Lucene search
+L

1926 matches found

NVD
NVD
•added 2026/09/26 3:17 a.m.•13 views

CVE-2026-100597

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

8.8CVSS0.00082EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/09/26 2:19 a.m.•10 views

EUVD-2026-87454

OpenClaw npm package 'openclaw' before 2026.7.1 is vulnerable to a time-of-check time-of-use race condition in OpenShell local mirror filesystem mutation operations. The remove, mkdir, and rename operations could act on a different filesystem target after OpenClaw completed its sandbox path-safet...

8.8CVSS5.9AI score0.00082EPSS
SaveExploits0References2
Broadcom
Broadcom
•added 2026/09/22 12:00 a.m.•12 views

Node.js 22.x < 22.23.2 / 24.x < 24.18.1 / 26.x < 26.5.1 Multiple Vulnerabilities (Wednesday, July 29, 2026 Security Releases)

The version of Node.js used within the Brocade SANnav is not affected, but does contain the vulnerable code for the following vulnerabilities as referenced in the Wednesday, July 29, 2026 Security Releases advisory. A flaw in Node.js allows a spoofed TypedArray byteLength to trigger a reachable...

8.4CVSS6.3AI score0.005EPSS
SaveExploits1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•13 views

CVE-2026-77253: Improper Limitation of a Pathname to a Restricted Directory

MCP Atlassian is a Model Context Protocol MCP server for Atlassian products Confluence and Jira. Prior to 0.22.0, Jira and Confluence attachment upload tools accept arbitrary local filesystem paths and send the selected bytes to Atlassian. In HTTP or multi-user deployments, a caller can cross the...

7.1CVSS5.8AI score0.00373EPSS
SaveExploits1References6
NVD
NVD
•added 2026/09/21 9:17 a.m.•18 views

CVE-2026-15801

A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host...

8CVSS0.00321EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/21 12:00 a.m.•6 views

CVE-2026-15801: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host...

8CVSS5.8AI score0.00321EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/09/18 4:22 p.m.•16 views

CVE-2026-81321 CareCam CM2507 Cleartext Storage of Sensitive Information

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...

9.8CVSS5.8AI score0.00344EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/18 12:00 a.m.•7 views

CVE-2026-81321: Cleartext Storage of Sensitive Information

CM2507 IP cameras store configured wireless network credentials in cleartext within the device filesystem. An attacker who obtains filesystem access through physical access, a debugging interface, or another vulnerability could recover the configured network identifier and pre-shared key...

9.8CVSS5.8AI score0.00344EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/17 3:35 p.m.•8 views

Improper Privilege Management

Overview vm2 is a sandbox that can run untrusted code with whitelisted Node's built-in modules. Affected versions of this package are vulnerable to Improper Privilege Management in the require process. An attacker can gain unauthorized access to restricted filesystem operations by bypassing the...

8.5CVSS7.8AI score0.00384EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/17 2:17 p.m.•12 views

CVE-2026-81453

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

6.5CVSS0.00443EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 2:02 p.m.•16 views

EUVD-2026-81618

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

6.5CVSS5.9AI score0.00443EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 2:02 p.m.•25 views

CVE-2026-81453

Dell OpenManage Server Administrator (OMSA) prior to version 11.1.0.3 is affected by a Path Traversal vulnerability that allows a low-privileged attacker with remote network access to gain filesystem access on the target system. The attack requires no user interaction and has low complexity, yiel...

6.5CVSS5.9AI score0.00443EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/17 2:02 p.m.•38 views

CVE-2026-81453

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

6.5CVSS0.00443EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2026/09/17 2:02 p.m.•17 views

CVE-2026-81453

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

6.5CVSS5.9AI score0.00443EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/17 1:16 p.m.•12 views

CVE-2026-81481

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

7.5CVSS0.00525EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/17 12:14 p.m.•37 views

CVE-2026-81481

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

7.5CVSS0.00525EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/17 12:14 p.m.•24 views

CVE-2026-81481

Dell OpenManage Server Administrator versions prior to 11.1.0.3 contain a Path Traversal vulnerability (improper limitation of a pathname to a restricted directory). An unauthenticated attacker with remote access could exploit this to gain filesystem access , with a HIGH confidentiality impact bu...

7.5CVSS6AI score0.00525EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/09/17 12:14 p.m.•13 views

CVE-2026-81481

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

7.5CVSS6AI score0.00525EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/17 12:14 p.m.•17 views

EUVD-2026-81572

Dell OpenManage Server Administrator, versions prior to 11.1.0.3, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for...

7.5CVSS6AI score0.00525EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•2 views

PT-2026-94247

Name of the Vulnerable Software and Affected Versions Dell OpenManage Server Administrator versions prior to 11.1.0.3 Description An improper limitation of a pathname to a restricted directory, known as Path Traversal, allows an unauthenticated remote attacker to gain unauthorized access to the...

7.5CVSS6AI score0.00525EPSS
SaveExploits0References3
Rows per page
Query Builder