481742 matches found
CVE-2026-63162 Omnispace Agora Project < 26.10.0 Path Traversal via tmpFolderName Parameter
Omnispace Agora Project before 26.10.0 contains a path traversal vulnerability that allows attackers to write arbitrary files outside the intended temporary directory by supplying an unanchored tmpFolderName value in the upload destination path. Attackers can exploit this flaw, for example by...
CVE-2026-103855
The Dimension application is affected by a NULL Pointer Dereference (CWE-476) vulnerability. An attacker could exploit this issue by tricking a victim into opening a malicious file , which can cause the application to crash and result in a denial-of-service condition. No specific exploit details ...
EUVD-2026-100537
Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file...
CVE-2026-106634 Adobe Experience Manager | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)
Adobe Experience Manager is affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could result in arbitrary file system write. A low-privileged attacker could leverage this vulnerability to write files to unauthorized locations on the file...
CVE-2026-106634
Adobe Experience Manager is affected by a Path Traversal vulnerability (CWE-22) caused by an improper limitation of a pathname to a restricted directory. A low-privileged attacker could exploit this issue to perform arbitrary file system writes to unauthorized locations without requiring user int...
CVE-2026-63146 Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php
Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation through File::updateConfigFile and DbInstall::dbControl, combined with an SQL injection issue enabl...
CVE-2026-63146 Omnispace Agora Project < 26.10.0 PHP Code Injection via config.inc.php
Omnispace Agora Project before 26.10.0 contains a code injection vulnerability where unescaped, attacker-controlled values are written into the config.inc.php configuration file during installation through File::updateConfigFile and DbInstall::dbControl, combined with an SQL injection issue enabl...
CVE-2026-63146
The Omnispace Agora Project (versions prior to 26.10.0 ) is vulnerable to a PHP code injection flaw. The root cause involves unescaped, attacker-controlled values being written into the config.inc.php file via the File::updateConfigFile() and DbInstall::dbControl() functions during installation. ...
CVE-2026-96953
Null pointer dereference in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to execute code locally...
CVE-2026-96950
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96947
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96949
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96938
Heap-based buffer overflow in Windows Distributed File System DFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96946
Use after free in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to elevate privileges locally...
CVE-2026-96930
Out-of-bounds read in Windows Universal Disk Format File System Driver UDFS allows an authorized attacker to disclose information locally...
CVE-2026-96857
Files or directories accessible to external parties in Windows Projected File System allows an authorized attacker to disclose information locally...
CVE-2026-96209
Out-of-bounds read in Windows Network File System allows an authorized attacker to elevate privileges locally...
CVE-2026-88162
Improper authorization in Windows Encrypting File System EFS allows an authorized attacker to perform tampering locally...