342452 matches found
GHSA-VV88-699V-W5RH vulnerabilities
Vulnerabilities for packages: wget...
GO-2026-6197 vulnerabilities
Vulnerabilities for packages: telegraf...
GO-2026-6189 vulnerabilities
Vulnerabilities for packages: telegraf...
UBUNTU-CVE-2026-75145
FFmpeg before commit b4c199c contains an incorrect integer narrowing c...
PT-2026-79197
Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...
JetBrains YouTrack < 2026.2.17917 Missing Authorization (CVE-2026-75051)
The version of JetBrains YouTrack installed on the remote host is prior to 2026.2.17917. It is, therefore, affected by a missing authorization vulnerability: - Unauthorised project transfer between organisations was possible. CVE-2026-75051 Note that Nessus has not tested for this issue but has...
UBUNTU-CVE-2026-65611
nnn does not sanitize the path variable. An attacker can createa direc...
PT-2026-79189
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...
CVE-2026-76316
An unauthenticated remote attacker who can reach the Splunk management port can register a crafted Deployment Server client identifier, which is then inserted into dispatched searches without special-character sanitization. When an administrator opens the Add Data forwarder workflow, the injected...
CVE-2026-12634
The NVS backend of the Zephyr settings subsystem subsys/settings/src/settingsnvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '\0', where rc is the return value of nvsread. Per its contract, nvsread returns the full stored entry length...
CVE-2026-12634 Out-of-bounds stack write in the settings NVS backend from over-reported nvs_read length
The NVS backend of the Zephyr settings subsystem subsys/settings/src/settingsnvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '\0', where rc is the return value of nvsread. Per its contract, nvsread returns the full stored entry length...
CVE-2026-12634
In Zephyr's settings NVS backend (subsys/settings/src/settings_nvs.c), three functions (settings_nvs_cache_match, settings_nvs_load, settings_nvs_save) use the nvs_read() return value directly as a NUL-terminator index into 74-byte stack buffers without clamping, causing a single-byte out-of-boun...
CVE-2026-12634 Out-of-bounds stack write in the settings NVS backend from over-reported nvs_read length
The NVS backend of the Zephyr settings subsystem subsys/settings/src/settingsnvs.c reads stored setting-name entries into fixed 74-byte stack buffers and NUL-terminates them with bufrc = '\0', where rc is the return value of nvsread. Per its contract, nvsread returns the full stored entry length...
GHSA-9R55-P3JW-V652 vulnerabilities
Vulnerabilities for packages: busybox...
Copier has a trust-prefix bypass via path traversal that runs tasks unprompted
Copier: trust-prefix bypass via path traversal runs tasks unprompted Summary In copier = 9.5.0, = 9.15.1, the trust setting's prefix match copier/settings.py compares the template URL against a trusted prefix with a raw str.startswith and no path normalization, while the URL is normalized when th...
GHSA-9GMC-JQMH-3RVM Copier has a trust-prefix bypass via path traversal that runs tasks unprompted
Copier: trust-prefix bypass via path traversal runs tasks unprompted Summary In copier = 9.5.0, = 9.15.1, the trust setting's prefix match copier/settings.py compares the template URL against a trusted prefix with a raw str.startswith and no path normalization, while the URL is normalized when th...
GHSA-RR55-JP92-8WP2 claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
Summary claude-faf-mcp MCP tools accept a caller-controlled path argument and resolve it expansion + path.resolve straight into a filesystem read/write without confining it to a trusted project directory. An absolute path or ../ traversal is resolved and used as-is, so the server process can be...
claude-faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
Summary claude-faf-mcp MCP tools accept a caller-controlled path argument and resolve it expansion + path.resolve straight into a filesystem read/write without confining it to a trusted project directory. An absolute path or ../ traversal is resolved and used as-is, so the server process can be...
faf-mcp has an arbitrary local file read/write via unconfined `path` argument in FAF tools
Summary faf-mcp MCP tools accept a caller-controlled path argument and resolve it expansion + path.resolve straight into a filesystem read/write without confining it to a trusted project directory. An absolute path or ../ traversal is resolved and used as-is, so the server process can be made to...
grok-faf-mcp has an arbitrary local file read via unconfined `path` argument in FAF tools
Summary Several grok-faf-mcp MCP tools accept a caller-controlled path argument and resolve it expansion + path.resolve straight into a filesystem read without confining it to a trusted project directory. An absolute path or ../ traversal is resolved and used as-is, so the server process can be...