CVE-2001-0933

CVE-2001-0933 Cooolsoft PowerFTP Server 2.03 allows remote attackers to list the contents of arbitrary drives via a ls LIST command that includes the drive letter as an argument, e.g. "ls C:". Securiteam publication at http://www.securiteam.com/exploits/6D00L2A35K.html External info at...

Linux Distros Unpatched Vulnerability : CVE-2026-125243

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ffjpeglsdecodepicture in libavcodec/jpeglsdec.c, which decodes 16-bit...

CVE-2026-120979

This vulnerability affects customers using Arista Pathfinder for WAN path selection with Border Gateway Protocol-Link State BGP-LS configured for Dynamic Path Selection DPS. On affected platforms running Arista EOS with BGP-LS configured for DPS, an attacker who has established an authenticated...

CVE-2026-120978

On affected Arista EOS platforms running Border Gateway Protocol with Link State BGP-LS and configured with the Dynamic Path Selection DPS consumer role, an attacker who has established an authenticated BGP-LS session with the device can send a crafted message to cause the BGP agent to restart...

EUVD-2026-122802

This vulnerability affects customers using Arista Pathfinder for WAN path selection with Border Gateway Protocol-Link State BGP-LS configured for Dynamic Path Selection DPS. On affected platforms running Arista EOS with BGP-LS configured for DPS, an attacker who has established an authenticated...

CVE-2026-120979

This vulnerability affects Arista Pathfinder for WAN path selection when BGP-LS is configured for Dynamic Path Selection (DPS) on platforms running Arista EOS . An attacker who has established an authenticated BGP-LS session with the device can transmit a specially crafted BGP packet. This action...

CVE-2026-120978

Affected Arista EOS platforms running BGP-LS with the Dynamic Path Selection (DPS) consumer role are vulnerable to a NULL Pointer Dereference (CWE-476) . An attacker who has established an authenticated BGP-LS session can send a crafted message to cause the BGP agent to restart unexpectedly. This...

EUVD-2026-122801

On affected Arista EOS platforms running Border Gateway Protocol with Link State BGP-LS and configured with the Dynamic Path Selection DPS consumer role, an attacker who has established an authenticated BGP-LS session with the device can send a crafted message to cause the BGP agent to restart...

Security update for vsftpd

This update for vsftpd fixes the following issue: CVE-2025-14242: denial of service via integer overflow in ls command parameter parsing bsc1256700. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

Security update for vsftpd

This update for vsftpd fixes the following issue: CVE-2025-14242: denial of service via integer overflow in ls command parameter parsing bsc1256700. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternativel...

CVE-2026-125243

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ffjpeglsdecodepicture in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. Attackers can supply a crafted single-component JPEG-LS image with the ILV byte set to 1, causin...

Juniper Networks RPD DoS

The vulnerability in the Routing Protocol Daemon RPD for Juniper Networks Junos OS and Junos OS Evolved is related to uncontrolled reachability confirmation. Exploitation of this vulnerability enables a remote attacker to cause a denial-of-service by sending information based on the BGP-LS Link...

Security Advisory 0212

Security Advisory 0212 . CSAF PDF Date: November 10, 2026 Revision | Date | Changes ---|---|--- 1.0 | November 10, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-120979 CVSSv3.1 Base Score: 8.1 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H CVSSv4.0 Base Score: 6.1...

Security Advisory 0211

Security Advisory 0211 . CSAF PDF Date: November 10, 2026 Revision | Date | Changes ---|---|--- 1.0 | November 10, 2026 | Initial release The CVE-ID tracking this issue: CVE-2026-120978 CVSSv3.1 Base Score: 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVSSv4.0 Base Score: 6.0...

UBUNTU-CVE-2026-125243

FFmpeg through 9.0.2 contains an uninitialized memory disclosure vulnerability in ffjpeglsdecodepicture in libavcodec/jpeglsdec.c, which decodes 16-bit line-interleaved JPEG-LS scans as 8-bit samples. Attackers can supply a crafted single-component JPEG-LS image with the ILV byte set to 1, causin...

CVE-2026-125113

The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts of data distributed across multiple storage resources. Prior to version 5.9.2, XRootD's rpCheck function in src/XrdXrootd/XrdXrootdXeq.cc rejects a parent-directory component only when t...

CVE-2026-125113 XRootD: Path traversal in directory listing allows access to the parent directory via trailing ".." pattern

The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts of data distributed across multiple storage resources. Prior to version 5.9.2, XRootD's rpCheck function in src/XrdXrootd/XrdXrootdXeq.cc rejects a parent-directory component only when t...

CVE-2026-125113 XRootD: Path traversal in directory listing allows access to the parent directory via trailing ".." pattern

The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts of data distributed across multiple storage resources. Prior to version 5.9.2, XRootD's rpCheck function in src/XrdXrootd/XrdXrootdXeq.cc rejects a parent-directory component only when t...

CVE-2026-125113

XRootD versions prior to 5.9.2 are vulnerable to a path traversal vulnerability in the rpCheck() function located in src/XrdXrootd/XrdXrootdXeq.cc. The root cause is a failure to reject terminal two-dot components (e.g., .. without a trailing slash), which allows an unauthenticated attacker to by...

EUVD-2026-120494

The XRootD project provides a high-performance, fault-tolerant, and secure solution for handling large amounts of data distributed across multiple storage resources. Prior to version 5.9.2, XRootD's rpCheck function in src/XrdXrootd/XrdXrootdXeq.cc rejects a parent-directory component only when t...