1828 matches found
CVE-2020-1048
CVE-2020-1048 An elevation of privilege vulnerability exists when the Windows Print Spooler service improperly allows arbitrary writing to the file system. An attacker who successfully exploited this vulnerability could run arbitrary code with elevated system privileges. An attacker could then...
CVE-2026-127202 MLflow < 3.18.0 Path Traversal via model_id in log_outputs API
MLflow before 3.18.0 using the FileStore backend contains a path traversal vulnerability that allows unauthenticated remote attackers to write files outside the intended run directory by supplying a malicious modelid parameter to the log outputs API. Attackers can exploit the unvalidated modelid...
EUVD-2026-124038
A path traversal vulnerability in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to write arbitrary files with the privileges of the OneCLI process by convincing a user to process a specially crafted TAR.GZ update package...
CVE-2026-65950
A path traversal vulnerability in the ZIP extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to write arbitrary files with the privileges of the OneCLI process by convincing a user to process a specially crafted ZIP-based update package...
CVE-2026-65951
A path traversal vulnerability in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to write arbitrary files with the privileges of the OneCLI process by convincing a user to process a specially crafted TAR.GZ update package...
CVE-2026-65951
A path traversal vulnerability, specifically a Tar Slip issue, exists in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux . An attacker can exploit this by convincing a user to process a specially crafted TAR.GZ update package , potentially allowing the attacker to...
flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer
A flaw was found in Flatpak. A malicious local user in an active local session could exploit a symlink traversal vulnerability in the revokefs writer. This flaw allows an attacker to modify files belonging to a different revokefs session after they have been validated. Consequently, an attacker...
CVE-2026-113408
A flaw was found in Git. A malicious server can advertise a malformed unborn HEAD reference during repository operations, causing unintended file writes on the client system during subsequent reference updates. This vulnerability may compromise data integrity by modifying unexpected files or...
EUVD-2026-123110
When using Clang or GCC, building a malicious package that uses cgo could cause unexpected code execution at build time or write files to arbitrary directories via "-gen-" or "-gnat" flags in "cgo" directives. The "-g" wildcard in the compiler and linker flag allowlists previously matched Clang's...
flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer
A flaw was found in Flatpak. A malicious local user in an active local session could exploit a symlink traversal vulnerability in the revokefs writer. This flaw allows an attacker to modify files belonging to a different revokefs session after they have been validated. Consequently, an attacker...
CVE-2026-27876
🚨 CVE-2026-27876 - Grafana Critical RCE via SQL Expressions A chained vulnerability allowing arbitrary file writes through SQL Expressions, leading to full Remote Code Execution RCE on the host. 📋 Overview CVE ID : CVE-2026-27876 Severity : Critical CVSS v3.1: 9.1 Published : March 27, 2026 CWE :...
flatpak: Flatpak: Local privilege escalation via symlink traversal in revokefs writer
A flaw was found in Flatpak. A malicious local user in an active local session could exploit a symlink traversal vulnerability in the revokefs writer. This flaw allows an attacker to modify files belonging to a different revokefs session after they have been validated. Consequently, an attacker...
PT-2026-145473
A path traversal vulnerability in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to write arbitrary files with the privileges of the OneCLI process by convincing a user to process a specially crafted TAR.GZ update package...
CVE-2026-97035: Go toolchain cmd/go: When using Clang or GCC, building a malicious package that uses cgo could cause unexpected code execution at build time…
When using Clang or GCC, building a malicious package that uses cgo could cause unexpected code execution at build time or write files to arbitrary directories via "-gen-" or "-gnat" flags in "cgo" directives. The "-g" wildcard in the compiler and linker flag allowlists previously matched Clang's...
CVE-2026-65951: Lenovo OneCLI: A path traversal vulnerability in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux…
A path traversal vulnerability in the TAR.GZ extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to write arbitrary files with the privileges of the OneCLI process by convincing a user to process a specially crafted TAR.GZ update package...
PT-2026-145472
A path traversal vulnerability in the ZIP extraction logic of Lenovo XClarity Essentials OneCLI 5.5.0 for Linux could allow an attacker to write arbitrary files with the privileges of the OneCLI process by convincing a user to process a specially crafted ZIP-based update package...
N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits
N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabilities collectively tracked as Able2Shell. "As a precautionary measure, we are temporarily taking...
PT-2026-144133
An authentication bypass using an alternate path or channel vulnerability in the rsync in Synology DiskStation Manager DSM before 7.2.1-69057-13, 7.2.2-72806-10, 7.3.2-86009-5, and 7.4.1-90080-1 allows remote attackers to read specific files, write arbitrary files, and conduct limited...
PT-2026-144121
Name of the Vulnerable Software and Affected Versions Synology DSM affected versions not specified Description A no-login SQL injection allows a remote attacker to read or overwrite files on the NAS without authentication. This issue bypasses security measures such as strong passwords and...
CVE-2026-114417
A flaw was found in phodav. Improper handling of encoded path separators in WebDAV MOVE and COPY requests leads to a path traversal vulnerability. A remote attacker can exploit this issue by sending a specially crafted request with directory traversal sequences in the Destination header. Successf...