111602 matches found
CVE-2026-53800
A Time-of-Check Time-of-Use TOCTOU race condition in rsync's --remove-source-files option allows a local attacker to delete arbitrary files. By replacing a source file with a symlink immediately after transfer but before deletion, the attacker can force rsync to delete the symlink target, resulti...
CVE-2026-68547
GHSA-jcgh-p9v3-pw6j: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files...
CVE-2026-86347: Missing Authorization
Affected versions of MISP allow any authenticated user to access TemplatesController::uploadFile because the ACL entry for templates/uploadFile used the wildcard . This bypasses the intended role restrictions applied to neighboring template-management operations. The upload handler accepts...
PT-2026-109273
Name of the Vulnerable Software and Affected Versions MariaDB server versions 10.6.1 through 10.6.27 MariaDB server versions prior to 10.11.19 MariaDB server versions prior to 11.4.13 MariaDB server versions prior to 11.8.9 MariaDB server versions prior to 12.3.3 MariaDB server versions prior to...
UBUNTU-CVE-2026-68547
GHSA-jcgh-p9v3-pw6j: Heap out-of-bounds read in RemoteIo when reading block-aligned remote CRW files...
ROS-20260907-73-0099
The vulnerabilities of the ECCurve.java and ECCurve.cs files from the Math key verification library of the EC module in the Bouncy Castle Crypto Package for Java BC Java, Bouncy Castle Java Long Term Stable LTS BC-LJA, Bouncy Castle FIPS Java API BC-FJA, and Bouncy Castle Cryptography Library for...
PT-2026-86919
Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image and video upload endpoints, allowing authenticated accounts without content permissions to upload files. Attackers can upload polyglot files with attacker-chosen extensions to the public web root and execute code if t...
CVE-2026-86253
h3 npm package versions = 2.0.1-rc.14 contain a path traversal vulnerability in serveStatic. On Node.js deployments, event.url.pathname is not normalized, so percent-encoded dot segments %2e%2e are passed to decodeURI and decoded to ../ sequences without sanitization. An unauthenticated remote...
PT-2026-111551
Name of the Vulnerable Software and Affected Versions NLTK versions prior to 3.10.4 Description A path traversal issue exists in the WekaClassifier. The component fails to validate the model filename or model arguments, allowing the bypass of nltk.pathsec containment. An attacker can provide...
EUVD-2025-210857
ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...
CVE-2025-15614 ugrep before 7.6.0 Heap Buffer Over-read via .Z decompression
ugrep before 7.6.0 contains a heap buffer over-read vulnerability in the LZW decompressor when processing crafted .Z archive files. Attackers can supply malformed .Z files that cause the decompressor to read one byte past the allocated heap buffer, potentially crashing the process...
SUSE CVE-2026-55499
Cloudreve is a self-hosted file management and sharing system. Prior to 4.17.0, a single-file share event-stream subscription resolves the share root to the owner's parent folder and subscribes to that folder topic, allowing an authenticated share recipient to receive names, paths, rename targets...
CVE-2026-14350
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...
CVE-2026-53802
A flaw was found in rsync. A local attacker with low privileges can exploit a symlink following vulnerability in the handling of input configuration files, such as those specified by --files-from or --password-file. This allows the attacker to read arbitrary files accessible to the rsync daemon...
CVE-2026-14350 Vulnerabilities exists in IBM Cloud Pak for Data System
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...
CVE-2026-14350
IBM Cloud Pak for Data System (CPDS 1.0), versions 11.3.0.2 through Interim Fix 1 , is vulnerable to log injection (CWE-117) caused by improper neutralization of special elements when writing to log files. An unauthenticated, remote attacker can inject data into log messages, resulting in low int...
CVE-2026-14350 Vulnerabilities exists in IBM Cloud Pak for Data System
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...
EUVD-2026-71492
IBM Cloud Pak for Data System 11.3.0.2 through Interim Fix 001 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...
CVE-2026-14470
IBM Langflow OSS 1.0.0 through 1.10.2 could allow an authenticated attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
Security Bulletin: Watson Machine Learning on Cloud Pak for Data is affected by transformers(Publicly disclosed vulnerability) ( CVE-2024-11393, CVE-2024-11394, CVE-2024-11392, CVE-2024-12720, CVE-2024-3568)
Summary Watson Machine Learning on Cloud Pak for Data is affected by CVE-2024-11393, CVE-2024-11394, CVE-2024-11392, CVE-2024-12720, CVE-2024-3568 Vulnerability Details CVEID:CVE-2024-11393 DESCRIPTION: Hugging Face Transformers MaskFormer Model Deserialization of Untrusted Data Remote Code...