Lucene search
+L

110091 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•19 views

CVE-2026-84026: Exposure of Sensitive Information to an Unauthorized Actor

The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not restrict access to a REST endpoint that returns user records, allowing unauthenticated attackers to read registered users' private contact details...

5.3CVSS5.8AI score0.00251EPSS
SaveExploits0References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•10 views

CVE-2026-75799: Improper Control of Generation of Code

The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthenticated attackers to write arbitrary PHP files on the server and achieve RCE when the relevant feature is enabled...

9CVSS6.2AI score0.00263EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
•added 2026/09/23 12:00 a.m.•15 views

Linux Distros Unpatched Vulnerability : CVE-2026-79318

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - web2py 3.2.2-stable commit a7330a2bf21219fa77860b6665de927dd4f98e6d is vulnerable to Directory Traversal in readfile/writefile...

6.5CVSS5.8AI score0.0056EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•9 views

PT-2026-97216

Name of the Vulnerable Software and Affected Versions Foxit PDF Editor/Reader affected versions not specified Description Foxit PDF Editor/Reader fails to validate the directory traversal path in the attachment file name. This allows malicious attachments to be written to directories outside the...

7.8CVSS5.8AI score0.00215EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/09/23 12:00 a.m.•19 views

CVE-2026-91797: External Control of File Name or Path

Foxit PDF Editor/Reader failed to validate the directory traversal path in the attachment file name, resulting in malicious attachments being able to be written to directories outside the expected secure area when the PDF is opened...

7.8CVSS7.2AI score0.00215EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•7 views

PT-2026-97348

Name of the Vulnerable Software and Affected Versions Flatpak affected versions not specified Description A flaw exists where a malicious SDK container can trigger arbitrary file writes on the host system. This occurs when a developer executes the command flatpak build-init --writable-sdk...

9.8CVSS6AI score0.00396EPSS
SaveExploits0References33
Redos
Redos
•added 2026/09/23 12:00 a.m.•18 views

ROS-20260923-73-0002

The vulnerability in python-black is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

8.7CVSS8.2AI score0.00744EPSS
SaveExploits0
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•8 views

PT-2026-97170

Name of the Vulnerable Software and Affected Versions The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin versions prior to 8.9.5 Description The plugin fails to validate a user-supplied URL before fetching it server-side. This allows users with the subscrib...

5CVSS5.8AI score0.00197EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
•added 2026/09/23 12:00 a.m.•3 views

PT-2026-97347

Name of the Vulnerable Software and Affected Versions Flatpak affected versions not specified Description A malicious or compromised repository can write attacker-controlled content to arbitrary locations on the host filesystem. This occurs through the extract extra data function. On system...

8.8CVSS6AI score0.00396EPSS
SaveExploits0References44
Zero Day Initiative
Zero Day Initiative
•added 2026/09/23 12:00 a.m.•29 views

Foxit PDF Reader Portfolio Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.6AI score0.00215EPSS
SaveExploits0References1
Zero Day Initiative
Zero Day Initiative
•added 2026/09/23 12:00 a.m.•28 views

Foxit PDF Reader RichMedia Annotation Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling of...

7.8CVSS6.6AI score0.00154EPSS
SaveExploits0References1
Snyk
Snyk
•added 2026/09/22 8:36 p.m.•13 views

Directory Traversal

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

7.7CVSS6.1AI score0.0034EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/09/22 8:35 p.m.•16 views

Directory Traversal

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

8.7CVSS6.1AI score0.00489EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/09/22 8:35 p.m.•12 views

Directory Traversal

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

7.1CVSS6.2AI score0.00374EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/09/22 8:35 p.m.•12 views

Directory Traversal

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

7.1CVSS6.1AI score0.00442EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/09/22 8:35 p.m.•12 views

Directory Traversal

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

7.1CVSS6.1AI score0.00391EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/09/22 8:35 p.m.•14 views

Directory Traversal

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

8.3CVSS6.1AI score0.00349EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/09/22 8:34 p.m.•15 views

Directory Traversal

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

8.3CVSS6.1AI score0.00386EPSS
SaveExploits0References2
Snyk
Snyk
•added 2026/09/22 8:34 p.m.•12 views

Directory Traversal

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

7.1CVSS6.1AI score0.00373EPSS
SaveExploits1References2
Snyk
Snyk
•added 2026/09/22 8:34 p.m.•15 views

Directory Traversal

Overview mcp-atlassian is a The Model Context Protocol MCP Atlassian integration is an open-source implementation that bridges Atlassian products Jira and Confluence with AI language models following Anthropic's MCP specification. This project enables secure, contextual AI interactions with...

8.7CVSS6.2AI score0.00413EPSS
SaveExploits0References2
Rows per page
Query Builder