Lucene search
+L

9 matches found

RedhatCVE
RedhatCVE
•added 2026/06/07 12:43 a.m.•38 views

CVE-2026-11431

A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files including entire directories returned as archives to be...

8.3CVSS5.5AI score0.00517EPSS
SaveExploits0References1
EUVD
EUVD
•added 2026/06/06 12:31 a.m.•42 views

EUVD-2026-34919

A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files including entire directories returned as archives to be...

8.3CVSS5.5AI score0.00517EPSS
SaveExploits0References2
NVD
NVD
•added 2026/06/05 10:16 p.m.•26 views

CVE-2026-11431

A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files including entire directories returned as archives to be...

8.3CVSS0.00517EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/06/05 9:08 p.m.•16 views

CVE-2026-11431

A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files including entire directories returned as archives to be...

8.3CVSS5.5AI score0.00517EPSS
SaveExploits0References2
CVE
CVE
•added 2026/06/05 9:08 p.m.•64 views

CVE-2026-11431

CVE-2026-11431 describes a path traversal in Altium’s Projects Service download endpoint used by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path that bypasses validation, enabling reading arbitrary files (including entire directories returned as archives) ...

8.3CVSS6AI score0.00517EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2026/06/05 12:00 a.m.•33 views

Altium 365和Altium Enterprise Server 安全漏洞

Altium 365 and Altium Enterprise Server are both products of the American company Altium. Altium 365 is a product design and development platform. Altium Enterprise Server is a localized data management server. Both Altium 365 and Altium Enterprise Server have security vulnerabilities. These...

8.3CVSS5.6AI score0.00517EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/06/05 12:00 a.m.•2 views

CVE-2026-11431: Improper Limitation of a Pathname to a Restricted Directory

A path traversal vulnerability exists in the Projects Service download endpoint shared by Altium Enterprise Server and Altium 365. An authenticated user can supply a crafted path parameter that bypasses validation, allowing arbitrary files including entire directories returned as archives to be...

8.3CVSS5.9AI score0.00517EPSS
SaveExploits0References3
OSV
OSV
•added 2025/08/14 6:52 p.m.•9 views

MAL-2025-7960 Malicious code in @frozen-team-qa/projects-service (npm)

The package @frozen-team-qa/projects-service was found to contain malicious code...

7.2AI score
SaveExploits0
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/08/14 6:52 p.m.•10 views

Malicious code in @frozen-team-qa/projects-service (npm)

The package @frozen-team-qa/projects-service was found to contain malicious code...

7AI score
SaveExploits0
Rows per page
Query Builder