CVE-2026-74798 SiYuan kernel Path Traversal via database_clean MCP tool

SiYuan kernel before v3.7.4 contains a path traversal vulnerability in the databaseclean MCP tool. The tool performs only an empty-string check on the id parameter before passing it to RemoveUnusedAttributeView kernel/model/attributeview.go, which builds a filesystem path via filepath.Join withou...

CVE-2026-74798

SiYuan kernel versions before v3.7.4 contain a path traversal vulnerability in the database_clean MCP tool . The tool performs only an empty-string check on the id parameter before passing it to RemoveUnusedAttributeView (kernel/model/attribute_view.go), which builds a filesystem path via filepat...

CVE-2026-74798

SiYuan kernel before v3.7.4 contains a path traversal vulnerability in the databaseclean MCP tool. The tool performs only an empty-string check on the id parameter before passing it to RemoveUnusedAttributeView kernel/model/attributeview.go, which builds a filesystem path via filepath.Join withou...

EUVD-2026-60081

SiYuan kernel before v3.7.4 contains a path traversal vulnerability in the databaseclean MCP tool. The tool performs only an empty-string check on the id parameter before passing it to RemoveUnusedAttributeView kernel/model/attributeview.go, which builds a filesystem path via filepath.Join withou...

Path Traversal

Apache IoTDB is vulnerable to Path Traversal. The vulnerability is due to improper limitation of a pathname to a restricted directory, where the application fails to properly validate file path inputs and attackers can supply crafted path sequences to read or write files outside the intended...

BIT-CONSUL-2026-19017 Consul vulnerable to partial arbitrary file read via Vault Connect CA provider

Consul Community Edition and Consul Enterprise 1.18.21 through 2.0.2 are vulnerable to a partial arbitrary file read when configured to use the Vault Connect CA provider with JWT or AppRole authentication. A privileged attacker with operator:write permission may direct Consul to read and forward...

CVE-2026-75055: Improper Restriction of XML External Entity Reference

In JetBrains IntelliJ IDEA before 2026.2.1 hadoop ResourceManager could read local files via XXE...

PT-2026-76805

Name of the Vulnerable Software and Affected Versions Evidently UI affected versions not specified Description An issue exists where the software fails to properly validate the filename parameter in the dataset materialization endpoint. This allows unauthenticated attackers to read arbitrary file...

CVE-2026-73560: Server-Side Request Forgery (SSRF)

vLLM is an inference and serving engine for large language models. Prior to 0.26.0, the MiMoV2OmniMultiModalProcessor in vllm/transformersutils/processors/mimov2omni.py passes attacker-controlled image and audio strings through fetchimage, requests.get, and Image.open instead of MediaConnector,...

PT-2026-76797

Name of the Vulnerable Software and Affected Versions vLLM versions prior to 0.26.0 Description The MiMoV2OmniMultiModalProcessor in vllm/transformers utils/processors/mimo v2 omni.py improperly handles image and audio strings. By passing attacker-controlled strings through fetch image,...

PT-2026-76894

Name of the Vulnerable Software and Affected Versions uniget CLI affected versions not specified Description A path traversal issue exists in the handling of hook filenames. The application fails to sanitize user input, allowing the direct concatenation of filenames with the hooks directory path...

CVE-2026-75111: Improper Limitation of a Pathname to a Restricted Directory

Evidently UI fails to properly validate the filename parameter in the dataset materialization endpoint, allowing unauthenticated attackers to read arbitrary files outside the workspace directory. Attackers can supply traversal sequences or absolute paths in the filename field to access system...

CVE-2026-74798: Improper Limitation of a Pathname to a Restricted Directory

SiYuan kernel before v3.7.4 contains a path traversal vulnerability in the databaseclean MCP tool. The tool performs only an empty-string check on the id parameter before passing it to RemoveUnusedAttributeView kernel/model/attributeview.go, which builds a filesystem path via filepath.Join withou...

PT-2026-76799

Name of the Vulnerable Software and Affected Versions Hugging Face Transformers affected versions not specified Description The software fails to validate shard filenames within checkpoint index files. This allows an attacker to read arbitrary files outside the model directory by providing...

CVE-2026-63667: Improper Limitation of a Pathname to a Restricted Directory

ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export module in packages/import-export/lib/formats/gzip.js constructs an attachment source path from the attacker-controlled id, name, and extension fields in aposAttachments.json without ensuring that...

HP Web Jetadmin (WJA) - Potential Arbitrary File Read/Write

HP has identified a potential vulnerability in HP Web Jetadmin WJA that may allow an unauthenticated actor to read from or write to arbitrary files through a DLL hijacking mechanism. Update your WJA Software to the latest version...

PT-2026-76597

SiYuan kernel before v3.7.4 contains a path traversal vulnerability in the database clean MCP tool. The tool performs only an empty-string check on the id parameter before passing it to RemoveUnusedAttributeView kernel/model/attribute view.go, which builds a filesystem path via filepath.Join...

PT-2026-76704

Name of the Vulnerable Software and Affected Versions JetBrains IntelliJ IDEA versions prior to 2026.2.1 Description An XML External Entity XXE issue exists in the hadoop ResourceManager, which could allow an attacker to read local files. XXE is a type of attack where an application processes...

PT-2026-76738

Name of the Vulnerable Software and Affected Versions HP Web Jetadmin affected versions not specified Description An unauthenticated actor can read from or write to arbitrary files via a DLL hijacking mechanism. DLL hijacking is a technique where an application is tricked into loading a malicious...

PT-2026-78270

Name of the Vulnerable Software and Affected Versions Advanced File Manager versions prior to 5.4.13 Description Insufficient capability checks in several file management AJAX actions allow users with file-manager access, including those with the Subscriber role, to read arbitrary files on the...