Lucene search
K

9 matches found

Positive Technologies
Positive Technologies
added 2026/05/11 12:0 a.m.6 views

PT-2026-39837

Audiobookshelf is a self-hosted audiobook and podcast server. Prior to 2.32.2, the podcast creation endpoint at server/controllers/PodcastController.js accepts a user-controlled file path without sufficient boundary validation to ensure it remains within the intended library directory. This...

6.9CVSS5.8AI score0.00061EPSS
Exploits0References1
OSV
OSV
added 2025/04/29 2:15 p.m.0 views

UBUNTU-CVE-2025-4090

A vulnerability existed in Firefox for Android where potentially sensitive library locations were logged via Logcat. This vulnerability affects Firefox 138 and Thunderbird 138...

5.3CVSS5.8AI score0.00282EPSS
Exploits0References6
OSV
OSV
added 2021/12/03 2:15 p.m.3 views

CVE-2021-43676

matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php...

9.8CVSS5.7AI score
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2021/01/06 1:15 a.m.3 views

CVE-2020-36169

An issue was discovered in Veritas NetBackup through 8.3.0.1 and OpsCenter through 8.3.0.1. Processes using OpenSSL attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under the...

9.3CVSS6.1AI score0.00049EPSS
Exploits0References2
ATTACKERKB
ATTACKERKB
added 2021/01/06 1:15 a.m.3 views

CVE-2020-36163

An issue was discovered in Veritas NetBackup and OpsCenter through 8.3.0.1. NetBackup processes using Strawberry Perl attempt to load and execute libraries from paths that do not exist by default on the Windows operating system. By default, on Windows systems, users can create directories under...

9.3CVSS6AI score0.00049EPSS
Exploits0References2
OSV
OSV
added 2019/01/23 10:29 p.m.0 views

CVE-2019-1636

A vulnerability in the Cisco Webex Teams client, formerly Cisco Spark, could allow an attacker to execute arbitrary commands on a targeted system. This vulnerability is due to unsafe search paths used by the application URI that is defined in Windows operating systems. An attacker could exploit...

7.8CVSS6AI score
Exploits0References2
Oracle linux
Oracle linux
added 2011/05/04 12:0 a.m.37 views

xmlsec1 security and bug fix update

1.2.9-8.1.2 - disable xslt i/o support in library, tools and examples, CVE-2011-1425 - Resolves: rhbz694124 - limit the paths used for searching the security library loaded dynamically...

5.1CVSS1AI score0.0931EPSS
Exploits0
OpenVAS
OpenVAS
added 2009/04/09 12:0 a.m.41 views

Mandriva Update for mozilla-firefox MDKSA-2007:050-1 (mozilla-firefox)

Check for the Version of mozilla-firefox OpenVAS Vulnerability Test Mandriva Update for mozilla-firefox MDKSA-2007:050-1 mozilla-firefox Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribut...

9.3CVSS9.7AI score0.49542EPSS
Exploits10References2
Tenable Nessus
Tenable Nessus
added 2007/03/02 12:0 a.m.25 views

Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2007:050-1)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 1.5.0.10. This update provides the latest Firefox to correct these issues. Update : A regression was found in the latest Firefox packages provided where changes to library paths...

9.3CVSS8.2AI score0.49542EPSS
Exploits11References23
Rows per page
Query Builder