54787 matches found
CVE-2026-101071 Acrel Electric Unet Web Service Upload Endpoint upload unrestricted upload
A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...
CVE-2026-101071 Acrel Electric Unet Web Service Upload Endpoint upload unrestricted upload
A vulnerability was determined in Acrel Electric Unet Web Service up to 20260814. This vulnerability affects unknown code of the file /exchange/attachment/upload of the component Upload Endpoint. This manipulation of the argument File causes unrestricted upload. The attack can be initiated...
CVE-2026-101071
The Acrel Electric Unet Web Service (up to version 20260814 ) is vulnerable to an unrestricted upload vulnerability within the Upload Endpoint . The flaw resides in the /exchange/attachment/upload file, where manipulation of the File argument allows for remote unauthorized uploads. Public exploit...
CVE-2026-97335
Incorrect authorization in the custom storage volume creation endpoint in Canonical LXD versions 5.0.0 and later fixed in 5.0.10, 5.21.8 and 6.10 on Linux allows an authenticated client with permission to create custom volumes in a project to copy, and so read, any custom storage volume from any...
CVE-2026-12265
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insufficient access control in HA failover endpoint leading to destructive PostgreSQL database operations...
CVE-2026-101067
A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file Endpoint. Such manipulation of the argument filePath/fileName leads to path traversal. The attack may be launched...
CVE-2026-101068
A security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file packages/api/src/utility/zipJsonLinesData.js of the component Create Connection Endpoint. Performing a manipulation of the argument filePath results in path traversal. Remote...
CVE-2026-101070
The software dbgate (up to version 7.3.1 ) contains a path traversal vulnerability within the Files Endpoint component. The flaw exists in the files function of the packages/api/src/controllers/runners.js file, where the manipulation of the runid argument allows for unauthorized file system acces...
CVE-2026-101070 dbgate Files Endpoint runners.js files path traversal
A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers/runners.js of the component Files Endpoint. The manipulation of the argument runid leads to path traversal. The attack is possible to be...
CVE-2026-101070 dbgate Files Endpoint runners.js files path traversal
A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers/runners.js of the component Files Endpoint. The manipulation of the argument runid leads to path traversal. The attack is possible to be...
EUVD-2026-88253
A security vulnerability has been detected in dbgate up to 7.3.1. Affected by this vulnerability is the function files of the file packages/api/src/controllers/runners.js of the component Files Endpoint. The manipulation of the argument runid leads to path traversal. The attack is possible to be...
CVE-2026-101068
A path traversal vulnerability exists in dbgate up to version 7.3.1 . The flaw is located in the zipJsonLinesData function within the file packages/api/src/utility/zipJsonLinesData.js of the Create Connection Endpoint component. By manipulating the filePath argument, an attacker can perform a pat...
EUVD-2026-88243
A security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file packages/api/src/utility/zipJsonLinesData.js of the component Create Connection Endpoint. Performing a manipulation of the argument filePath results in path traversal. Remote...
CVE-2026-101068 dbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversal
A security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file packages/api/src/utility/zipJsonLinesData.js of the component Create Connection Endpoint. Performing a manipulation of the argument filePath results in path traversal. Remote...
CVE-2026-101068 dbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversal
A security flaw has been discovered in dbgate up to 7.3.1. This impacts the function zipJsonLinesData of the file packages/api/src/utility/zipJsonLinesData.js of the component Create Connection Endpoint. Performing a manipulation of the argument filePath results in path traversal. Remote...
CVE-2026-101067 dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal
A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file Endpoint. Such manipulation of the argument filePath/fileName leads to path traversal. The attack may be launched...
EUVD-2026-88238
A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. This affects the function saveUploadedFile of the file files.js of the component save-uploaded-file Endpoint. Such manipulation of the argument filePath/fileName leads to path traversal. The attack may be launched...
CVE-2026-101067
A path traversal vulnerability exists in dbgate versions up to 6.8.1, 7.0.2, 7.1.8, and 7.2.5. The flaw resides in the saveUploadedFile function of the files.js file within the save-uploaded-file endpoint. By manipulating the filePath or fileName arguments, an attacker can perform path traversal....
CVE-2026-12265
Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to an insufficient access control flaw in the HA failover endpoint . This vulnerability allows an attacker to perform destructive PostgreSQL database operations , potentially leading to complete data destruction. The vulnerabil...