Lucene search
+L

23971 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/06 12:0 a.m.9 views

EulerOS 2.0 SP15 : kernel (EulerOS-SA-2026-2889)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : mm: blk-cgroup: fix use-after-free in cgwbreleaseworkfnCVE-2026-31586 e1000/e1000e: Fix leak in DMA error cleanupCVE-2026-43445 futex: Clear stale...

9.8CVSS7.3AI score0.01501EPSS
SaveExploits13References138
Tenable Nessus
Tenable Nessus
added 2026/08/06 12:0 a.m.9 views

EulerOS 2.0 SP13 : kernel (EulerOS-SA-2026-2971)

According to the versions of the kernel packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : USB: core: Limit the length of unkillable synchronous timeoutsCVE-2026-43428 usb: typec: ucsi: validate connector number in...

9.8CVSS7.4AI score0.01501EPSS
SaveExploits80References286
Tenable Nessus
Tenable Nessus
added 2026/08/06 12:0 a.m.8 views

Linux Distros Unpatched Vulnerability : CVE-2026-64594

"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - usb: gadget: ffs: initialize resetwork at allocation time ffsfskillsb unconditionally calls cancelworksync on ffs-resetwork when a functionfs instance is...

5.4AI score0.00164EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/05 6:13 p.m.11 views

CVE-2026-7869

IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API POST /api/v1/knowledgebases. This occurs because user-supplied knowledge base names are used directly to create file paths without proper sanitization or containment checks. An authenticated attacker...

5.4CVSS5.5AI score0.00216EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/08/05 5:40 p.m.28 views

CVE-2026-70428

Jenkins 2.575 and earlier, LTS 2.568.1 and earlier improperly identifies file paths attempting path traversal in file parameter names, allowing attackers with Item/Configure and Item/Build permission to write files to arbitrary locations on the controller file system...

0.00245EPSS
SaveExploits0References1
CVE
CVE
added 2026/08/05 5:40 p.m.66 views

CVE-2026-70428

CVE-2026-70428 affects Jenkins versions 2.575 and earlier, and LTS 2.568.1 and earlier. A flaw in how file parameters identify paths allows path traversal, enabling attackers with Item/Configure and Item/Build permissions to write files to arbitrary locations on the controller file system. The im...

4.3CVSS5.6AI score0.00245EPSS
SaveExploits0References1
OSV
OSV
added 2026/08/05 5:16 p.m.6 views

CVE-2026-7646

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQLite database, and process environment variables, by sending a crafted MCP resources/read request with a URL-encoded path...

6.5CVSS5.5AI score
SaveExploits0References1
NVD
NVD
added 2026/08/05 1:24 p.m.19 views

CVE-2026-71269

Node-RED's local-filesystem library storage module getLibraryEntry and saveLibraryEntry in packages/nodemodules/@node-red/runtime/lib/storage/localfilesystem/library.js, reachable via GET/POST /library/:lib/:type/path, joins the user-supplied path parameter directly into the filesystem path via...

7.2CVSS0.00381EPSS
SaveExploits1References2
CVE
CVE
added 2026/08/05 12:26 p.m.49 views

CVE-2026-71269

CVE-2026-71269 affects Node-RED’s local-filesystem library storage module (getLibraryEntry() and saveLibraryEntry() in packages/node_modules/@node-red/runtime/lib/storage/localfilesystem/library.js). The vulnerability arises because GET/POST requests to /library/:lib/:type/*path join the user-sup...

7.2CVSS5.2AI score0.00381EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
added 2026/08/05 12:26 p.m.9 views

CVE-2026-71269 Node-RED Library API Path Traversal Leading to Arbitrary File Read/Write

Node-RED's local-filesystem library storage module getLibraryEntry and saveLibraryEntry in packages/nodemodules/@node-red/runtime/lib/storage/localfilesystem/library.js, reachable via GET/POST /library/:lib/:type/path, joins the user-supplied path parameter directly into the filesystem path via...

7.2CVSS5.2AI score0.00381EPSS
SaveExploits1References2
ATTACKERKB
ATTACKERKB
added 2026/08/05 12:26 p.m.4 views

CVE-2026-71269

Node-RED's local-filesystem library storage module getLibraryEntry and saveLibraryEntry in packages/nodemodules/@node-red/runtime/lib/storage/localfilesystem/library.js, reachable via GET/POST /library/:lib/:type/path, joins the user-supplied path parameter directly into the filesystem path via...

