Lucene search
+L

503438 matches found

NVD
NVD
added yesterday18 views

CVE-2026-16137

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

7.2CVSS
SaveExploits0References1
NVD
NVD
added yesterday7 views

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

7.2CVSS
SaveExploits0References1
OSV
OSV
added yesterday4 views

MINI-P4JX-RM46-6642

Bulletin has no description...

6.1CVSS5AI score0.00263EPSS
SaveExploits0
OSV
OSV
added yesterday5 views

MINI-36VX-9X5J-FQWV

Bulletin has no description...

7.5CVSS5AI score0.00483EPSS
SaveExploits0
OSV
OSV
added yesterday4 views

MINI-FCMM-2GWJ-VW84

Bulletin has no description...

7.5CVSS5AI score0.0035EPSS
SaveExploits0
OSV
OSV
added yesterday5 views

MINI-QRC8-QG55-5WXW

Bulletin has no description...

9.6CVSS5AI score0.00655EPSS
SaveExploits0
OSV
OSV
added yesterday5 views

MINI-VGVG-59XQ-C5XV

Bulletin has no description...

7.5CVSS5AI score0.00465EPSS
SaveExploits0
OSV
OSV
added yesterday6 views

MINI-X2PW-9G4P-FFX9

Bulletin has no description...

7.5CVSS5AI score0.0059EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added yesterday4 views

CVE-2026-72220

A flaw was found in the Linux kernel's sunrpc component. When a worker thread processes a new request and encounters an early error, a stale release hook can be re-triggered against previously used data. This can lead to a double-free or use-after-free vulnerability, potentially allowing an...

9.8CVSS5.9AI score0.00588EPSS
SaveExploits0References4
Cvelist
Cvelist
added yesterday22 views

CVE-2026-16137 Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones Controller

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

7.2CVSS
SaveExploits0References1
EUVD
EUVD
added yesterday8 views

EUVD-2026-60198

In Progress ShareFile Storage Zones Controller v5.12.5 and below, a party with valid zone credentials can perform path traversal using resumable upload initiation endpoint, allowing the party to write arbitrary content to any location writable by the application's service account. This may result...

7.2CVSS5.9AI score
SaveExploits0References1
EUVD
EUVD
added yesterday6 views

EUVD-2026-60197

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

8CVSS6.3AI score
SaveExploits0References1
CVE
CVE
added yesterday37 views

CVE-2026-16138

In Progress ShareFile Storage Zones Controller v5.12.5 and below, unsafe deserialization of untrusted file metadata in the CICO service allows a user with write access to a network share to execute arbitrary code on the host. CVSS 8.0 (HIGH) reflects adjacent-network attack vector with low comple...

8CVSS6.3AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday22 views

CVE-2026-16138 Remote code execution via unsafe deserialization in Progress ShareFile Storage Zones Controller's CICO service

In Progress ShareFile Storage Zones Controller v5.12.5 and below versions, unsafe deserialization of untrusted file metadata can allow a user with write access to a Network share to execute arbitrary code on the Storage Zones Controller host...

8CVSS
SaveExploits0References1
CVE
CVE
added yesterday30 views

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

7.2CVSS6.5AI score
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added yesterday4 views

CVE-2026-16139

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

7.2CVSS6.4AI score
SaveExploits0References2Affected Software1
EUVD
EUVD
added yesterday5 views

EUVD-2026-60196

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

7.2CVSS6.4AI score
SaveExploits0References1
Cvelist
Cvelist
added yesterday24 views

CVE-2026-16139 Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code execution

In Progress ShareFile Storage Zones Controller versions = 5.12.5 and = 6.0.2, an authenticated zone administrator can exploit improper validation in the download preparation flow, enabling attacker-controlled files to be written outside the intended preparation directory. This can lead to remote...

7.2CVSS
SaveExploits0References1
The Hacker News
The Hacker News
added yesterday4 views

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

The expensive attacks are not always the clever ones. This week had plenty of proof. Exposed services got hit, old bugs found fresh use, browser sessions became attack paths, and supply-chain problems kept spreading farther than the original compromise. A lot of it came down to access that was...

9.8CVSS8.7AI score0.00496EPSS
SaveExploits1
NVD
NVD
added yesterday5 views

CVE-2026-74997

In Roundcube Webmail before 1.6.18 and 1.7.x before 1.7.3, the cmdlearn driver of the markasjunk plugin is subject to remote code execution via crafted placeholder replacement values. This issue only affects Roundcube instances using the markasjunk plugin with its cmdlearn driver...

8.8CVSS
SaveExploits0References6
Rows per page
Query Builder