109626 matches found
CVE-2026-6925 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot " sequences /.. / to view arbitrary files on the system...
CVE-2026-6925
IBM Concert versions 1.0.0 through 3.0.0 are susceptible to a directory traversal vulnerability. A remote attacker can exploit this by sending a specially crafted URL request containing "dot dot" sequences (e.g., /../) to access and view arbitrary files on the system. No specific remediation step...
CVE-2026-6718
IBM Concert versions 1.0.0 through 3.0.0 are affected by an improper access control vulnerability (CWE-276 ). This security flaw allows an attacker to perform unauthorized modification of application files . While the technical root cause is not detailed beyond the access control failure, the imp...
EUVD-2026-85658
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files...
CVE-2026-6718 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files...
CVE-2026-6718 Multiple Vulnerabilities in IBM Concert Software
IBM Concert 1.0.0 through 3.0.0 is vulnerable to improper access control which allows unauthorized modification of application files...
USN-8287-2 xdg-desktop-portal regression
USN-8287-1 fixed a vulnerability in XDG Desktop Portal. Unfortunately the fix for CVE-2026-40354 was incomplete and introduced a regression when trashing files. This update fixes the problem and provides the corresponding update for Ubuntu 26.04 LTS. We apologize for the inconvenience. Original...
RLSA-2026:69609 Important: openexr security update
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...
RLSA-2026:69608 Important: openexr security update
OpenEXR is an open-source high-dynamic-range floating-point image file format for high-quality image processing and storage. This document presents a brief overview of OpenEXR and explains concepts that are specific to this format. This package containes the binaries for OpenEXR. Security Fixes:...
SUSE CVE-2026-82331
Improper link resolution before file access 'link following' vulnerability in the tar source plugin of Apache BuildStream running on Python = 3.12, BuildStream = 2.3.0 already makes use of the Python tarfile filter functionality, which blocks the symlink escape Users are recommended to upgrade to...
EUVD-2026-85362
IBM Concert 1.0.0 through 3.0.0 could allow an unauthorized user to inject data into log messages due to improper neutralization of special elements when written to log files...
CVE-2026-96275
A malicious or compromised Flatpak repository can write attacker-controlled content to arbitrary locations on the host filesystem via extractextradata. On system installs, the write happens as root. Two issues combine: files/extra is resolved via path operations that follow symlinks, and blob nam...
CVE-2026-76804
A flaw was found in Nuclei, a vulnerability scanner. An untrusted workflow, which is a set of instructions for the scanner, could bypass a security control designed to restrict file access. This bypass allows the workflow to load templates that read local files from the scanner host, even when fi...
CVE-2026-61570
A flaw was found in MPXJ. The MerlinReader component, when processing XML from a Merlin project SQLite database, is vulnerable to an XML External Entity XXE attack due to default settings that enable doctype declarations and external entities. A remote attacker could exploit this by providing a...
CVE-2026-96442
A code execution flaw exists in Emacs affecting versions prior to 31.2 . The issue resides in the Flymake mode , where using language backends other than Lisp allows for the execution of arbitrary code from an edited file during syntax checking. If a user views or edits untrusted files, this can ...
EUVD-2026-85127
Foxit PDF Editor/Reader's FileOpen plugin did not adequately validate certain encryption metadata in specially crafted PDF files. This could leave an internal pointer in an invalid state, resulting in chained read and write access violations and potentially enabling arbitrary code execution...
UBUNTU-CVE-2026-82331
Improper link resolution before file access 'link following' vulnerability in the tar source plugin of Apache BuildStream running on Python = 3.12, BuildStream = 2.3.0 already makes use of the Python tarfile filter functionality, which blocks the symlink escape Users are recommended to upgrade to...
Symlink Attack
Overview BuildStream is an A framework for modelling build pipelines in YAML Affected versions of this package are vulnerable to Symlink Attack in the tar source plugin when handling archive extraction. An attacker can modify or overwrite arbitrary files on the host system by supplying a maliciou...
CVE-2026-75799
The YAHMAN Add-ons WordPress plugin before 0.9.31 does not validate the type of the remote files it caches in a publicly accessible directory, allowing unauthenticated attackers to write arbitrary PHP files on the server and achieve RCE when the relevant feature is enabled...