492214 matches found
mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation
A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...
mrtg: MRTG daemon symlink-following chown allows local privilege escalation via PID file path manipulation
A flaw was found in MRTG. When the MRTG daemon is started as a root user and subsequently drops privileges, a local, low-privileged attacker can exploit a symbolic link symlink following vulnerability. By influencing or pre-placing a symlink in the process ID PID file path, the attacker can trick...
Important: Red Hat Security Advisory: mrtg security update
An update for mrtg is now available for Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support and Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability...
CVE-2026-59179
OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, @openhop/server passes unauthenticated flow route parameters from GET /api/flows/:id and DELETE /api/flows/:id in packages/server/src/routes.ts to FlowStore.filePath in packages/server/src/store.ts without an identifie...
CVE-2026-67073
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized acces...
CVE-2026-118038
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, a path traversal vulnerability in the Convert and Merge AI agent tools allows an authenticated attacker with low privileges who can supply tool arguments to read files outside the configured output directory, and to...
CVE-2026-59179 OpenHop: Path Traversal in Flow ID File Operations
OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, @openhop/server passes unauthenticated flow route parameters from GET /api/flows/:id and DELETE /api/flows/:id in packages/server/src/routes.ts to FlowStore.filePath in packages/server/src/store.ts without an identifie...
CVE-2026-59179 OpenHop: Path Traversal in Flow ID File Operations
OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, @openhop/server passes unauthenticated flow route parameters from GET /api/flows/:id and DELETE /api/flows/:id in packages/server/src/routes.ts to FlowStore.filePath in packages/server/src/store.ts without an identifie...
CVE-2026-59179
The OpenHop tool (specifically @openhop/server versions >=0.1.0-beta.1,
CVE-2026-59179
OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, "@openhop/server" passes unauthenticated flow route parameters from "GET /api/flows/:id" and "DELETE /api/flows/:id" in "packages/server/src/routes.ts" to "FlowStore.filePath" in "packages/server/src/store.ts" without ...
EUVD-2026-112080
OpenHop is a tool for creating interactive data-flow diagrams. Prior to 0.3.7, @openhop/server passes unauthenticated flow route parameters from GET /api/flows/:id and DELETE /api/flows/:id in packages/server/src/routes.ts to FlowStore.filePath in packages/server/src/store.ts without an identifie...
EUVD-2026-112035
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is...
CVE-2026-118039 XML External Entity Reference in Telerik Document Processing Libraries SVG Image Processing
In Progress® Telerik® Document Processing Libraries prior to version 2026.3.1027, an XML external entity reference vulnerability in SVG image processing allows an unauthenticated attacker to read local files on the server via a crafted SVG image with a nested embedded SVG, when the image is...
CVE-2026-118038
Progress Telerik Document Processing Libraries prior to version 2026.3.1027 are affected by a path traversal vulnerability in the Convert and Merge AI agent tools . An authenticated attacker with low privileges can supply tool arguments containing relative file paths that resolve against the proc...
CVE-2026-67073
HCL BigFix AEX is impacted by an Unrestricted File Upload and Improper Access Control vulnerability. This flaw allows an attacker to upload malicious or unauthorized files and subsequently access or download sensitive content directly. Such actions could result in information disclosure , unautho...
CVE-2026-67073 HCL BigFix AEX is affected by multiple security vulnerabilities.
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized acces...
EUVD-2026-112030
HCL BigFix AEX is affected by an Unrestricted File Upload and Improper Access Control vulnerability. This could allow an attacker to upload malicious or unauthorized files and directly access or download sensitive uploaded content, potentially leading to information disclosure, unauthorized acces...
WordPress Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More plugin <= 1.31.0 - Unauthenticated Local File Inclusion vulnerability
Unauthenticated Local File Inclusion vulnerability discovered by Wordfence PRISM in WordPress Plugin Bit Flows: AI Agent Automation & Integrations for Forms, CRM, eCommerce, Google Sheets, and More versions = 1.31.0...
CVE-2026-118485
Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding httpdecode on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed %2e%2e%2f URL-encoded ../ sequences in the URL path. These sequences survive the URL...
