Red Hat: CVE-2026-112177: ghostscript: Reintroduction of .charkeys -dSAFER bypass in RHEL 8

A flaw was found in Ghostscript as shipped with Red Hat Enterprise Linux 8. The correction for CVE-2019-14869 was omitted during the rebase from version 9.25 to 9.27, leaving privileged .forceput operations in the .charkeys procedure insufficiently protected. Processing a specially crafted...

CVE-2025-60494

A segmentation violation in the gfpropsequalinternal function /filtercore/filterprops.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...

PT-2026-118446

Name of the Vulnerable Software and Affected Versions Vitest versions 4.1.11 through 4.1.11 Vitest version 5.0.3 Description In the packages/mocker/src/node/interceptorPlugin.ts file, the isFileLoadingAllowed function and the filesystem read process interpret backslashes differently on Windows. A...

PT-2026-118678

Name of the Vulnerable Software and Affected Versions ChurcHope theme for WordPress versions prior to 2.2 Description A path traversal issue allows unauthenticated attackers to download arbitrary files. This is achieved by supplying directory traversal sequences to the file parameter of the...

CVE-2025-60494

The GPAC Project/MP4Box software, versions before 2.5 , is vulnerable to a segmentation violation in the gf_props_equal_internal function located in /filter_core/filter_props.c. An attacker can exploit this flaw by supplying a crafted data file to cause a Denial of Service (DoS) . The vulnerabili...

PT-2026-118287

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system...

PT-2026-118627

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.14.9 Description A flaw exists where ViaTemplateActivator. generate only removes existing output if Path.exists is true, which allows a dangling symlink to persist and redirect activation content. Additionally,...

PT-2026-119166

Vulnerability in Oracle Autonomous Health Framework component: Trace File Analyzer. Supported versions that are affected are 26.3-26.8. Easily exploitable vulnerability allows low privileged attacker with logon to the infrastructure where Oracle Autonomous Health Framework executes to compromise...

PT-2026-118669

Name of the Vulnerable Software and Affected Versions X2000R version TOTOLINK-X2000R-Gh-V1.0.0-B20250421.1327 Description An arbitrary file write issue exists in the boa formUploadFile functionality. An authenticated attacker can send a specially crafted HTTP request to write files to the system,...

PT-2026-118507

Name of the Vulnerable Software and Affected Versions aaPanel versions prior to 8.25.0 Description An OS command injection issue exists in the File Manager component. The ExecShell function within the class/public/common.py file is susceptible to manipulation via the sfile, dfile, access, and use...

PT-2026-118312

The download link for files uploaded through a form relied on a token that could be predicted. The file name in the request was also not verified in a way that resisted guessing. An unauthenticated attacker could use this to access files uploaded by other visitors. In addition, the token was show...

CVE-2025-60494

A segmentation violation in the gfpropsequalinternal function /filtercore/filterprops.c of GPAC Project/MP4Box before 2.5 allows attackers to cause a Denial of Service DoS via supplying a crafted data file...

CVE-2014-125134: Improper Limitation of a Pathname to a Restricted Directory

ChurcHope theme for WordPress before 2.2 contains a path traversal vulnerability that allows unauthenticated attackers to download arbitrary files through the 'file' parameter of /wp-content/themes/churchope/lib/downloadlink.php. Attackers can supply directory traversal sequences to read sensitiv...

PT-2026-118387

In Eclipse OpenJ9 versions up to 0.63, opening a supplied diagnostic dump bundle with the jdmpview tool, or equivalent DTFJ code, may cause the analyst's machine to read an arbitrary local file named inside the bundle and send its contents to an arbitrary remote host...

Alibaba Cloud Linux 3 : 0317: tar (ALINUX3-SA-2026:0317)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALINUX3-SA-2026:0317 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-45582: GNU Tar through 1.35 allow...

Linux Distros Unpatched Vulnerability : CVE-2026-111925

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Mopidy before 4.0.5 contains a path traversal vulnerability that allows unauthenticated clients to access local files outside file/mediadirs because...

CVE-2025-60496

The GPAC Project/MP4Box software version before 2.5 is vulnerable to a Floating-Point Exception (FPE) within the reframer_send_packet function (located in /filters/reframer.c). An attacker can exploit this vulnerability by supplying a crafted MP4 file to cause a Denial of Service (DoS) . Document...

PT-2026-118324

UNSUPPORTED WHEN ASSIGNED Improper restriction of recursive entity references in DTDs 'XML entity expansion' vulnerability in Apache Cocoon. This issue affects Apache Cocoon: all versions. XEE in the fp: form processor could lead to SSRF, including exposing files from the server to an untrusted...

CVE-2016-20101: Improper Control of Filename for Include/Require Statement in PHP Program

Issuu Panel plugin for WordPress before 1.6.6 contains a PHP file inclusion vulnerability that allows unauthenticated attackers to include remote or local files through the 'abspath' parameter. Attackers can send GET requests to menu/documento/requests/ajax-docs.php with a crafted abspath value...

PT-2026-118625

Name of the Vulnerable Software and Affected Versions virtualenv versions prior to 21.14.9 Description An issue exists where PipInstall. uninstall previous version accepts existing seed-package metadata and uninstall dist joins entries from top level.txt and RECORD to site-packages without...