CVE-2026-111434

Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. When the iSulad daemon performs container lifecycle operations such as create...

CVE-2026-111434

The openEuler iSulad container runtime (versions through 2.1.6 ) is vulnerable to a Use of Externally-Controlled format string vulnerability in the file src/daemon/modules/image/oci/oci_load.c. When the iSulad daemon performs container lifecycle operations (such as create, start, exec, or stop) v...

EUVD-2026-124256

Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c. This issue affects iSulad: through 2.1.6. When the iSulad daemon performs container lifecycle operations such as create...

PT-2026-145673

Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/image/oci/oci load.c. This issue affects iSulad: through 2.1.6. When the iSulad daemon performs container lifecycle operations such as creat...

UBUNTU-CVE-2026-120641

CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths. The name returned for an uploaded file is the filename parameter of the part's Content-Disposition header, unchanged. An application that saves the upload under this name can ...

CVE-2026-120641

CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths. The name returned for an uploaded file is the filename parameter of the part's Content-Disposition header, unchanged. An application that saves the upload under this name can ...

CVE-2026-120641

CGI versions before 5.00 for Perl return upload filenames with any client-supplied path, including ../ and Windows paths. The name returned for an uploaded file is the filename parameter of the part's Content-Disposition header, unchanged. An application that saves the upload under this name can ...

CVE-2026-118485 Axel Download Accelerator Path Traversal via URL Filename Decoding

Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding httpdecode on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed %2e%2e%2f URL-encoded ../ sequences in the URL path. These sequences survive the URL...

CVE-2026-118485

Axel Download Accelerator versions 2.17.14 and earlier are vulnerable to a path traversal vulnerability (CWE-24) caused by improper URL percent-decoding. The software performs http_decode() on the output filename after the URL has been parsed. This allows an attacker to use encoded sequences like...

CVE-2026-118485 Axel Download Accelerator Path Traversal via URL Filename Decoding

Axel Download Accelerator 2.17.14 and earlier performs URL percent-decoding httpdecode on the output filename after the URL has been parsed and the filename component extracted. This allows an attacker to embed %2e%2e%2f URL-encoded ../ sequences in the URL path. These sequences survive the URL...

Linux kernel security vulnerabilities

A security vulnerability exists in Linux kernel version 6.7. It stems from the use of a user-writable TPA register in handleexception within RISC-V entry handling to determine whether an exception originates from user space. Attackers can manipulate this register to cause the kernel to bypass...

IBM DataStage on Cloud Pak for Data Authorization Issue Vulnerability

IBM DataStage on Cloud Pak for Data version 5.4.0.0 has an authorization issue vulnerability. This vulnerability arises from the ability of unauthenticated users to perform arbitrary writes on keys of any tenant in the shared Redis database. This compromises the credential encryption boundary and...

CVE-2026-110734

Godot Engine through 4.7.2 has a heap out-of-bounds write in the Radiance HDR .hdr image decoder modules/hdr/imageloaderhdr.cpp. The run-length decoding loop expands RLE instructions read from the file into a buffer sized from the image dimensions, without validating that an instruction's...

CVE-2026-5049

A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a. A local authenticated attacker can write an uploaded content outside the intended directory...

PT-2026-106803

kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" parameter that is concatenated into the upload base path without validation, allowing unauthenticated attackers to create...

CVE-2026-95140: Improper Limitation of a Pathname to a Restricted Directory

kkFileView v5.0.0 through v5.0.2 contains a directory traversal vulnerability in FileController.java. The fileUpload, createFolder and existsFile endpoints accept a "path" parameter that is concatenated into the upload base path without validation, allowing unauthenticated attackers to create...

CVE-2026-51883

The knowledge base creation and document upload interfaces in Langchain-Chatchat 0.3.0;0.3.1 is vulnerable to path traversal. An attacker can inject path traversal sequences such as ..\ into the knowledgebasename parameter to write knowledge base content to arbitrary locations outside the...

Rocky Linux 8 [CIQ] Security Update: platform-python / platform-python-debug / platform-python-devel / etc Multiple Vulnerabilities (crlsa-2025_10128)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202510128 advisory. cpython: Tarfile extracts filtered members when errorlevel=0 CVE-2025-4435 cpython: Bypass extraction filter to modify file metadata outside extraction...

Rocky Linux 10.0 [CIQ] Security Update: python-unversioned-command / python3 / python3-debug / etc Multiple Vulnerabilities (crlsa-2025_10140)

The Rocky Linux 10.0 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-202510140 advisory. cpython: Tarfile extracts filtered members when errorlevel=0 CVE-2025-4435 cpython: Bypass extraction filter to modify file metadata outside extraction...

CVE-2026-51884

The Langchain Chatchat 0.3.1 software contains a path traversal vulnerability in the /knowledge_base/upload_temp_docs temporary document upload endpoint. An attacker can exploit this by crafting malicious filenames to write files to arbitrary locations on the server, effectively bypassing intende...