51 matches found
CVE-2026-98705 wifi: mac80211: account proxy paths against the mesh path limit
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: account proxy paths against the mesh path limit Proxy-path churn can drive the interface path counter negative and let later mesh path additions exceed MESHMAXMPATHS. meshpathfreercu decrements the interface mpath...
CVE-2026-98705
The Linux kernel contains a vulnerability in the wifi: mac80211 component where proxy-path churn can drive the interface path counter into negative values. This occurs because mesh_path_free_rcu() decrements the counter for proxy paths, but mpp_path_add() fails to reserve a slot in that counter, ...
CVE-2026-98705
In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: account proxy paths against the mesh path limit Proxy-path churn can drive the interface path counter negative and let later mesh path additions exceed MESHMAXMPATHS. meshpathfreercu decrements the interface mpath...
Azure Application Insights Profiler Path Traversal Privilege Escalation
The vulnerability of Azure’s Application Insights Profiler, a cloud-based tool for analyzing web application performance, is related to an incorrect path name limitation. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
Dulwich Git Path Traversal
The vulnerability of the Python library for working with Git Dulwich repositories is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
SUSE-SU-2026:22926-1 Security update for perl-DBI
This update for perl-DBI fixes the following issues: - CVE-2026-15392: failure to validate symbolic links during table path resolution could allow unauthorized file reads and writes outside the configured data director bsc1271629. - CVE-2026-15043: DBI:SQL:Nano has incorrect predicate evaluation,...
PT-2026-86939
Уязвимость обработчика PlatformHandler.axd автоматизированной информационной системы «Web-торги КС» и программного комплекса «Бюджет-NEXT» связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить несанкционированный...
ROS-20260707-73-0024
The vulnerability of the system’s application programming interface for aggregating and storing Loki logs is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protecte...
ROS-20260608-73-0015
The vulnerability of the .NET Core software platform is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a remote attacker to write arbitrary files...
Agent Zero get_abs_path File Read
The vulnerability of the getabspath function in the framework used to create AI agents like Agent Zero is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to read arbitrary files...
USN-8367-1: tar-fs vulnerabilities
It was discovered that tar-fs did not properly limit paths when extracting crafted tar files. An attacker could possibly use this issue to write or overwrite files outside the intended extraction directory. This issue only affected Ubuntu 22.04 LTS and Ubuntu 24.04 LTS. CVE-2024-12905 It was...
CVE-2026-43888
Outline is a service that allows for collaborative documentation. Prior to 1.7.0, ZipHelper.extract computes the extraction path for each entry by passing a full filesystem path through trimFileAndExt, a filename helper that calls path.basename on its input when truncating. When a zip entry's...
Wazuh Manager Privilege Escalation
The vulnerability of the cluster synchronization component in Wazuh Manager, a platform for security monitoring and threat detection, is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to increase their privileges...
Cisco Nexus Dashboard Update Path Traversal Privilege Escalation
The vulnerability of the metadata update function of the analytics and automation platform for Cisco Nexus Dashboard involves an incorrect limitation on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to write arbitrary files into the system with root privileg...
Rust Command Line Unauthorized Access
The vulnerability of the Cygwin command-line interface in the Rust programming language is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a remote attacker to gain unauthorized access to protected information...
GHSA-775H-3XRC-C228 Parse Server has a rate limit bypass via batch request endpoint
Impact Parse Server's rate limiting middleware is applied at the Express middleware layer, but the batch request endpoint /batch processes sub-requests internally by routing them directly through the Promise router, bypassing Express middleware including rate limiting. An attacker can bundle...
TP-Link Tapo C260 Path Traversal
The vulnerability of TP-Link Tapo C260 IP camera’s microprogramming software is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...
CVE-2026-21878 BACnet Stack Improperly Limits Pathnames to a Restricted Directory
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary...
Music File Upload Service D-Link DCS-700L Unauthorized Access
The vulnerability of the Music File Upload Service in D-Link DCS-700L microprogrammed software cameras stems from an incorrect limit on the path to the restricted catalog during the processing of the UploadMusic parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized...
moment.js RedCheck File Access
The vulnerability of the moment.js agent’s RedCheck component is related to an incorrect path limit for the access-controlled directory. Exploiting this vulnerability could allow a malicious actor to gain access to files on the server beyond the expected directory location...