189424 matches found
CVE-2026-39993 Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter
A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...
EUVD-2026-101879
A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...
CVE-2026-39993 Path Traversal to Root RCE in QNAP Download Station via Addon/Search addon Parameter
A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...
CVE-2026-24718 Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...
CVE-2026-24718
A path traversal vulnerability affects Qsync Central in the qsyncsrv.cgi component. If a remote attacker obtains a user account, they can exploit this flaw to read unexpected files or system data . The vulnerability has been addressed in versions 5.0.0.7 , 5.1.0.3 , 5.2.0.5 , and 5.3.0.2 and late...
EUVD-2026-101875
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...
CVE-2026-24718 Path Traversal Vulnerability in Qsync Central's qsyncsrv.cgi
A path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Qsync Central...
CVE-2025-66275 Remote code execution via command injection
A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...
EUVD-2025-211094
A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...
CVE-2025-66275 Remote code execution via command injection
A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...
CVE-2025-66275
A path traversal vulnerability (CWE-22) affects Video Station . If a remote attacker obtains a user account, they can exploit this flaw to read the contents of unexpected files or system data. The vulnerability has been addressed in Video Station version 5.8.5 and later . Specific details regardi...
EUVD-2025-211093
A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...
CVE-2025-66272 Arbitrary file deletion and remote code execution
A path traversal vulnerability has been reported to affect Video Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version: Video Station 5.8...
CVE-2025-66272
A path traversal vulnerability (CWE-22) exists in Video Station , allowing an authenticated remote attacker to read the contents of unexpected files or system data. The vulnerability is resolved in Video Station version 5.8.5 and later . No specific exploit details or in-the-wild exploitation are...
CVE-2026-58100
The FreeBSD kernel is vulnerable to a memory safety issue in the kqueue copy-on-fork implementation. Specifically, the kqueue_fork_copy_knote() function performs an out-of-bounds read because it indexes into the child's file descriptor table using a knote's file descriptor number without a proper...
CVE-2026-58100 Memory safety bugs in kqueue copy-on-fork implementation
kqueueforkcopyknote indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's table is copied before knotes are transferred, a concurrent thread in the parent could grow the parent's table and register knotes with file...
EUVD-2026-101857
kqueueforkcopyknote indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's table is copied before knotes are transferred, a concurrent thread in the parent could grow the parent's table and register knotes with file...
CVE-2026-58100 Memory safety bugs in kqueue copy-on-fork implementation
kqueueforkcopyknote indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's table is copied before knotes are transferred, a concurrent thread in the parent could grow the parent's table and register knotes with file...
CVE-2026-58100
kqueueforkcopyknote indexed into the child's file descriptor table using a knote's file descriptor number without a bounds check. Because the child's table is copied before knotes are transferred, a concurrent thread in the parent could grow the parent's table and register knotes with file...
[SECURITY] [DLA 4835-1] mariadb security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4835-1 [email protected] https://www.debian.org/lts/security/ Otto Kekäläinen October 14, 2026 https://wiki.debian.org/LTS -...