Lucene search
+L

110 matches found

Cvelist
Cvelist
•added 2026/09/25 1:56 p.m.•27 views

CVE-2026-85029 IBM Guardium Data Protection is affected by multiple vulnerabilities.

IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensitive information, delete arbitrary files, or execute arbitrary code due to improper limitation of a pathname to a restricted directory...

7.5CVSS0.00537EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/24 11:57 a.m.•7 views

EUVD-2026-85857

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: from 2.3.2 before 2.3.4-1124...

5.3CVSS5.8AI score0.00263EPSS
SaveExploits0References1
NVD
NVD
•added 2026/09/18 8:17 p.m.•6 views

CVE-2026-84086

IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory...

7.2CVSS0.0087EPSS
SaveExploits0References1
CVE
CVE
•added 2026/09/18 7:51 p.m.•17 views

CVE-2026-84086

CVE-2026-84086 affects IBM Guardium Data Protection 12.2 and is a path traversal vulnerability (CWE-22) caused by improper limitation of a pathname to a restricted directory. A remote authenticated attacker with high privileges can exploit this to execute arbitrary code , resulting in high impact...

7.2CVSS6.5AI score0.0087EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2026/09/17 12:00 a.m.•5 views

The vulnerability of the Linux operating system’s kernel, related to deficiencies in pathname restriction, allows attackers to trigger a service failure.

The vulnerability of the Linux operating system’s kernel is related to deficiencies in pathname limitation. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

9.4CVSS8.1AI score0.00647EPSS
SaveExploits0References13Affected Software3
NVD
NVD
•added 2026/09/10 10:17 p.m.•9 views

CVE-2026-84889

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory...

8.8CVSS0.00853EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2026/09/10 9:25 p.m.•40 views

CVE-2026-84889 A path traversal vulnerability in file handling components could allow an authenticated attacker to write files to arbitrary locations on the server filesystem

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory...

8.8CVSS0.00853EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/10 12:00 a.m.•0 views

CVE-2026-84889: Improper Limitation of a Pathname to a Restricted Directory

IBM Langflow OSS 1.0.0 through 1.10.3 could allow a remote authenticated attacker to execute arbitrary code due to improper limitation of a pathname to a restricted directory...

8.8CVSS6.5AI score0.00853EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/08 12:00 a.m.•14 views

PT-2026-88002

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to bypass a security feature over a network...

7.4CVSS5.8AI score0.01036EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/05 12:00 a.m.•0 views

CVE-2025-15693: Improper Limitation of a Pathname to a Restricted Directory

The JCH Optimize WordPress plugin before 5.0.1 does not properly restrict a directory path provided to one of its administrative image-browsing features to within the site, allowing high-privilege users, administrators on single-site and sub-site administrators on multisite, to enumerate...

2.7CVSS5.8AI score0.00264EPSS
SaveExploits0References2
NVD
NVD
•added 2026/09/04 5:16 p.m.•10 views

CVE-2026-17622

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

6.5CVSS0.00486EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/09/04 4:04 p.m.•15 views

EUVD-2026-71596

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restricted directory...

8.1CVSS5.5AI score0.00395EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•14 views

PT-2026-85697

IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacker to delete arbitrary local files or directories due to improper limitation of a pathname to a restricted directory...

8.1CVSS5.5AI score0.00395EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/04 12:00 a.m.•14 views

PT-2026-85769

IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...

6.5CVSS5.3AI score0.00486EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/08/28 12:00 a.m.•21 views

The vulnerability of the Dovecot mail server, related to deficiencies in pathname restriction, allows attackers to gain access to confidential data.

The vulnerability of the Dovecot mail server is related to deficiencies in pathname restriction. Exploiting this vulnerability can allow an attacker to gain access to confidential data...

5.3CVSS6.3AI score0.00427EPSS
SaveExploits1References14Affected Software5
Vulnrichment
Vulnrichment
•added 2026/08/20 9:59 p.m.•13 views

CVE-2026-17424 Vulnerabilities in IBM AIX and PowerVM VIOS

IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restrictions due to improper limitation of a pathname to a restricted directory...

4.8CVSS5.3AI score0.00273EPSS
SaveExploits0References1
CVE
CVE
•added 2026/08/13 8:37 p.m.•90 views

CVE-2026-17473

IBM Documentation Offline 1.0.0–1.4.1 is affected by CVE-2026-17473: information disclosure via path traversal caused by improper limitation of a pathname to a restricted directory. A remote attacker could read arbitrary files. CVSS v3.1 base score 7.5 (HIGH). Remediation: upgrade to 1.5.1.

7.5CVSS5.4AI score0.00623EPSS
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/08/11 12:00 a.m.•6 views

The vulnerability of the Python interpreter, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity.

The vulnerability of the Python programming language interpreter is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow attackers to compromise data integrity...

3.3CVSS6AI score0.00245EPSS
SaveExploits0References16Affected Software5
NVD
NVD
•added 2026/08/05 8:17 p.m.•22 views

CVE-2026-18953

Improper limitation of a pathname to a restricted directory in the getresource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the savePath parameter. To remediate this...

8.8CVSS0.00183EPSS
SaveExploits1References3
EUVD
EUVD
•added 2026/08/05 7:33 p.m.•20 views

EUVD-2026-53583

Improper limitation of a pathname to a restricted directory in the getresource tool in Amazon awslabs.aws-transform-mcp-server 0.1.0 through 0.1.4 might allow a context-dependent actor to write arbitrary files outside the intended working directory via the savePath parameter. To remediate this...

8.6CVSS5.6AI score0.00183EPSS
SaveExploits1References3
Rows per page
Query Builder