189991 matches found
GHSA-GMFX-5G6X-RR72 ApostropheCMS: Path traversal in uploadfs
Summary The uploadfs library's local storage backend does not validate or sanitize user-supplied paths. The prefixPath helper only strips double slashes // and the backend performs direct string concatenation uploadsPath + path. An attacker can inject ../ sequences to escape the intended uploads...
Directory Traversal
Overview uploadfs is a Store files in a web-accessible location via a simplified API. Can automatically scale and rotate images. Includes S3, Azure and local filesystem-based backends with the most convenient features of each. Affected versions of this package are vulnerable to Directory Traversa...
ApostropheCMS: Path traversal in uploadfs
Summary The uploadfs library's local storage backend does not validate or sanitize user-supplied paths. The prefixPath helper only strips double slashes // and the backend performs direct string concatenation uploadsPath + path. An attacker can inject ../ sequences to escape the intended uploads...
Insufficiently Protected Credentials
Overview uploadfs is a Store files in a web-accessible location via a simplified API. Can automatically scale and rotate images. Includes S3, Azure and local filesystem-based backends with the most convenient features of each. Affected versions of this package are vulnerable to Insufficiently...
CVE-2026-100132 Acrobat for Edge | Out-of-bounds Read (CWE-125)
Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must visit a maliciously...
CVE-2026-21266
This CVE ID is rejected and does not represent an active vulnerability entry, as it was issued in error.
CVE-2026-100132
Acrobat for Edge is vulnerable to an out-of-bounds read (CWE-125) which could allow an attacker to disclose sensitive memory . Exploitation requires user interaction , such as a victim visiting a maliciously crafted URL or interacting with a compromised web page. No specific exploit details or re...
CVE-2026-100132 Acrobat for Edge | Out-of-bounds Read (CWE-125)
Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must visit a maliciously...
EUVD-2026-105254
Acrobat for Edge is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to disclose sensitive information. Exploitation of this issue requires user interaction in that a victim must visit a maliciously...
CVE-2026-112284
A flaw was found in libaribcaption. An out-of-bounds read vulnerability exists within the caption decoding component due to missing upper bound checks when handling character sets. An attacker can exploit this issue by supplying specially crafted caption data for the application to process...
CVE-2026-113672
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...
CVE-2026-113672
The repo-server component in Argo CD (versions 0.9.0 through 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2) is vulnerable to a path traversal and arbitrary file read issue. The underlying cause is an importer that fails to confine import, importstr, or importbin operations to the repository root when eval...
CVE-2026-113672 Argo CD: A Jsonnet import can read files from the repo-server
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...
CVE-2026-113672
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...
EUVD-2026-105227
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...
CVE-2026-113672 Argo CD: A Jsonnet import can read files from the repo-server
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...
CVE-2026-113672 Argo CD: A Jsonnet import can read files from the repo-server
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory...
Security update for busybox
This update for busybox fixes the following issues: CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message bsc1282575. CVE-2026-88831: httpd silently fails open when IP deny...
SUSE-SU-2026:4773-1 Security update for busybox
This update for busybox fixes the following issues: - CVE-2026-88830: unit confusion in TLS Montgomery reduction buffer allocation causes a pre-authentication heap buffer overflow when processing a crafted ClientKeyExchange message bsc1282575. - CVE-2026-88831: httpd silently fails open when IP...