492216 matches found
CVE-2026-116673
systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStatsiface implementation uses the caller-supplied interface value in an fs.existsSync check and to build /sys/class/net/ paths, including the operstate path, without verifying that it is a...
zchunk: zchunk: Denial of Service via malformed file header
A flaw was found in zchunk. This vulnerability allows a remote attacker to cause a Denial of Service DoS by tricking an application into processing a specially crafted file. Improper boundary checking during file header parsing causes the program to read beyond the allocated memory buffer, leadin...
CVE-2026-116673 systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net
systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStatsiface implementation uses the caller-supplied interface value in an fs.existsSync check and to build /sys/class/net/ paths, including the operstate path, without verifying that it is a...
CVE-2026-116673 systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net
systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStatsiface implementation uses the caller-supplied interface value in an fs.existsSync check and to build /sys/class/net/ paths, including the operstate path, without verifying that it is a...
CVE-2026-116673 systeminformation: Path traversal in Linux networkStats() allows symlink-based file disclosure outside /sys/class/net
systeminformation is a System and OS information library for node.js. Prior to 5.33.14, the Linux networkStatsiface implementation uses the caller-supplied interface value in an fs.existsSync check and to build /sys/class/net/ paths, including the operstate path, without verifying that it is a...
CVE-2026-116673
The systeminformation library for Node.js (versions prior to 5.33.14 ) contains a path traversal vulnerability in the Linux networkStats(iface) implementation. The issue occurs because the library fails to verify that the caller-supplied iface value is a single segment or remains under the /sys/c...
openjdk: Enhance MIDI file handling (Oracle CPU 2026-10)
A flaw was found in the Sound component of Java SE and GraalVM. This issue allows an unauthenticated remote attacker to cause a partial Denial of Service DoS by convincing a user to run untrusted code within a sandboxed Java environment...
EUVD-2026-111116
Substance3D - Painter is affected by a Stack-based Buffer Overflow vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...
EUVD-2026-111115
Substance3D - Painter is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must open a malicious...
CVE-2026-93864
A link following vulnerability in WatchGuard Fireware OS’s firewall daemon allows a local attacker with code execution as a low-privileged system process to overwrite arbitrary files with root privileges, and to tamper with firewall IP set data, by planting a crafted file system object and...
CVE-2026-90464
An external control of file path vulnerability in a WatchGuard Fireware OS firewall diagnostic command allows a remote, authenticated attacker with at least read-only Device Monitor privileges and access to the management CLI to create, truncate, or overwrite arbitrary files and modify kernel...
CVE-2026-108140
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...
CVE-2026-106077
A vulnerability in Veeam Backup for Microsoft 365 allows a user assigned the Veeam Backup for Microsoft 365 Administrator role to perform arbitrary file reads on the backup server. This flaw results in the ability to access files with LocalSystem privileges , as identified by CWE-863 (Incorrect A...
EUVD-2026-111124
A vulnerability allowing an authenticated user with the Restore Operator role, who also controls the contents of a backed-up NAS share, to write attacker-controlled files to an arbitrary path on the backup server through relative path traversal...
CVE-2025-64394
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service...
CVE-2026-106077
A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges...
EUVD-2026-111122
A vulnerability allowing a user with the Veeam Backup for Microsoft 365 Administrator role to read arbitrary files on the backup server with LocalSystem privileges...
CVE-2025-64394
A vulnerability in Veeam Backup for Microsoft 365 allows a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation process. The root cause is associated with CWE-1386 (Insecure Operation on Windows Junction / Mount Point). This flaw can lead to privilege ...
CVE-2026-108140
This vulnerability allows an authenticated user with the Restore Operator role to perform a relative path traversal attack. If the user also controls the contents of a backed-up NAS share , they can write attacker-controlled files to an arbitrary path on the backup server. No specific software ve...
EUVD-2025-211203
A vulnerability allowing a low-privileged local user to write arbitrary files with SYSTEM privileges during the installation of Veeam Backup for Microsoft 365, which can lead to privilege escalation or denial of service...