16732 matches found
SUSE CVE-2026-16033
A path traversal vulnerability in LXD allows an attacker to achieve arbitrary host file read or unconstrained file creation. When processing image metadata templates, LXD fails to properly sanitize or restrict template file paths from escaping the instance templates directory specifically affecti...
SUSE CVE-2026-72814
The actix-files crate actixfiles before version 0.6.10 contains an information exposure vulnerability. When a non-existing folder is passed as the servefrom argument to Files::new, the mount path defaults to an empty path; the service then joins the request path with this empty path and...
MINI-QMC2-53C9-GPFF
Bulletin has no description...
GHSA-QW24-GH76-8RVV vulnerabilities
Vulnerabilities for packages: telegraf...
CVE-2026-72835
filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths. Attackers can request files with alternate path representations that match no ru...
CVE-2026-72837
File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to other users by exploiting the server root scope...
CVE-2026-72837 File Browser before 2.63.20 Privilege Escalation via Proxy Authentication
File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to other users by exploiting the server root scope...
EUVD-2026-58651
File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to other users by exploiting the server root scope...
CVE-2026-72835
CVE-2026-72835 affects filebrowser before v2.63.21. The issue is that the application fails to canonicalize paths before evaluating access rules, allowing an authenticated user to bypass administrator-defined deny rules by using case-variant or backslash-separated paths. Attackers can request fil...
CVE-2026-72835 filebrowser before v2.63.21 Access Rule Bypass via Path Canonicalization
filebrowser versions before v2.63.21 fail to canonicalize paths before evaluating access rules, allowing authenticated users to bypass administrator-defined deny rules using case-variant or backslash-separated paths. Attackers can request files with alternate path representations that match no ru...
GO-2026-4509 vulnerabilities
Vulnerabilities for packages: nuclei...
GO-2026-4474 vulnerabilities
Vulnerabilities for packages: filebrowser...
GO-2025-3792 vulnerabilities
Vulnerabilities for packages: filebrowser...
GO-2026-5031 vulnerabilities
Vulnerabilities for packages: seaweedfs...
GO-2024-3271 vulnerabilities
Vulnerabilities for packages: rclone...
GO-2025-4101 vulnerabilities
Vulnerabilities for packages: opentofu...
GO-2026-4352 vulnerabilities
Vulnerabilities for packages: opentofu...
GO-2023-1709 vulnerabilities
Vulnerabilities for packages: k3d...