CVE-2026-57471

CVE-2026-57471 affects KUNBUS RevPiPyLoad 0.11.0 via the XML-RPC management interface. A path traversal flaw in the file management component allows a local unauthenticated attacker to read arbitrary files with the RevPiPyLoad daemon’s privileges by sending crafted requests to the local managemen...

CVE-2026-57471 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in KUNBUS RevPiPyLoad

Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to rea...

GO-2022-1038 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GO-2024-3134 vulnerabilities

Vulnerabilities for packages: juicefs...

GO-2024-3038 vulnerabilities

Vulnerabilities for packages: guac...

GO-2022-1038 vulnerabilities

Vulnerabilities for packages: kubeflow-katib...

GO-2024-3038 vulnerabilities

Vulnerabilities for packages: guac...

GO-2023-2383 vulnerabilities

Vulnerabilities for packages: nri-discovery-kubernetes, local-path-provisioner, ctop, go-bindata, hey, protoc-gen-go-grpc, go-md2man, wait-for-port, metrics-server, nats, influx, render-template, k3d, scorecard, gke-gcloud-auth-plugin, sops, configmap-reload, sbom-scorecard, amass, hubble-ui,...

GHSA-X2R2-RVHQ-2MQV vulnerabilities

Vulnerabilities for packages: apache-nifi-registry, geoserver...

PT-2026-72038

Nozomi Networks Labs identified a CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in the file management functionality of the XML-RPC management interface of KUNBUS RevPiPyLoad in version 0.11.0 that allows a local unauthenticated attacker to rea...

Security Bulletin: Vulnerability in fast-uri affects IBM Netezza Appliance

Summary The fast-uri package is used by IBM Netezza Appliance . IBM Netezza Appliance has addressed the applicable CVE CVE-2026-6321 Vulnerability Details CVEID:CVE-2026-6321 DESCRIPTION: fast-uri decoded percent-encoded path separators and dot segments before applying dot-segment removal in its...

CVE-2026-19594

Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...

CVE-2026-19594

Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...

EUVD-2026-57071

Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...

CVE-2026-19594 Path Traversal and HTTP Parameter Pollution in Snowflake Python API (snowflake.core) Allow Confused-Deputy Privilege Escalation

Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...

CVE-2026-19594

The CVE concerns the Snowflake Python API (snowflake.core) prior to version 1.13.0. It describes two weaknesses arising from insufficient input sanitization: path traversal (CWE-22) via unencoded “..” path segments and HTTP parameter pollution (CWE-141) via unencoded characters in query string va...

PT-2026-70996

Insufficient input sanitization in Snowflake Python API snowflake.core versions prior to 1.13.0 allowed confused-deputy privilege escalation through two related weaknesses: path traversal CWE-22 via unencoded .. identifier path segments, and HTTP parameter pollution CWE-141 via unencoded &//=...

CVE-2026-48441 Lightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...

CVE-2026-48441

CVE-2026-48441 affects Lightroom Classic. The issue is an Improper Limitation of a Pathname to a Restricted Directory (path traversal) that could allow arbitrary file system reads. The root cause is a pathname handling flaw that improperly constrains access to restricted directories. Victims must...

CVE-2026-48441 Lightroom Classic | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

Lightroom Classic is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary file system read. An attacker could exploit this vulnerability to access sensitive files and directories outside the intended access scope...