297207 matches found
CVE-2026-110777 Evolution-data-server: local file disclosure via attach file:// uris
A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...
CVE-2026-110777 Evolution-data-server: local file disclosure via attach file:// uris
A flaw was found in evolution-data-server. Calendar events containing a file:// URI in their ATTACH property automatically read the targeted local file, base64-encode its contents and upload it back to the server when the event is saved. There are no file path restrictions or checks to verify...
CVE-2026-102052
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause denial of service or execute arbitrary code with root privileges via a malformed DHCPv4 server response when the DHCPv...
CVE-2026-102054
Juniper Networks Junos OS and Junos OS Evolved are affected by an Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM . An unauthenticated, adjacent attacker can exploit this by sending VXLAN overlay-ping traffic to a local VTEP, potentially resulting in the disclosure of s...
EUVD-2026-101378
An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP...
CVE-2026-102054 Junos OS and Junos OS Evolved: Insufficient validation of VXLAN overlay ping causes information disclosure when EVPN-VXLAN is configured
An Improper Handling of Length Parameter Inconsistency vulnerability in L2ALM of Juniper Networks Junos OS and Junos OS Evolved allows an unauthenticated, adjacent attacker to obtain stale PFE packet memory via VXLAN overlay-ping traffic sent to a local VTEP...
EUVD-2026-101376
A Stack-based Buffer Overflow vulnerability in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms allows an adjacent unauthenticated attacker to cause denial of service or execute arbitrary code with root privileges via a malformed DHCPv4 server response when the DHCPv...
CVE-2026-102052
A Stack-based Buffer Overflow vulnerability exists in the jdhcpd process of Juniper Networks Junos OS and Junos OS Evolved platforms. When the DHCPv4 local-client feature is enabled, an adjacent unauthenticated attacker can send a malformed DHCPv4 server response to trigger the overflow. This cou...
CVE-2026-101934 Junos OS and Junos OS Evolved: An attacker causes Denial of Service in eventd
An Out-of-bounds Write vulnerability in eventd of Juniper Networks Junos OS and Junos OS Evolved allows a local attacker to cause a Denial of Service DoS via sending a crafted packet to the eventd relay service...
CVE-2026-102079 Junos OS: MX Series: Missing Authorization for specific 'request' CLI commands allows command injection
An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended...
EUVD-2026-101465
An OS command injection vulnerability in the CLI of Juniper Networks Junos OS allows a local, low privileged attacker to take complete control of the device. A specific 'request csds' command doesn't sanitize user provided input so that it can be interpreted as a command. This allows unintended...
CVE-2026-62858
YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourlsgetrequest extracted the request path without sanitization, after which yourlssanitizeurl and yourlsescurl preserved dot and slash traversal sequences before an attacker-controlled keyword reached fileexist...
ALPINE-CVE-2026-53614
util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility reads the attacker-controlled LIBMOUNTFORCEMOUNT2 environment variable with getenv, allowing a local low-privileged user to force the non-atomic legacy...
CVE-2026-110655
miniupnpc through 2.3.3 contains a one-byte heap out-of-bounds read vulnerability in the minixml parseatt function that allows malicious UPnP gateways to read past buffer bounds via crafted replies. Attackers on the local network can spoof a gateway serving device descriptions or SOAP responses...
CVE-2026-103929
mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.7.14, in the default non-safe mode, mise loads .mise.toml settings from an untrusted local project before trust approval and striplocalonlysettings removes only fields marked globalonly. The unixdefaultfileshellargs,...
hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation
A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities exist in several software components that could potentially allow a local attacker to achieve local code execution, escalate privileges, cause a denial of service DoS, disclose sensitive information, or...
hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation
A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities exist in several software components that could potentially allow a local attacker to achieve local code execution, escalate privileges, cause a denial of service DoS, disclose sensitive information, or...
Checkov by Prisma Cloud: Path Traversal Vulnerabilities
Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to write files to arbitrary locations on the scanning filesystem. Work around: Until a fixed version is deployed, avoid running Checkov over untrusted content, and pass configuration...
CVE-2026-62858 YOURLS: Unauthenticated File Inclusion
YOURLS is a self-hosted, customizable URL shortener written in PHP. Prior to 1.10.5, yourlsgetrequest extracted the request path without sanitization, after which yourlssanitizeurl and yourlsescurl preserved dot and slash traversal sequences before an attacker-controlled keyword reached fileexist...
CVE-2026-53614 util-linux LIBMOUNT_FORCE_MOUNT2 allows nosuid and noexec bypass
util-linux is a random collection of Linux utilities. In util-linux 2.39.1 through 2.41.4 and 2.42 through 2.42.1, the SUID mount utility reads the attacker-controlled LIBMOUNTFORCEMOUNT2 environment variable with getenv, allowing a local low-privileged user to force the non-atomic legacy...