21257 matches found
CVE-2026-19589
Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow unintended file system modification and could lead to code execution. A user who installs a plugin from a malicious or compromised source may be affected. This vulnerability CVE-2026-19589 is fixed in...
CVE-2026-19589
Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow unintended file system modification and could lead to code execution. A user who installs a plugin from a malicious or compromised source may be affected. This vulnerability CVE-2026-19589 is fixed in...
CVE-2026-68457
A flaw was found in ksmbd in the Linux kernel. This vulnerability allows certain file system control FSCTL operations, specifically SETSPARSE, SETZERODATA, and SETCOMPRESSION, to use incorrect credentials. Consequently, these operations can bypass the security checks established when the file was...
PT-2026-73344
Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file parameter names, allowing attackers with Item/Configure and Item/Build permission to write files to arbitrary locations on the controller file system...
PT-2026-76778
Name of the Vulnerable Software and Affected Versions Packer versions prior to 1.16.0 Description An issue exists in the third-party plugin installer that may allow unintended file system modification, potentially leading to code execution. This occurs when a user installs a plugin from a malicio...
CVE-2026-19589: Improper Limitation of a Pathname to a Restricted Directory
Packer up to 1.15.4 is vulnerable to an issue in the third-party plugin installer that may allow unintended file system modification and could lead to code execution. A user who installs a plugin from a malicious or compromised source may be affected. This vulnerability CVE-2026-19589 is fixed in...
CVE-2026-72186 ntfs: make system files immutable to prevent corruption
In the Linux kernel, the following vulnerability has been resolved: ntfs: make system files immutable to prevent corruption When a system file such as $Bitmap is exposed via showsysfiles and written from userspace, the volume is corrupted and, because the cluster allocator scans $Bitmap through t...
CVE-2026-72211: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ntfs: grow index root value before reparent header update ntfsirreparent moves the resident index root entries into an index block and leaves a small root stub containing the child VCN. That root stub can be larger than the...
CVE-2026-72164: Undefined Security Weakness
In the Linux kernel, the following vulnerability has been resolved: ocfs2: avoid moving extents to occupied clusters For non-auto OCFS2IOCMOVEEXT operations, userspace supplies a physical megoal. ocfs2moveextent initializes newphyscpos from that goal and expects ocfs2probeallocgroup to replace it...
PhantomFS v1.2.20
Fake Files. Real Security. Virtual honeypot file system for Windows — lure attackers into a directory that looks real, then catch them in the act. What Is PhantomFS? PhantomFS uses the Windows Projected File System ProjFS to surface a virtual directory full of convincing decoy files — financial...
CVE-2026-72837
File Browser versions before 2.63.20 fail to honor the createUserDir isolation in proxy and hook authentication auto-provisioning paths. Attackers with valid upstream-authenticated credentials can read, modify, delete, and share files belonging to other users by exploiting the server root scope...
GO-2022-0368 vulnerabilities
Vulnerabilities for packages: juicefs...
GO-2023-2069 vulnerabilities
Vulnerabilities for packages: croc...
GO-2023-2072 vulnerabilities
Vulnerabilities for packages: croc...
NTFS Disclosure
The vulnerability of the NTFS file system in Windows operating systems relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to disclose protected information...
CVE-2026-73429 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-73429 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-53802 rsync < 3.5.0 Arbitrary File Read via Symlink Following
rsync before 3.5.0 contains an arbitrary file read vulnerability that allows attackers to read files accessible to the rsync daemon process by exploiting symlink following in input configuration file handling including --files-from, --password-file, and filter merge files. Attackers can place a...
CVE-2025-52640 HCL AION is affected by multiple security vulnerabilities.
HCL AION is affected by a vulnerability where the shared storage used by product components is architected without sufficient access separation. Processes sharing the storage may be able to access or modify files beyond their intended scope, potentially resulting in unintended behavior or securit...
