13818 matches found
CVE-2026-17081 IBM Db2 Mirror for i is affected by multiple vulnerabilities
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory...
CVE-2026-17081 IBM Db2 Mirror for i is affected by multiple vulnerabilities
IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to write arbitrary files due to improper limitation of a pathname to a restricted directory...
CVE-2026-17081
IBM Db2 Mirror for i versions 7.4, 7.5, and 7.6 are affected by CVE-2026-17081, where improper limitation of a pathname to a restricted directory could allow a remote attacker to write arbitrary files. The IBM security bulletin lists this alongside other vulnerabilities in the same product and ca...
CVE-2026-45725
A flaw was found in compliance-trestle. The library's remote fetching cache mechanism HTTPSFetcher and SFTPFetcher does not properly sanitize path traversal sequences ../ when constructing local cache file paths from URLs. A remote attacker can exploit this by referencing a malicious URL in an...
DEBIAN-CVE-2026-19880
Path-traversal vulnerability in QOS.CH Sarl Logback-classic on Java logback-classic module allows path-traversal vulnerability. More specifically, an MDC-based discriminator value flows unsanitized into a nested FileAppender path, letting an attacker who influences that MDC value e.g. via an HTTP...
CVE-2026-73620
A flaw was found in GitPython. This vulnerability arises from insufficient guarding of git option forwarding within the IndexFile.checkout and TagReference.create functions. An authenticated attacker can exploit this by passing unsafe options through keyword arguments, leading to the ability to...
CVE-2026-72819 Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload
Grav CMS before 2.0.13 contains a remote code execution vulnerability in the Flex Objects plugin settings validation that allows authenticated users to execute arbitrary code by uploading a ZIP file containing PHP code. Attackers can bypass routine name validation by using array notation instead ...
CVE-2026-72819 Grav CMS before 2.0.13 Remote Code Execution via ZIP Upload
Grav CMS before 2.0.13 contains a remote code execution vulnerability in the Flex Objects plugin settings validation that allows authenticated users to execute arbitrary code by uploading a ZIP file containing PHP code. Attackers can bypass routine name validation by using array notation instead ...
GO-2026-5450 vulnerabilities
Vulnerabilities for packages: virt-api, virt-handler, virt-operator-fips, virt-launcher, docker-machine-driver-harvester, virt-controller, virt-controller-fips, virt-operator, virt-handler-fips, virt-api-fips...
GO-2026-4512 vulnerabilities
Vulnerabilities for packages: nuclei, commercial-expanso-edge...
GHSA-5GJX-96WQ-C8R2 vulnerabilities
Vulnerabilities for packages: helm...
GO-2023-2068 vulnerabilities
Vulnerabilities for packages: croc...
GO-2023-2072 vulnerabilities
Vulnerabilities for packages: croc...
GO-2023-2071 vulnerabilities
Vulnerabilities for packages: croc...
GO-2023-2069 vulnerabilities
Vulnerabilities for packages: croc...
GO-2025-3838 vulnerabilities
Vulnerabilities for packages: splunk-otel-collector...
GO-2024-2482 vulnerabilities
Vulnerabilities for packages: goreleaser...
GO-2026-5322 vulnerabilities
Vulnerabilities for packages: grafana...