399954 matches found
EUVD-2026-58459
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths...
EUVD-2026-58456
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to read arbitrary files due to improper limitation of a pathname to a restricted directory...
CVE-2026-8715
CVE-2026-8715 – Vault Secrets Operator : Affected versions are 1.3.0–1.4.1 of Vault Secrets Operator. The issue is an arbitrary file read/credential exfiltration in the AppRole authentication configuration that could allow a tenant with limited Kubernetes RBAC to read files from the operator pod ...
CVE-2026-8715 Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...
EUVD-2026-58400
Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable to an arbitrary file read and credential exfiltration issue in the AppRole authentication configuration that may allow a tenant with limited Kubernetes RBAC permissions to read files from the operator pod's filesystem and transmit their...
CVE-2026-73429 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-73430 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-73489 vulnerabilities
Vulnerabilities for packages: yazi...
CVE-2026-73498 vulnerabilities
Vulnerabilities for packages: mcp-atlassian...
CVE-2026-54399 vulnerabilities
Vulnerabilities for packages: floci, airbyte-platform, apache-nifi, thingsboard, kayenta, apicurio-registry, cassandra-reaper, druid, floci-az, elasticsearch-fips, akhq, elasticsearch...
CVE-2026-19027
A flaw was found in HDF5, a widely used data management library. This vulnerability allows an attacker to craft a malicious HDF5 file that, when processed, can cause the application to read beyond its allocated memory. This out-of-bounds read could lead to the disclosure of sensitive information ...
CVE-2026-17071
CVE-2026-17071 affects IBM i 7.3–7.6. A remote authenticated attacker can perform file manipulation due to a path traversal flaw in Digital Certificate Manager. The vulnerability is rooted in improper path handling, enabling manipulation of files when authenticated over the network. Affected IBM ...
CVE-2026-17071 IBM i is Affected By Multiple Vulnerabilities in Digital Certificate Manager
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...
EUVD-2026-58392
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to perform file manipulation due to path traversal...
CVE-2026-17043
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to delete arbitrary files due to path traversal...
CVE-2026-16898
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to change the ownership of arbitrary files due to improper validation of an attacker-controlled file path...
CVE-2026-16896
IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to obtain unauthorized access to files due to a time-of-check time-of-use TOCTOU race condition...
Exploit for Path Traversal in Apache Http_Server
CVE-2021-41773 — Apache HTTP Server 2.4.49 Lab Reproduction o...
CVE-2026-17043
CVE-2026-17043 affects IBM i 7.3–7.6 and could allow a remote authenticated attacker to delete arbitrary files via path traversal. The IBM i Digital Certificate Manager component is the area described in the vulnerability entry. Impact is described as potential file deletion with C:N/I:L/A:L and ...