7.2CVSS5.2AI score0.00381EPSS
SaveExploits1References3
EUVD
EUVD
added 2026/08/05 12:26 p.m.8 views

EUVD-2026-53354

Node-RED's local-filesystem library storage module getLibraryEntry and saveLibraryEntry in packages/nodemodules/@node-red/runtime/lib/storage/localfilesystem/library.js, reachable via GET/POST /library/:lib/:type/path, joins the user-supplied path parameter directly into the filesystem path via...

7.2CVSS6.5AI score0.00381EPSS
SaveExploits1References2
NVD
NVD
added 2026/08/05 11:16 a.m.5 views

CVE-2026-60009

In Eclipse Theia versions up to and including 1.73.1, the @theia/filesystem backend binds POST /file-upload in every filesystem-enabled deployment. The handler takes an attacker-supplied absolute path from the multipart uri field and calls fs.movetmp, target, overwrite: true with no workspace...

8.8CVSS0.00323EPSS
SaveExploits1References4
CVE
CVE
added 2026/08/05 11:3 a.m.46 views

CVE-2026-61891

CVE-2026-61891 affects Eclipse Theia up to 1.73.1, specifically the @theia/filesystem backend. The HTTP endpoints GET /file, GET /files/, and PUT /files/ map a client-supplied URI directly to a filesystem path and stream the file, without confinement to the workspace or any allow-listed root. In ...

7.5CVSS5.5AI score0.00451EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2026/08/05 11:3 a.m.8 views

CVE-2026-61891

In Eclipse Theia versions up to and including 1.73.1, the @theia/filesystem backend exposes HTTP file-download endpoints GET /file, GET /files/, PUT /files/ that convert a client-supplied URI directly to a filesystem path and stream the file, without confining it to the workspace or any...

7.5CVSS5.4AI score
SaveExploits0References5
OSV
OSV
added 2026/08/05 10:59 a.m.5 views

CVE-2026-60009

In Eclipse Theia versions up to and including 1.73.1, the @theia/filesystem backend binds POST /file-upload in every filesystem-enabled deployment. The handler takes an attacker-supplied absolute path from the multipart uri field and calls fs.movetmp, target, overwrite: true with no workspace...

8.8CVSS5.8AI score
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/08/05 8:8 a.m.12 views

CVE-2026-64567

In the Linux kernel, the following vulnerability has been resolved: btrfs: reject free space cache with more entries than pages When loading a v1 free space cache, loadfreespacecache takes numentries and numbitmaps straight from the on-disk btrfsfreespaceheader. That header is stored in the...

5.2AI score0.0012EPSS
SaveExploits0References6Affected Software1
NVD
NVD
added 2026/08/04 8:16 p.m.4 views

CVE-2026-47682

CVAT is an open source interactive video and image annotation tool for computer vision. In versions 1.6.0 through 2.64.0, an attacker with write access to a cloud storage that's been added to a CVAT instance, or ability to add new cloud storages, is able to overwrite arbitrary files on the server...

7.1CVSS0.00303EPSS
SaveExploits0References2
CVE
CVE
added 2026/08/04 5:57 p.m.71 views

CVE-2026-47764

Summary of CVE-2026-47764 (pdm) : A path-traversal vulnerability in wheel installation arises from InstallDestination.write_to_fs() in src/pdm/installers/installers.py, where a safe validation helper (_path_with_destdir()) was replaced with a bare os.path.join(), removing path validation. Version...

8.4CVSS5.5AI score0.00148EPSS
SaveExploits0References2
OSV
OSV
added 2026/08/04 5:57 p.m.5 views

CVE-2026-47764 pdm: Path traversal in wheel installation via overridden write_to_fs

pdm is a Python package and dependency manager supporting the latest PEP standards. Versions prior to 2.27.0 are vulnerable to path traversal through writetofs. InstallDestination.writetofs in src/pdm/installers/installers.py overrides the base class to add symlink/hardlink support but replaces t...

8.4CVSS5.5AI score
SaveExploits0References4
Rows per page
Query Builder