129713 matches found
CVE-2026-64966
ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This allows an attacker to place a...
CVE-2026-64967
A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory. This can lead to unauthorized access to sensitive files and other resources accessible to the web server process. Product is...
CVE-2026-64963
A path traversal vulnerability in ATutor allows an authenticated user to access files from other course directories when the ATFORCEGETFILE configuration option is enabled. This can lead to unauthorized access to files and disclosure of information about the filesystem structure. Product is no...
OPENSUSE-SU-2026:21611-1 Security update for apptainer
This update for apptainer fixes the following issues: Changes in apptainer: - Update github.com/moby/go-archive to v0.3.0 to fix CVE-2026-17106: The tar extraction routines in moby/go-archive do not confine filesystem operations to the destination directory. A crafted archive can create or...
EUVD-2026-63374
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Estonian Information System Authority RIA DigiDoc4 client. This issue affects DigiDoc4: from 4.0.0 before 4.11.0...
CVE-2026-70383
CVE-2026-70383 is a path traversal vulnerability in the Estonian Information System Authority (RIA) DigiDoc4 client , affecting versions 4.0.0 through before 4.11.0 . The flaw allows arbitrary file overwrite on the local system, as indicated by the CVELIST title. The CVSS 4.0 base score is 8.4 (H...
CVE-2026-70383 Arbitrary file overwrite vulnerability in DigiDoc4 client
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Estonian Information System Authority RIA DigiDoc4 client. This issue affects DigiDoc4: from 4.0.0 before 4.11.0...
CVE-2026-70383 Arbitrary file overwrite vulnerability in DigiDoc4 client
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Estonian Information System Authority RIA DigiDoc4 client. This issue affects DigiDoc4: from 4.0.0 before 4.11.0...
Azure Logic Apps Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a network...
Microsoft Fabric Elevation of Privilege Vulnerability
Relative path traversal in Microsoft Fabric allows an authorized attacker to elevate privileges over a network...
Windows Remote Help Defense Spoofing Vulnerability
Uncontrolled search path element in Windows Remote Help Defense allows an authorized attacker to perform spoofing locally...
Microsoft Remote Help Denial of Service Vulnerability
Uncontrolled search path element in Windows Remote Help allows an authorized attacker to deny service locally...
CVE-2026-64967 Path Traversal in ATutor
A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory. This can lead to unauthorized access to sensitive files and other resources accessible to the web server process. Product is...
CVE-2026-64967 Path Traversal in ATutor
A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory. This can lead to unauthorized access to sensitive files and other resources accessible to the web server process. Product is...
EUVD-2026-63368
A path traversal vulnerability in ATutor's error log viewer allows an attacker with administrative privileges to access arbitrary files outside the intended logs directory. This can lead to unauthorized access to sensitive files and other resources accessible to the web server process. Product is...
CVE-2026-64967
ATutor's error log viewer contains a path traversal flaw allowing an admin to read arbitrary files outside the logs directory. Version 2.2.4 is confirmed vulnerable; the product is no longer supported and no fix exists, so migration to a maintained alternative is the only remediation. Exploitatio...
EUVD-2026-63367
ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This allows an attacker to place a...
CVE-2026-64966
ATutor (a learning management system) is affected by a Path Traversal vulnerability in its ZIP extraction functionality. An attacker with instructor privileges can upload a specially crafted ZIP archive that writes files outside the intended extraction directory, enabling placement of a server-ex...
CVE-2026-64966 Path Traversal leading to Remote Code Execution in ATutor
ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This allows an attacker to place a...
CVE-2026-64966 Path Traversal leading to Remote Code Execution in ATutor
ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This allows an attacker to place a...