70559 matches found
CVE-2026-55224
The MineAdmin backend management system is vulnerable to a path traversal flaw in its app-store plugin service prior to version 3.2.0-alpha.2 . The application fails to sanitize the user-supplied identifier parameter, concatenating it directly into filesystem paths within plugin/mine-admin/app-st...
Security Bulletin: Vulnerabilities in Netty,node.js,spring-cloud-gateway-server,Angular,Picomatch,nanoid,spring-security,form-data,Apache Log4j Core,brace-expansion might affect IBM Storage Defender Copy Data Management
Summary IBM Storage Defender Copy Data Management can be affected by vulnerabilities in Netty,node.js,spring-cloud-gateway server,Angular,Picomatch,nanoid,spring-security,form-data,Apache Log4j Core,brace-expansion. Vulnerabilities include the tmp npm package contains a path traversal vulnerabili...
CVE-2026-101295
Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path --v1 or the OCI feature path --use-oci-feature, oc-mirror extracts tar entries from catalog image layers without validating that file paths...
Security update for multipath-tools
This update for multipath-tools fixes the following issues: Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. Path traversal in device-mapper-multipath failedwwids management bsc1277210. SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows bsc127721...
SUSE-SU-2026:4406-1 Security update for multipath-tools
This update for multipath-tools fixes the following issues: - Heap Out-of-Bounds Read in Custom Format String Parser via Trailing % bsc1277205. - Path traversal in device-mapper-multipath failedwwids management bsc1277210. - SCSI PRIN READ FULL STATUS responses can cause heap buffer overflows...
CVE-2026-101295
The oc-mirror tool is vulnerable to a path traversal and arbitrary file write flaw during the operator catalog image extraction process. When users mirror operator catalogs using the legacy v1 path (--v1) or the OCI feature path (--use-oci-feature), the software fails to validate that extracted t...
CVE-2026-101295 Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction
Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path --v1 or the OCI feature path --use-oci-feature, oc-mirror extracts tar entries from catalog image layers without validating that file paths...
CVE-2026-101295 Oc-mirror: oc-mirror: path traversal / arbitrary file write in operator catalog image extraction
Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path --v1 or the OCI feature path --use-oci-feature, oc-mirror extracts tar entries from catalog image layers without validating that file paths...
EUVD-2026-89959
Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path --v1 or the OCI feature path --use-oci-feature, oc-mirror extracts tar entries from catalog image layers without validating that file paths...
OESA-2026-4184 python-pymdown-extensions security update
Extension pack for Python Markdown. Security Fixes: PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.getsnippetpath in pymdownx/snippets.py when...
OESA-2026-4183 python-pymdown-extensions security update
Extension pack for Python Markdown. Security Fixes: PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.getsnippetpath in pymdownx/snippets.py when...
OESA-2026-4182 python-pymdown-extensions security update
Extension pack for Python Markdown. Security Fixes: PyMdown Extensions is a set of extensions for the Python-Markdown markdown project. From 10.0.1 until 10.21.3, pymdownx.snippets uses a string-prefix containment check in SnippetPreprocessor.getsnippetpath in pymdownx/snippets.py when...
OESA-2026-4165 python-jupyter-server security update
The backend for Jupyter web applications Security Fixes: Jupyter Server is the backend for Jupyter web applications. In jupyterserver versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in LoginFormHandler.redirectsafe, which allows redirects to arbitra...
OESA-2026-4164 python-jupyter-server security update
The backend for Jupyter web applications Security Fixes: Jupyter Server is the backend for Jupyter web applications. In jupyterserver versions through 2.17.0, the next query parameter in the login flow is insufficiently validated in LoginFormHandler.redirectsafe, which allows redirects to arbitra...
CVE-2026-101295
Path traversal / arbitrary file write in oc-mirror's operator catalog image extraction. When mirroring operator catalogs using either the legacy v1 path --v1 or the OCI feature path --use-oci-feature, oc-mirror extracts tar entries from catalog image layers without validating that file paths...
CVE-2026-97244
Contributor Path Traversal in Creator LMS = 1.2.19 versions...
CVE-2026-97244 WordPress Creator LMS plugin <= 1.2.19 - Path Traversal vulnerability
Contributor Path Traversal in Creator LMS = 1.2.19 versions...
EUVD-2026-89908
Contributor Path Traversal in Creator LMS = 1.2.19 versions...