Lucene search
+L

18 matches found

PyPA
PyPA
•added 2026/10/01 4:38 p.m.•14 views

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

ImpactWhen reading a suitably crafted PRX or STX file, MPXJ can be made to write files to arbitrary locations in the file system. PatchesThis issue is addressed in MPXJ version 16.5.0. WorkaroundsDo not read PRX or STX files from untrusted sources...

5.3CVSS6AI score0.00335EPSS
SaveExploits0References7Affected Software1
OSV
OSV
•added 2026/10/01 4:38 p.m.•12 views

PYSEC-2026-4108 MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

Impact When reading a suitably crafted PRX or STX file, MPXJ can be made to write files to arbitrary locations in the file system. Patches This issue is addressed in MPXJ version 16.5.0. Workarounds Do not read PRX or STX files from untrusted sources...

5.3CVSS6AI score0.00335EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
•added 2026/10/01 12:00 a.m.•10 views

PT-2026-105857

Impact When reading a suitably crafted PRX or STX file, MPXJ can be made to write files to arbitrary locations in the file system. Patches This issue is addressed in MPXJ version 16.5.0. Workarounds Do not read PRX or STX files from untrusted sources...

5.3CVSS6AI score0.00335EPSS
SaveExploits0References8
Github Security Blog
Github Security Blog
•added 2026/09/22 8:34 p.m.•20 views

MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

Impact When reading a suitably crafted PRX or STX file, MPXJ can be made to write files to arbitrary locations in the file system. Patches This issue is addressed in MPXJ version 16.5.0. Workarounds Do not read PRX or STX files from untrusted sources...

5.3CVSS6AI score0.00335EPSS
SaveExploits0References4Affected Software6
OSV
OSV
•added 2026/09/22 8:34 p.m.•15 views

GHSA-7952-GX68-CJQR MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

Impact When reading a suitably crafted PRX or STX file, MPXJ can be made to write files to arbitrary locations in the file system. Patches This issue is addressed in MPXJ version 16.5.0. Workarounds Do not read PRX or STX files from untrusted sources...

5.3CVSS6AI score0.00335EPSS
SaveExploits0References4
NVD
NVD
•added 2026/09/22 8:17 p.m.•26 views

CVE-2026-65829

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the filesystem. This issue is fixed in...

5.3CVSS0.00335EPSS
SaveExploits0References3
Cvelist
Cvelist
•added 2026/09/22 7:54 p.m.•44 views

CVE-2026-65829 MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the filesystem. This issue is fixed in...

5.3CVSS0.00335EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2026/09/22 7:54 p.m.•10 views

CVE-2026-65829 MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the filesystem. This issue is fixed in...

5.3CVSS6AI score0.00335EPSS
SaveExploits0References3
EUVD
EUVD
•added 2026/09/22 7:54 p.m.•16 views

EUVD-2026-84819

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the filesystem. This issue is fixed in...

5.3CVSS6AI score0.00335EPSS
SaveExploits0References3
CVE
CVE
•added 2026/09/22 7:54 p.m.•25 views

CVE-2026-65829

The MPXJ open-source library (versions 7.3.0 through 16.5.0 ) contains a path traversal vulnerability when processing Primavera P3 PRX or SureTrak STX files. A suitably crafted file can cause the library to write files to arbitrary locations in the filesystem. This issue is addressed in version 1...

5.3CVSS6AI score0.00335EPSS
SaveExploits0References3
OSV
OSV
•added 2026/09/22 7:54 p.m.•13 views

CVE-2026-65829 MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the filesystem. This issue is fixed in...

5.3CVSS6.1AI score
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/22 12:00 a.m.•12 views

CVE-2026-65829: Improper Limitation of a Pathname to a Restricted Directory

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the filesystem. This issue is fixed in...

5.3CVSS6AI score0.00335EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/22 12:00 a.m.•8 views

PT-2026-97037

Name of the Vulnerable Software and Affected Versions MPXJ versions 7.3.0 through 16.4.0 Description Reading a specially crafted Primavera P3 PRX or SureTrak STX file can allow the library to write files to arbitrary locations within the filesystem. Recommendations Update to version 16.5.0. Avoid...

5.3CVSS5.9AI score0.00335EPSS
SaveExploits0References11
Positive Technologies
Positive Technologies
•added 2026/09/17 12:00 a.m.•10 views

PT-2026-94842

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the BPF Berkeley Packet Filter subsystem where the interpreter does not support arena-related instructions. When the interpreter executes arena ST, LDX, or STX...

8.8CVSS7.1AI score0.0067EPSS
SaveExploits0References317
RubySec
RubySec
•added 2026/07/03 12:00 a.m.•19 views

Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

Impact When reading a suitably crafted PRX or STX file, MPXJ can be made to write files to arbitrary locations in the file system. Workarounds Do not read PRX or STX files from untrusted sources...

5.3CVSS5.9AI score0.00335EPSS
SaveExploits0References1Affected Software1
The Hacker News
The Hacker News
•added 2026/04/12 5:54 a.m.•32 views

CPUID Breach Distributes STX RAT via Trojanized CPU-Z and HWMonitor Downloads

Unknown threat actors compromised CPUID "cpuid.com", a website that hosts popular hardware monitoring tools like CPU-Z, HWMonitor, HWMonitor Pro, and PerfMonitor, for less than 24 hours to serve malicious executables for the software and deploy a remote access trojan called STX RAT. The incident...

6AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•41 views

GNU Chess 5.0 - Local Buffer Overflow Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/8097/info A local buffer overflow has been reported for GNU Chess that may result in an attacker obtaining elevated privileges. The vulnerability exists due to insufficient boundary checks performed on some commandline...

7.1AI score
SaveExploits0
seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•40 views

ISDNRep 4.56 Command Line Argument Local Buffer Overflow Vulnerability (1)

No description provided by source. source: http://www.securityfocus.com/bid/8100/info isdnrep has been reported prone to a local command line argument buffer overflow vulnerability. The issue presents itself due do a lack of sufficient bounds checking performed on user-supplied data that is copie...

7.1AI score
SaveExploits0
Rows per page
Query Builder