28678 matches found
CVE-2026-89145
Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 contain a stored XSS vulnerability caused by missing HTML-escaping of plugin directory names in the dependency error page rendered by getValidPluginsDependencies(). An attacker with write access to the plugins directory can create a plugin whose d...
EUVD-2026-75802
IBM Aspera Enterprise WebApps 1.0.0 through 1.0.5 could allow a local attacker to escape container protections due to unrestricted system calls being permitted within the container...
tar security, bug fix, and enhancement update
An update is available for tar. This update affects Rocky Linux 10. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The GNU tar program can save multiple files in an archive and restore files from...
RLSA-2026:61586 Moderate: tar security, bug fix, and enhancement update
The GNU tar program can save multiple files in an archive and restore files from an archive. Security Fixes: tar: tar: Hidden file injection via crafted archives CVE-2026-5704 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path escape CVE-2026-18477 tar: tar:...
Linux Distros Unpatched Vulnerability : CVE-2026-84042
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking krun.usepasst, crun can execute...
CVE-2026-89145: Improper Neutralization of Input During Web Page Generation
Flextype CMS versions 0.9.9 through 1.0.0-alpha.3 fail to HTML-escape plugin directory names in the dependency error page rendered by getValidPluginsDependencies. Attackers with write access to the plugins directory can create a plugin with HTML characters in its name to execute arbitrary scripts...
Linux Distros Unpatched Vulnerability : CVE-2026-88014
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. From 1.72.0 until 1.75.1, the archive ZIP backend...
Microsoft Edge (Chromium) < 152.0.4191.66 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 152.0.4191.66. It is, therefore, affected by multiple vulnerabilities as referenced in the September 11, 2026 advisory. - Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to...
RockyLinux 10 : tar (RLSA-2026:61586)
The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:61586 advisory. tar: tar: Hidden file injection via crafted archives CVE-2026-5704 tar: tar: TOCTOU in incremental dumpdir 'X' rename handling allows restore path esca...
PT-2026-89767
Name of the Vulnerable Software and Affected Versions multicluster-observability-addon affected versions not specified Description A cross-namespace authorization flaw exists in the multicluster-observability-addon. A user with permissions to modify the ManagedClusterAddOn configuration of a...
Microsoft Edge (Chromium) < 151.0.4129.107 Multiple Vulnerabilities
The version of Microsoft Edge installed on the remote Windows host is prior to 151.0.4129.107. It is, therefore, affected by multiple vulnerabilities as referenced in the September 11, 2026 advisory. - Improper neutralization of input during web page generation 'cross-site scripting' in Microsoft...
Linux Distros Unpatched Vulnerability : CVE-2026-88046
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - rclone is a command-line program to sync files and directories to and from different cloud storage providers. Prior to 1.75.1, rclone core does not reject...
PT-2026-90059
Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description A flaw exists in the sysctl implementation where the cad pid entry is incorrectly placed in the pid table instead of the kern reboot table. Because of the pid table root permissions...
GHSA-66HP-WGXQ-6F5Q rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace
Summary backend/archive mounts a zip file as a browsable, syncable rclone Fs e.g. rclone lsf :zip:downloaded.zip or rclone copy :zip:downloaded.zip dest:. Go's archive/zip package does not sanitize file.Name - it is taken verbatim from the untrusted zip's central directory. readZip in...
rclone archive/zip: Zip Slip via unsanitized zip entry names lets a malicious archive escape its own namespace
Summary backend/archive mounts a zip file as a browsable, syncable rclone Fs e.g. rclone lsf :zip:downloaded.zip or rclone copy :zip:downloaded.zip dest:. Go's archive/zip package does not sanitize file.Name - it is taken verbatim from the untrusted zip's central directory. readZip in...
rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination
Summary With -l/--links, rclone's local backend recreates a source .rclonelink object as a real symlink at the destination verbatim preserved by design for faithful backups. Directory-metadata application, however, does not go through the os.Root sandbox and does not use NOFOLLOW syscalls. A loca...
GHSA-F8G7-2XJC-7MFH rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination
Summary With -l/--links, rclone's local backend recreates a source .rclonelink object as a real symlink at the destination verbatim preserved by design for faithful backups. Directory-metadata application, however, does not go through the os.Root sandbox and does not use NOFOLLOW syscalls. A loca...
rclone: source object names can escape the configured root on upload
Summary Multiple backends, when given a specially crafted object to copy, can escape the backend confinement. | Backend | Keep/Close | Per-backend severity | |---|---|---| | sftp | Medium | Real filesystem escape, fires under default encoding. | | smb | Low-Medium | Escapes to a different SMB sha...
GHSA-38XV-HF3P-H7MQ rclone: source object names can escape the configured root on upload
Summary Multiple backends, when given a specially crafted object to copy, can escape the backend confinement. | Backend | Keep/Close | Per-backend severity | |---|---|---| | sftp | Medium | Real filesystem escape, fires under default encoding. | | smb | Low-Medium | Escapes to a different SMB sha...
