-daemon Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1788956505)
The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1788956505 advisory. - rsync before 3.5.0 contains a path traversal vulnerability that allows remote clients to access files outside the intended module...
CentOS Linux 8.4 [TuxCare] Security Update: exim / exim-greylist / exim-mon / exim-mysql / exim-pgsql Multiple Vulnerabilities (CENTOS8.4:CLSA-2026:1788260209)
The CentOS Linux 8.4 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS8.4:CLSA-2026:1788260209 advisory. - Exim before 4.99.5 allows directory traversal to access files outside of the spool area, and consequently gain privileges, because...
CVE-2026-102089: Improper Limitation of a Pathname to a Restricted Directory
Kiteworks Email Protection Gateway before version 9.5.0 is vulnerable to a path traversal weakness in an administrative import function allowed an authenticated administrator to write files to arbitrary locations on the server. This could potentially be leveraged to execute arbitrary code on the...
PT-2026-103527
Name of the Vulnerable Software and Affected Versions Kiteworks Email Protection Gateway versions prior to 9.5.0 Description A path traversal weakness exists in an administrative import function. This flaw allows an authenticated administrator to write files to arbitrary locations on the server,...
CVE-2026-102119: Improper Limitation of a Pathname to a Restricted Directory
A path traversal weakness in an optional, non-default administrative feature allowed an authenticated administrator to move files to unintended locations outside the feature's designated directory. This could potentially be leveraged to execute arbitrary code on the underlying system...
CVE-2026-51570
The modelscope Agentscope software, versions v1.0.0 through v1.0.8 , is vulnerable to a Path Traversal flaw within the insert_text_file function. This vulnerability allows an attacker with low-level privileges to access or manipulate files outside of the intended directory. The impact includes hi...
CVE-2026-51853
Versions 1.7, 1.8, 1.9, and 1.10 of agent-zero are vulnerable to a Directory Traversal flaw in python/helpers/file_browser.py:FileBrowser.__init__. The vulnerability exists because the FileBrowser class initializes with the host root directory as the workspace, granting the agent unrestricted acc...
CVE-2026-51860
The bisheng software versions 2.3.0 , 2.4.0 , and 2.4.0-beta1 are vulnerable to a Directory Traversal flaw. The vulnerability exists within the src/backend/bisheng/linsight/domain/task_exec.py component. This issue allows for unauthorized access to files or directories outside of the intended sco...
CVE-2026-51864
The DB-GPT software (versions 0.7.5 and 0.8.0 ) contains a directory traversal vulnerability in the python_file_upload function, specifically located at packages/dbgpt-app/src/dbgpt_app/openapi/api_v1/python_upload_api.py:42. A remote attacker can exploit this flaw to write files outside the inte...
CVE-2026-51859
The bisheng software (versions 2.3.0 , 2.4.0 , and 2.4.0-beta1 ) is vulnerable to a directory traversal flaw in the save_download_file function (located at src/backend/bisheng/core/cache/utils.py:290). This vulnerability allows an attacker to access files and directories outside the web root fold...
PT-2026-103278
Name of the Vulnerable Software and Affected Versions oc-mirror affected versions not specified Red Hat Assisted Installer for OpenShift Container Platform affected versions not specified OpenShift Container Platform affected versions not specified Description A path traversal and arbitrary file...
CVE-2026-51853: Improper Limitation of a Pathname to a Restricted Directory
agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/filebrowser.py:FileBrowser.init. The FileBrowser class initializes with the host root directory as the workspace, allowing the agent to access any file on the system without restriction...
CVE-2026-51568
modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in writetextfile...
CVE-2026-51570
modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...
CVE-2026-51570: Improper Limitation of a Pathname to a Restricted Directory
modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in inserttextfile...
CVE-2026-51860: Improper Limitation of a Pathname to a Restricted Directory
bisheng 2.3.0, 2.4.0, and 2.4.0-beta1 is vulnerable to Directory Traversal in src/backend/bisheng/linsight/domain/taskexec.py...