464413 matches found
CVE-2026-112262
RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...
CVE-2026-111925
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
CVE-2026-111915
Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlist...
UBUNTU-CVE-2026-111925
Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because FileLibraryProvider.lookup lacks a containment check. Attackers can call core.library.lookup or core.tracklist.add over JSON-RPC or WebSocket with...
EUVD-2026-104311
RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...
CVE-2026-112262 RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors
RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...
CVE-2026-112262 RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors
RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...
CVE-2026-112262
RisingWave versions before 3.1.0 are susceptible to a missing authorization vulnerability (CWE-862) involving posix_fs and fs connectors . Attackers with schema CREATE privileges can exploit this by setting posix_fs.root or fs.path to arbitrary directories. This allows low-privileged SQL users to...
CVE-2026-112262 RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors
RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...
CVE-2026-111915 Yank Note before 3.93.1 Path Traversal via /api/help Endpoint
Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlist...
EUVD-2026-104318
Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlist...
CVE-2026-111915 Yank Note before 3.93.1 Path Traversal via /api/help Endpoint
Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlist...
CVE-2026-111915 Yank Note before 3.93.1 Path Traversal via /api/help Endpoint
Yank Note before 3.93.1 contains a path traversal vulnerability that allows unauthenticated remote attackers to read arbitrary files via the path or doc parameter of /api/help. Attackers can supply repeated '../' segments, which bypass the single-replacement sanitization in the publicly allowlist...
CVE-2026-111915
Versions of Yank Note prior to 3.93.1 are vulnerable to a path traversal vulnerability (CWE-22) via the /api/help endpoint. Unauthenticated remote attackers can bypass single-replacement sanitization by supplying repeated ../ segments in the path or doc parameters. This flaw allows attackers to r...
WordPress WP Mailster plugin <= 1.9.1.0 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Peter Tang in WordPress Plugin WP Mailster versions = 1.9.1.0...
CLSA-2026-1780301172 Fix of 19 CVEs
CVE-2025-38715 - hfs: fix slab-out-of-bounds in hfsbnoderead CVE-2025-38715 CVE-2023-53432 - firewire: net: fix use after free in fwnetfinishincomingpacket CVE-2023-53432 CVE-2025-39891 - wifi: mwifiex: Initialize the chanstats array to zero CVE-2025-39891 CVE-2025-38666 - net: appletalk: Fix...
WordPress Mang Board WP plugin <= 2.4.4 - Arbitrary File Upload vulnerability
Arbitrary File Upload vulnerability discovered by Nixxies in WordPress Plugin Mang Board WP versions = 2.4.4...
WordPress weForms plugin <= 1.6.28 - Arbitrary File Deletion vulnerability
Arbitrary File Deletion vulnerability discovered by Peter Tang in WordPress Plugin weForms versions = 1.6.28...
USN-8936-1 php8.5, php8.3, php8.1, php7.4, php7.2, php7.0, php5 vulnerabilities
It was discovered that PHP did not properly validate the size of MySQL server packets in the mysqlnd driver. A malicious server could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04...
USN-8936-1: PHP vulnerabilities
It was discovered that PHP did not properly validate the size of MySQL server packets in the mysqlnd driver. A malicious server could possibly use this issue to cause PHP to crash, resulting in a denial of service. This issue was only addressed in Ubuntu 20.04 LTS, Ubuntu 22.04 LTS, Ubuntu 24.04...