Lucene search
+L

141667 matches found

Vulnrichment
Vulnrichment
•added 2026/10/06 7:17 p.m.•10 views

CVE-2026-79800 Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...

8.8CVSS6.8AI score0.00625EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 7:17 p.m.•43 views

CVE-2026-79800 Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager. Successful exploitation could allow a low-privileged authenticated remote attacker to execute arbitrary code with elevated privileges on the underlying operating system...

8.8CVSS0.00625EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 7:17 p.m.•40 views

CVE-2026-79800

An authenticated path traversal vulnerability exists in the command line interface of ClearPass Policy Manager . A low-privileged authenticated remote attacker could exploit this flaw to achieve remote code execution with elevated privileges on the underlying operating system. No specific patch v...

8.8CVSS6.8AI score0.00625EPSS
SaveExploits0References1
RedHat Linux
RedHat Linux
•added 2026/10/06 7:05 p.m.•13 views

net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution

A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...

5.9CVSS6AI score0.0055EPSS
SaveExploits0References8
Patchstack
Patchstack
•added 2026/10/06 6:58 p.m.•13 views

NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json

NPM: knowns OS Command Injection via Insecure LSP Binary Path Config in .knowns/config.json vulnerability discovered by ? in WordPress Npm knowns versions = 0.29.1...

8.5CVSS5.8AI score0.00212EPSS
SaveExploits0References8Affected Software1
CVE
CVE
•added 2026/10/06 6:41 p.m.•81 views

CVE-2026-106186

Google Chrome on Windows versions prior to 155.0.8059.39 is affected by an uncontrolled search path element in the CredentialProvider component. This vulnerability (CWE-427) allows a local attacker to potentially execute arbitrary code outside the sandbox via a local program. While the Chromium s...

8.6CVSS6.7AI score0.00153EPSS
SaveExploits0References2Affected Software1
Debian CVE
Debian CVE
•added 2026/10/06 6:41 p.m.•11 views

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

8.6CVSS6.7AI score0.00153EPSS
SaveExploits0
Vulnrichment
Vulnrichment
•added 2026/10/06 6:41 p.m.•10 views

CVE-2026-106186

Uncontrolled search path element in CredentialProvider in Google Chrome on on Windows prior to 155.0.8059.39 allowed a local attacker to potentially execute arbitrary code outside the sandbox via a local program. Chromium security severity: Low...

6.7AI score0.00153EPSS
SaveExploits0References2
GithubExploit
GithubExploit
•added 2026/10/06 6:21 p.m.•26 views

Exploit for CVE-2026-21589

CVE-2026-21589 - Atlassian Data Center Una...

9.3CVSS7.6AI score0.02777EPSS
SaveExploits9
NVD
NVD
•added 2026/10/06 6:16 p.m.•9 views

CVE-2026-106103

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder and name values from a user-supplied profile without constraining the resolved destination to the Quasar project...

7.1CVSS0.00288EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/10/06 6:13 p.m.•12 views

CVE-2026-86360

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

9.6CVSS6.7AI score0.00632EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 6:13 p.m.•47 views

CVE-2026-86360

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

9.6CVSS0.00632EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 6:13 p.m.•92 views

CVE-2026-86360

Dell System Update , versions prior to 2.3.0.0 , is vulnerable to a path traversal flaw that allows unauthenticated remote attackers to gain filesystem access . This critical vulnerability can be leveraged to execute arbitrary code with root privileges , potentially leading to a complete compromi...

9.6CVSS6.7AI score0.00632EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
•added 2026/10/06 6:13 p.m.•12 views

EUVD-2026-93778

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker. This...

9.6CVSS6.7AI score0.00632EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/10/06 6:09 p.m.•11 views

EUVD-2026-93774

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

7.3CVSS5.8AI score0.00218EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 6:09 p.m.•34 views

CVE-2026-71168

Dell System Update (DSU) versions prior to 2.3.0.0 are vulnerable to an Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability. A low privileged attacker with local access could exploit this flaw to achieve Remote execution . The vulnerability is particularly r...

7.8CVSS5.8AI score0.00218EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
•added 2026/10/06 6:09 p.m.•12 views

CVE-2026-71168

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

7.3CVSS5.8AI score0.00218EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/10/06 6:09 p.m.•44 views

CVE-2026-71168

Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Remote execution...

7.3CVSS0.00218EPSS
SaveExploits0References1
CVE
CVE
•added 2026/10/06 5:11 p.m.•15 views

CVE-2026-106103

The Quasar Framework is vulnerable to a Path Traversal and Arbitrary File Write vulnerability in the @quasar/icongenie component prior to version 6.1.1 . The root cause is located in icongenie/lib/utils/get-assets-files.js and icongenie/lib/utils/validate-profile-object.js, where the icongenie ge...

7.1CVSS5.9AI score0.00288EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/10/06 5:11 p.m.•44 views

CVE-2026-106103 Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile

Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/icongenie 6.1.1, the icongenie generate --profile command accepted folder and name values from a user-supplied profile without constraining the resolved destination to the Quasar project...

7.1CVSS0.00288EPSS
SaveExploits0References3
Rows per page
Query Builder