Lucene search
+L

94623 matches found

Cvelist
Cvelist
added 2026/05/07 3:49 a.m.53 views

CVE-2026-40982

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack. Spring Cloud Config 3.1.x: affected from...

9.1CVSS0.00727EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/05/07 3:49 a.m.8 views

CVE-2026-40982

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack. Spring Cloud Config 3.1.x: affected from...

9.1CVSS5.9AI score0.00727EPSS
SaveExploits0References2Affected Software1
EUVD
EUVD
added 2026/05/07 3:49 a.m.31 views

EUVD-2026-28246

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack. Spring Cloud Config 3.1.x: affected from...

9.1CVSS5.9AI score0.00727EPSS
SaveExploits0References1
OSV
OSV
added 2026/05/07 3:49 a.m.11 views

CVE-2026-40982

Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring-cloud-config-server module. A malicious user, or attacker, can send a request using a specially crafted URL that can lead to a directory traversal attack. Spring Cloud Config 3.1.x: affected from...

9.1CVSS6.1AI score
SaveExploits0References6
Snyk
Snyk
added 2026/05/07 3:28 a.m.32 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the path parameter in the DELETE API endpoints. An attacker can delete arbitrary files outside the intended shared directory by supplying crafted path traversal sequences, resulting in unauthorized data loss and...

9.1CVSS6.3AI score0.00523EPSS
SaveExploits1References2
NVD
NVD
added 2026/05/07 3:16 a.m.37 views

CVE-2026-44599

Tor before 0.4.9.7 can attempt or accept BEGINDIR via conflux legs, aka TROVE-2026-008...

5.3CVSS0.00287EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2026/05/07 3:14 a.m.19 views

CVE-2026-41587 CI4MS: Unrestricted PHP File Upload via Theme Installation Leads to Authenticated Remote Code Execution

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.26.0.0 to before version 0.31.7.0, a theme upload feature allows any authenticated backend user with theme-upload permission to achieve remo...

8.6CVSS6.4AI score0.00501EPSS
SaveExploits0References2
OSV
OSV
added 2026/05/07 3:14 a.m.15 views

CVE-2026-41587 CI4MS: Unrestricted PHP File Upload via Theme Installation Leads to Authenticated Remote Code Execution

CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture with RBAC authorization and theme support. From version 0.26.0.0 to before version 0.31.7.0, a theme upload feature allows any authenticated backend user with theme-upload permission to achieve remo...

8.6CVSS6.5AI score
SaveExploits0References4
CVE
CVE
added 2026/05/07 3:14 a.m.38 views

CVE-2026-41587

CVE-2026-41587 affects CI4MS, a CodeIgniter 4-based CMS skeleton. The vulnerability resides in the theme upload flow: from versions 0.26.0.0 up to before 0.31.7.0, an authenticated backend user with theme-upload permission can upload a crafted ZIP, causing files (including PHP) to be placed into ...

8.6CVSS6.4AI score0.00501EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/05/07 2:24 a.m.20 views

SUSE CVE-2025-71292

In the Linux kernel, the following vulnerability has been resolved: jfs: nlink overflow in jfsrename If nlink is maximal for a directory -1 and inside that directory you perform a rename for some child directory not moving from the parent, then the nlink of the first directory is first incremente...

7.5CVSS5.9AI score0.00321EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/05/07 2:20 a.m.23 views

CVE-2026-6249

Vvveb CMS 1.0.8.2 contains a remote code execution vulnerability in its media upload handler that allows authenticated attackers to execute arbitrary operating system commands by uploading a PHP webshell with a .phtml extension. Attackers can bypass the extension deny-list and upload malicious...

8.8CVSS6.7AI score0.00624EPSS
SaveExploits0References1
SUSE CVE
SUSE CVE
added 2026/05/07 2:20 a.m.23 views

SUSE CVE-2026-35397

Jupyter Server is the backend for Jupyter web applications. In versions 2.17.0 and earlier, a path traversal vulnerability in the REST API allows an authenticated user to escape the configured rootdir and access sibling directories whose names begin with the same prefix as the rootdir. For exampl...

8.8CVSS5.8AI score0.00622EPSS
SaveExploits2References3
Cvelist
Cvelist
added 2026/05/07 2:11 a.m.59 views

CVE-2026-44599

Tor before 0.4.9.7 can attempt or accept BEGINDIR via conflux legs, aka TROVE-2026-008...

3.7CVSS0.00287EPSS
SaveExploits0References4
OSV
OSV
added 2026/05/07 2:11 a.m.8 views

CVE-2026-44599

Tor before 0.4.9.7 can attempt or accept BEGINDIR via conflux legs, aka TROVE-2026-008...

3.7CVSS5.9AI score
SaveExploits0References6
EUVD
EUVD
added 2026/05/07 2:11 a.m.18 views

EUVD-2026-28238

Tor before 0.4.9.7 can attempt or accept BEGINDIR via conflux legs, aka TROVE-2026-008...

5.3CVSS5.8AI score0.00287EPSS
SaveExploits0References4
Debian CVE
Debian CVE
added 2026/05/07 2:11 a.m.56 views

CVE-2026-44599

Tor before 0.4.9.7 can attempt or accept BEGINDIR via conflux legs, aka TROVE-2026-008...

5.3CVSS5.8AI score0.00287EPSS
SaveExploits0
Snyk
Snyk
added 2026/05/07 1:23 a.m.11 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the compressedEndpoint field in a UIPlugin deployment. An attacker can overwrite binaries or configuration files, tamper with cluster state, or write to the host node filesystem by exploiting path traversal in th...

9.3CVSS6.3AI score0.00369EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/07 1:23 a.m.10 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the compressedEndpoint field in a UIPlugin deployment. An attacker can overwrite binaries or configuration files, tamper with cluster state, or write to the host node filesystem by exploiting path traversal in th...

9.3CVSS6.3AI score0.00369EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/07 1:23 a.m.10 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the compressedEndpoint field in a UIPlugin deployment. An attacker can overwrite binaries or configuration files, tamper with cluster state, or write to the host node filesystem by exploiting path traversal in th...

9.3CVSS6.3AI score0.00369EPSS
SaveExploits0References2
Snyk
Snyk
added 2026/05/07 1:23 a.m.11 views

Directory Traversal

Overview Affected versions of this package are vulnerable to Directory Traversal via the compressedEndpoint field in a UIPlugin deployment. An attacker can overwrite binaries or configuration files, tamper with cluster state, or write to the host node filesystem by exploiting path traversal in th...

9.3CVSS6.3AI score0.00369EPSS
SaveExploits0References2
Rows per page
Query Builder