Lucene search
K

11 matches found

SUSE CVE
SUSE CVE
added 2026/03/11 4:21 p.m.6 views

SUSE CVE-2026-0846

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

8.6CVSS5.8AI score0.00359EPSS
Exploits1References3
EUVD
EUVD
added 2026/03/09 9:31 p.m.7 views

EUVD-2026-10350

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

8.6CVSS5.9AI score0.00359EPSS
Exploits1References2
Github Security Blog
Github Security Blog
added 2026/03/09 9:31 p.m.5 views

NLTK has Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

8.6CVSS7.5AI score0.00359EPSS
Exploits1References6Affected Software1
OSV
OSV
added 2026/03/09 8:16 p.m.4 views

DEBIAN-CVE-2026-0846

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

7.5CVSS8.1AI score0.00359EPSS
Exploits1References1
OSV
OSV
added 2026/03/09 8:16 p.m.3 views

UBUNTU-CVE-2026-0846

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

8.6CVSS5.9AI score0.00359EPSS
Exploits1References7
UbuntuCve
UbuntuCve
added 2026/03/09 8:16 p.m.4 views

CVE-2026-0846

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

8.6CVSS7.3AI score0.00359EPSS
Exploits1References6
CVE
CVE
added 2026/03/09 7:19 p.m.15 views

CVE-2026-0846

The CVE concerns nltk 3.9.2, specifically the filestring() function in nltk.util, which opens user-supplied file paths without proper sanitization. This allows arbitrary file read by passing absolute or traversal paths, enabling access to sensitive system files. Exploitation can occur locally or ...

8.6CVSS7.3AI score0.00359EPSS
Exploits1References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/03/09 7:19 p.m.5 views

CVE-2026-0846

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

8.6CVSS5.9AI score0.00359EPSS
Exploits1References2
Cvelist
Cvelist
added 2026/03/09 7:19 p.m.26 views

CVE-2026-0846 Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

A vulnerability in the filestring function of the nltk.util module in nltk version 3.9.2 allows arbitrary file read due to improper validation of input paths. The function directly opens files specified by user input without sanitization, enabling attackers to access sensitive system files by...

8.6CVSS0.00359EPSS
Exploits1References1
Positive Technologies
Positive Technologies
added 2026/03/09 12:0 a.m.3 views

PT-2026-24105

Name of the Vulnerable Software and Affected Versions nltk version 3.9.2 Description A flaw exists in the filestring function within the nltk.util module. This issue allows for arbitrary file reading because of inadequate validation of input paths. The function directly opens files specified by...

8.6CVSS7.3AI score0.00359EPSS
Exploits1References26
Huntr
Huntr
added 2025/12/09 7:18 p.m.8 views

Arbitrary File Read via Absolute Path Input in nltk.util.filestring() enabling Local & Remote File Disclosure

This report is not public...

8.6CVSS5.8AI score0.00359EPSS
Exploits1
Rows per page
Query Builder