Lucene search
+L

2671 matches found

Snyk
Snyk
•added 2026/02/24 3:40 p.m.•11 views

Directory Traversal

Overview Magick.NET-Q8-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•14 views

Directory Traversal

Overview Magick.NET-Q16-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•11 views

Directory Traversal

Overview Magick.NET-Q16-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•9 views

Directory Traversal

Overview Magick.NET-Q8-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package ar...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•11 views

Directory Traversal

Overview Magick.NET-Q16-HDRI-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•11 views

Directory Traversal

Overview Magick.NET-Q16-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•9 views

Directory Traversal

Overview Magick.NET-Q8-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•12 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the path security policy enforcement. An attacker can access sensitive files by supplying specially crafted file paths containing traversal sequences like /etc/. Details A Directory Traversal attack also known as...

8.7CVSS7.5AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•15 views

Directory Traversal

Overview Magick.NET-Q16-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•11 views

Directory Traversal

Overview Magick.NET-Q16-HDRI-AnyCPU is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•11 views

Directory Traversal

Overview Magick.NET-Q8-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•10 views

Directory Traversal

Overview Magick.NET-Q16-HDRI-x86 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package are...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•14 views

Directory Traversal

Overview Magick.NET-Q16-HDRI-OpenMP-x64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 3:40 p.m.•10 views

Directory Traversal

Overview Magick.NET-Q8-OpenMP-arm64 is a Magick.NET allows you can use ImageMagick without having to install ImageMagick on your server or desktop. More information about specific builds see the official docs https://github.com/dlemstra/Magick.NET/tree/main/docs Affected versions of this package...

8.7CVSS7.3AI score0.00807EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/24 12:19 a.m.•11 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the uniqueId parameter. An attacker can write files outside the intended media directory by setting the uniqueId to an absolute path when uploading a device image. Details A Directory Traversal attack also known ...

7.1CVSS6AI score0.00339EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2026/02/24 12:00 a.m.•30 views

PT-2026-21808

Name of the Vulnerable Software and Affected Versions bit7z versions prior to 4.0.11 Description bit7z is a cross-platform C++ static library used for archive compression and extraction. A path traversal flaw "Zip Slip" exists in the archive extraction functionality prior to version 4.0.11. The...

7.5CVSS5.9AI score0.00441EPSS
SaveExploits1References9
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/24 12:00 a.m.•11 views

CVE-2026-27117: Improper Limitation of a Pathname to a Restricted Directory

bit7z is a cross-platform C++ static library that allows the compression/extraction of archive files. Prior to version 4.0.11, a path traversal vulnerability "Zip Slip" exists in bit7z's archive extraction functionality. The library does not adequately validate file paths contained in archive...

7.5CVSS6.1AI score0.00441EPSS
SaveExploits1References1
Snyk
Snyk
•added 2026/02/21 12:35 a.m.•11 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the 'findrunroot function in the FileStore tracking component. An attacker can access arbitrary files on the server by planting a malicious meta.yaml in an artifact folder to redirect artifact URI resolution to...

8.4CVSS7.5AI score0.01847EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/02/21 12:35 a.m.•34 views

Directory Traversal

Overview mlflow is a platform to streamline machine learning development, including tracking experiments, packaging code into reproducible runs, and sharing and deploying models. Affected versions of this package are vulnerable to Directory Traversal via the 'findrunroot function in the FileStore...

8.4CVSS7.5AI score0.01847EPSS
SaveExploits0References2
NVD
NVD
•added 2026/02/20 5:25 p.m.•27 views

CVE-2026-2818

A zip-slip path traversal vulnerability in Spring Data Geode's import snapshot functionality allows attackers to write files outside the intended extraction directory. This vulnerability appears to be susceptible on Windows OS only...

8.2CVSS0.00433EPSS
SaveExploits0References4
Rows per page
Query Builder