134220 matches found
CVE-2026-17106
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
CVE-2026-17106 Tar extraction in moby/go-archive can write outside the destination directory via link following
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
CVE-2026-17106 Tar extraction in moby/go-archive can write outside the destination directory via link following
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
CVE-2026-17106
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
CVE-2026-17106 Tar extraction in moby/go-archive can write outside the destination directory via link following
The tar extraction routines in moby/go-archive Unpack, UnpackLayer, Untar/UntarUncompressed, and the ApplyLayer helpers do not confine filesystem operations to the destination directory. The extractor decides where each archive entry lands using lexical string checks and then performs the...
CVE-2026-63642
creationtimestamp| type| source ---|---|--- 2026-08-18 18:35:08+00:00| published-proof-of-concept| https://github.com/MagicMirrorOrg/MagicMirror/security/advisories/GHSA-998g-7v5w-cr7g...
CVE-2026-47630
NVIDIA Triton Inference Server for Linux has an absolute path traversal vulnerability exploitable with low privileges locally, rated CVSS 5.5 (MEDIUM), potentially leading to code execution. No exploitation or patch details are provided; monitoring for updates is advised.
EUVD-2026-61111
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution...
CVE-2026-47630
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution...
CVE-2026-47630
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution...
EUVD-2026-61108
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service...
CVE-2026-47627
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service...
CVE-2026-47627
NVIDIA Triton Inference Server for Linux has a network-exploitable path traversal flaw (CVSS 9.8, no auth needed) that may allow arbitrary file access and denial of service. Exploitation details are not provided; apply NVIDIA advisory 5865 when available. Monitor for updates.
CVE-2026-47627
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause path traversal. A successful exploit might lead to denial of service...
CVE-2026-47606
NVIDIA Triton Inference Server for Linux is affected by an absolute path traversal vulnerability (CWE-36) in versions 0.0 through 26.05 . A remote attacker with no privileges can exploit this to achieve code execution and information disclosure . NVIDIA's CNA assigns a CVSS 3.1 score of 6.5 (Medi...
CVE-2026-47606
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure...
EUVD-2026-61107
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure...
CVE-2026-47606
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal. A successful exploit might lead to code execution and information disclosure...
CVE-2026-74044
Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows authenticated cluster peers to delete arbitrary directory contents by supplying a traversal-shaped node name in the cluster hello payload without validation. Attackers holding a valid cluster Fernet key can craft a...
CVE-2026-74038
Wazuh 4.0.0 before 4.14.6 contains a path traversal vulnerability that allows unauthenticated remote attackers to cause denial of service by enrolling an agent with a dot-sequence name such as ".." through the enrollment port. Attackers exploit insufficient validation in OSIsValidName and unsafe...