492202 matches found
RockyLinux 9 : skopeo (RLSA-2026:90462)
The remote RockyLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:90462 advisory. podman: Arbitrary file write when importing OCI archive CVE-2025-11395 net/http: golang: golang: Denial of Service via crafted HTTP Range headers...
VTK vtkChacoReader InputGraph2 out-of-bounds read vulnerability
Summary A out-of-bounds read vulnerability exists in the vtkChacoReader InputGraph2 functionality of vtk versions: 9.6.1. A specially crafted chaco can lead to an out-of-bounds read. An attacker can provide a malicious file to trigger this vulnerability. Confirmed Vulnerable Versions The versions...
Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: mongo-c-driver (UTSA-2026-146983)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-146983 advisory. Improper neutralization of special elements in data query logic in the GridFS component of the MongoDB C Driver can cause a caller-supplied structured file identifie...
PT-2026-130634
The Frontend Dashboard WordPress plugin before 3.0.5, ProfileGrid WordPress plugin before 6.0.0.5 do not prevent an unauthenticated user from storing a serialized PHP object in user metadata that is deserialized when a public profile is viewed, allowing PHP object injection that can lead to...
PT-2026-132386
Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files...
PT-2026-132208
IBM Langflow OSS 1.0.0 through 1.12.3 could allow an authenticated attacker to produce a server-generated ZIP archive containing entry paths that traverse outside the intended extraction directory. Extraction of the archive by a victim using a non-sanitizing tool could result in arbitrary file...
PT-2026-132104
YMS-VPN8 and YMS-VPN8-CP provided by Yamaha Corporation register Windows services with unquoted file paths. A user who has write permissions on the system drive may be able to execute arbitrary code with SYSTEM privileges...
PT-2026-132115
Path traversal in the SmartIT file-management feature of BMC IT Service Management Suite versions 25.3.01, 25.4.01, and 26.1.01 allows authenticated administrators to read files outside the intended directory...
PT-2026-132089
WebToffee Product Import Export for WooCommerce 2.5.1 before 2.6.8 contains a server-side request forgery vulnerability in download remote file that allows shop manager users to reach internal services via redirects. Attackers can submit a .csv URL that returns an HTTP 302 redirect to an internal...
PT-2026-132330
Improper authentication in the Web Transfer Module of Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an attacker with a user’s password to access certain files associated with that account without satisfying multi-factor authentication requirements...
PT-2026-132332
A path traversal vulnerability in Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow a delegated Host Administrator to access or modify files outside their authorized scope...
PT-2026-132784
A heap-based buffer overflow vulnerability exists in the vtkWindBladeReader FindVariableOffsets functionality of vtk versions: 9.6.1. A specially crafted .wind can lead to a buffer overflow. An attacker can provide a malicious file to trigger this vulnerability...
CVE-2026-107055
Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files...
PT-2026-132339
Improper limitation of a pathname to a restricted directory in Progress Software WS FTP Server versions prior to 2024.0.7 and 2025.0.4 on Windows could allow an unauthenticated attacker to affect files outside the intended directory...
BMC IT Service Management Suite path traversal vulnerability
Versions 25.3.01, 25.4.01, and 26.1.01 of the BMC IT Service Management Suite contain a path traversal vulnerability. This vulnerability stems from path traversal in the SmartIT file management functionality, potentially allowing authenticated administrators to read files outside the intended...
EUVD-2026-113259
Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files...
CVE-2026-119145: frappe: Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload…
Frappe before 15.121.0 and 16.x before 16.34.0 contains a path traversal vulnerability because certain file-upload handling does not validate the destination path before writing to disk. Authenticated attackers can upload crafted files to locations outside the intended storage directory to achiev...
openEQUELLA arbitrary file upload vulnerability
Versions of openEQUELLA prior to 2026.1 contain an arbitrary file upload vulnerability. This vulnerability arises because the image upload endpoint PUT /api/preloginnotice/image/name is not validated for file types prior to login; the Content-Type is set based on the filename. Users with...
Yamaha YMS-VPN8 permission and access control issue vulnerability
The Yamaha YMS-VPN8 and YMS-VPN8-CP Ver.1.04.00 and earlier versions contain a vulnerability related to permission escalation and access control. This vulnerability arises from the use of unquoted file paths during Windows service registration, potentially allowing users with write permissions on...