Lucene search
+L

28262 matches found

Tenable Nessus
Tenable Nessus
added 2026/08/28 12:00 a.m.15 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: cpio (UTSA-2026-092966)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-092966 advisory. cpio 2.11, when using the --no-absolute-filenames option, allows local users to write to arbitrary files via a symlink attack on a file in an archive. Tenable has...

1.9CVSS6.8AI score0.02906EPSS
SaveExploits4References4
NVD
NVD
added 2026/08/27 5:18 p.m.12 views

CVE-2026-56651

Dool in versions up to 1.3.8 is vulnerable to symlink following when the "--devel" flag is used, as the application opens a log file without the "ONOFOLLOW" flag. A local attacker can exploit this by creating a symlink at the expected log file path pointing to a sensitive file, causing dool to...

2CVSS0.00152EPSS
SaveExploits0References2
NVD
NVD
added 2026/08/27 1:18 p.m.13 views

CVE-2026-81659

Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local files on the Flowintel server to be read and incorporated into the generated export...

7.1CVSS0.00303EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/08/27 1:09 p.m.11 views

CVE-2026-76845

A flaw was found in adm-zip, a Node.js library used for handling zip archives. This vulnerability allows a local attacker to overwrite arbitrary files on the system. When extracting an archive, adm-zip follows symbolic links, which are special files that point to other files or directories. An...

6.8CVSS5.7AI score0.00131EPSS
SaveExploits0References6
RedhatCVE
RedhatCVE
added 2026/08/27 11:52 a.m.11 views

CVE-2026-73560

A flaw was found in vLLM, an inference and serving engine for large language models. The MiMoV2OmniMultiModalProcessor component improperly handles attacker-controlled image and audio strings, bypassing security protections. This vulnerability allows a remote attacker to perform Server-Side Reque...

6.5CVSS5.6AI score0.00319EPSS
SaveExploits0References7
OSV
OSV
added 2026/08/27 10:07 a.m.19 views

CVE-2026-81659 Flowintel Note PDF Export Allows Arbitrary Local File Read via Pandoc/XeLaTeX Processing

Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local files on the Flowintel server to be read and incorporated into the generated export...

7.1CVSS5.5AI score
SaveExploits0References5
EUVD
EUVD
added 2026/08/27 10:07 a.m.12 views

EUVD-2026-66995

Affected versions of Flowintel allow attacker-controlled note content to be processed by Pandoc and XeLaTeX during PDF export in a way that can cause local files on the Flowintel server to be read and incorporated into the generated export...

7.1CVSS5.3AI score0.00303EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2026/08/27 12:00 a.m.20 views

Linux Distros Unpatched Vulnerability : CVE-2026-76844

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - webpack-dev-middleware resolves a request to a local file in getFilenameFromUrl by testing the request pathname against a traversal guard and then slicing it at...

8.3CVSS6.7AI score0.01226EPSS
SaveExploits1References2
CVE
CVE
added 2026/08/26 6:06 p.m.67 views

CVE-2026-63179

Winter CMS (a Laravel-based PHP content management system) versions up to and including 1.2.12 allow authenticated backend users to disclose arbitrary files readable by the PHP process. The root cause is that the LESS parser (via the wikimedia/less.php integration in Winter Storm) was instantiate...

4.9CVSS5.7AI score0.00351EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/26 6:06 p.m.12 views

CVE-2026-63179 Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...

4.9CVSS5.9AI score
SaveExploits0References6
Cvelist
Cvelist
added 2026/08/26 6:06 p.m.46 views

CVE-2026-63179 Winter: Local File Inclusion through @import directives in LESS compilation of backend customizable stylesheets and theme assets

Winter CMS is a content management system built on the Laravel PHP framework. In versions up to and including 1.2.12, authenticated backend users can disclose arbitrary files readable by the PHP process by injecting @import inline directives into LESS source that the backend compiles, because the...

4.9CVSS0.00351EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/26 3:44 p.m.11 views

CVE-2026-80426 FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description

FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the description string to React's dangerouslySetInnerHTML, and no layer between storage and render escapes or sanitises it; the...

7CVSS5.5AI score
SaveExploits0References7
EUVD
EUVD
added 2026/08/26 3:44 p.m.8 views

EUVD-2026-66600

FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the description string to React's dangerouslySetInnerHTML, and no layer between storage and render escapes or sanitises it; the...

7.1CVSS5.3AI score0.00231EPSS
SaveExploits0References5
Cvelist
Cvelist
added 2026/08/26 3:44 p.m.40 views

CVE-2026-80426 FiftyOne before 1.21.0 Stored Cross-Site Scripting via Unescaped Field Description

FiftyOne renders a dataset field's description as markup. The sidebar field-information component at app/packages/core/src/components/FieldLabelAndInfo/index.tsx passes the description string to React's dangerouslySetInnerHTML, and no layer between storage and render escapes or sanitises it; the...

7.1CVSS0.00231EPSS
SaveExploits0References5
Nuclei
Nuclei
added 2026/08/26 2:49 a.m.135 views

Cisco ASA - Local File Inclusion

Cisco Adaptive Security Appliances ASA web interfaces could allow an unauthenticated, remote attacker to cause an affected device to reload unexpectedly, resulting in a denial of service DoS condition. It is also possible on certain software releases that the ASA will not reload, but an attacker...

7.5CVSS7.2AI score0.99913EPSS
SaveExploits18References5
Positive Technologies
Positive Technologies
added 2026/08/26 12:00 a.m.28 views

PT-2026-82212

Name of the Vulnerable Software and Affected Versions FiftyOne affected versions not specified Description The application renders a dataset field's description as markup without proper sanitization or escaping. Specifically, the sidebar field-information component located at...

7.1CVSS5.3AI score0.00231EPSS
SaveExploits0References7
Tenable Nessus
Tenable Nessus
added 2026/08/26 12:00 a.m.8 views

Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: tcpdump (UTSA-2026-093666)

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-093666 advisory. The command-line argument parser in tcpdump before 4.99.0 has a buffer overflow in tcpdump.c:readinfile. To trigger this vulnerability the attacker needs to create a...

7.8CVSS6.9AI score0.00626EPSS
SaveExploits0References4
NVD
NVD
added 2026/08/25 10:17 p.m.11 views

CVE-2026-62865

Typebot is an open-source chatbot builder. In self-hosted versions prior to 3.18.0, the server-side Send Email integration block allows arbitrary reading of local files on the server. The block builds Nodemailer attachments from a typebot variable, and its parseAttachments helper returns the...

8.7CVSS0.00307EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2026/08/25 5:45 p.m.10 views

WordPress Events Manager – Calendar, Bookings, Tickets, and more! plugin <= 7.3.7.4 - Authenticated (Administrator+) Local File Inclusion vulnerability

Authenticated Administrator+ Local File Inclusion vulnerability discovered by Wordfence PRISM in WordPress Plugin Events Manager versions = 7.3.7.4...

6.6CVSS5.2AI score0.0071EPSS
SaveExploits0References1Affected Software1
OSV
OSV
added 2026/08/25 5:28 p.m.5 views

GHSA-88G4-74F3-63X9 phpMyFAQ has Potential Authenticated Path Traversal in PDF Export

Summary There is an authenticated path traversal condition in the PDF export functionality, specifically within the PDF image resolution logic. The issue may allow a privileged FAQ editor to cause the application to attempt reading files outside the intended content directory during PDF generatio...

4.9CVSS5.5AI score0.00399EPSS
SaveExploits0References4
Rows per page
Query Builder