70903 matches found
Kibana 7.x / 8.x < 8.19.16 / 9.0.x < 9.3.5 / 9.4.x < 9.4.2 Path Traversal (ESA-2026-160)
The version of Kibana installed on the remote host is 7.11.0 through 7.17.29, or 8.x prior to 8.19.16, or 9.0.x prior to 9.3.5, or 9.4.x prior to 9.4.2. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-160 advisory. - Improper Limitation of a Pathname to a Restricted...
RHEL 7 : glib2 (RHSA-2026:65773)
The remote Redhat Enterprise Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65773 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
RHEL 8 : glib2 (RHSA-2026:65771)
The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:65771 advisory. GLib provides the core application building blocks for libraries and applications written in C. It provides the core object system used in...
PT-2026-89202
Name of the Vulnerable Software and Affected Versions GitHacker versions prior to 1.1.8 Description GitHacker fails to validate path segments parsed from an attacker-controlled .git/HEAD file before joining them to the output directory. A malicious server can coerce the tool into reading arbitrar...
PT-2026-88882
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
CVE-2026-87927: Improper Control of Filename for Include/Require Statement in PHP Program
MaxSite CMS through 109.6 contains a local file inclusion vulnerability in the ajax and require-maxsite dispatchers that allows unauthenticated attackers to execute privileged handler files by supplying base64-encoded path traversal sequences. Attackers can bypass path validation checks and execu...
PT-2026-88939
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this...
CVE-2026-87815: External Control of File Name or Path
SiYuan versions before v3.8.2 contain a path traversal vulnerability in the /api/riff/removeRiffDeck endpoint that fails to validate the deckID parameter. An authenticated administrator can supply path traversal sequences to delete arbitrary .deck and .cards files outside the workspace directory...
CVE-2026-87030: Improper Limitation of a Pathname to a Restricted Directory
Tanium addressed a path traversal vulnerability in Comply...
CVE-2026-87747: Relative Path Traversal
The Enterprise Cloud Database developed by Ragic has an Arbitrary File Read vulnerability. Privileged remote attackers can exploit Relative Path Traversal to download arbitrary system files...
PT-2026-88953
Name of the Vulnerable Software and Affected Versions SiYuan versions prior to 3.8.2 Description An authenticated administrator can exploit a path traversal issue via the '/api/riff/removeRiffDeck' endpoint. The system fails to properly validate the deckID parameter, allowing the use of path...
PT-2026-89180
Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination remained within the intended extraction directory. An attacker...
CVE-2026-88069: Improper Limitation of a Pathname to a Restricted Directory
Pandora contains a path traversal vulnerability in its archive extraction worker. When processing a specially crafted archive or disk image, attacker-controlled file paths could be used without ensuring that the resulting destination remained within the intended extraction directory. An attacker...
PT-2026-89044
🚨 CVE-2026-86775 knowns npm package versions = 0.29.1 contain a path traversal vulnerability in the Document API. The HTTP handler in internal/server/routes/docs.go normalizes the user-supplied document path with cleanDocPath, which strips leading/trailing slashes and the .md suffix but does not...
PT-2026-88826
Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege...
CVE-2026-14505: Improper Limitation of a Pathname to a Restricted Directory
Tanium addressed a path traversal vulnerability in Tanium Data Service...
CVE-2026-87023: Improper Limitation of a Pathname to a Restricted Directory
Tanium addressed a path traversal vulnerability in Comply...
PT-2026-88773
Tanium addressed a path traversal vulnerability in Comply...
PT-2026-89194
Name of the Vulnerable Software and Affected Versions eKuiper versions prior to 2.4.1 Description A path traversal issue in administrative management endpoints allows privileged users or attackers with access to management APIs to delete arbitrary files or directories on the host system. In the...