CVE-2025-71460

Zipline before 4.2.1 contains a missing authorization vulnerability in the /api/user/files/transaction endpoint that allows authenticated users to modify other users' files due to absent ownership checks. Attackers who know a target file ID can submit transaction requests to edit or delete files...

EUVD-2025-211321

Zipline before 4.2.1 contains a missing authorization vulnerability in the /api/user/files/transaction endpoint that allows authenticated users to modify other users' files due to absent ownership checks. Attackers who know a target file ID can submit transaction requests to edit or delete files...

CVE-2026-123289

In JetBrains Datalore versions prior to 2026.4 , an improper authorization vulnerability (CWE-863) allowed users with notebook viewer privileges to bypass intended restrictions and modify files . This flaw impacts the integrity and availability of the data within the platform. No specific exploit...

EUVD-2026-118054

In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files...

CVE-2026-123289

In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files...

CVE-2026-123289: JetBrains Datalore: In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files

In JetBrains Datalore before 2026.4 improper authorisation allowed notebook viewers to modify files...

PT-2026-134895

Name of the Vulnerable Software and Affected Versions Oray Pugongying X5 Pro versions prior to 7.6.1 Description A remote attacker can perform relative path traversal by manipulating the filename argument within the config restore ex function located in the /etc/openwrt release file. This allows...

HCL BigFix Platform security vulnerabilities

A security vulnerability exists in HCL BigFix Platform versions 11.0.7 and earlier, as well as 10.0.16 and earlier. This vulnerability stems from the use of Mozilla CA certificate bundles PEM. Bundles released prior to version 2026/10/20 still trust certificates with compromised private keys, whi...

CVE-2026-79866

An unauthenticated path traversal vulnerability exists in the PAPI protocol in AOS-8. Successful exploitation of this vulnerability could allow an unauthenticated adjacent attacker to read, modify, and delete files on the underlying operating system...

CVE-2026-79866

CVE-2026-79866 is an unauthenticated adjacent path traversal vulnerability affecting AOS-8 . This flaw can lead to filesystem compromise . While the vulnerability is categorized as CRITICAL with a CVSS score of 9.6 , the provided documents do not specify the exact software component or the underl...

hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation

A flaw was found in HP Linux Imaging and Printing HPLIP software. Multiple vulnerabilities exist that could allow a remote attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files without authorization under certain condition...

hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation

A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities exist in several software components that could potentially allow a local attacker to achieve local code execution, escalate privileges, cause a denial of service DoS, disclose sensitive information, or...

hplip: HPLIP: Multiple vulnerabilities enable remote code execution and privilege escalation

A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities exist that could allow a remote attacker to execute arbitrary code, escalate privileges, cause a denial of service, disclose sensitive information, or modify files without authorization. These issues arise...

hplip: HPLIP: Multiple vulnerabilities enabling local code execution and privilege escalation

A flaw was found in HPLIP HP Linux Imaging and Printing software. Multiple vulnerabilities exist in several software components that could potentially allow a local attacker to achieve local code execution, escalate privileges, cause a denial of service DoS, disclose sensitive information, or...

hplip: HPLIP: Multiple vulnerabilities allow remote code execution and privilege escalation

A flaw was found in HP Linux Imaging and Printing HPLIP software. Multiple vulnerabilities exist that could allow a remote attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files without authorization under certain condition...

HPLIP: HPLIP: Multiple vulnerabilities could lead to remote code execution

A flaw was found in HP Linux Imaging and Printing HPLIP software. Multiple vulnerabilities exist within several software components that could potentially allow an attacker to achieve remote code execution, escalate privileges, cause a denial of service, disclose information, or modify files...

Satel Netco Design

ADVISORY SUMMARY Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary scripts in a user's browser, consume excessive system resources, enumerate files, create or modify files, and potentially execute arbitrary code. 2. RECOMMENDED PRACTICES CISA...

CVE-2026-79805

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system...

EUVD-2026-93891

An authenticated path traversal vulnerability exists in ClearPass Policy Manager. Successful exploitation could allow an attacker to read and modify certain files on the underlying operating system...

PT-2026-107203

🚨 CVE-2026-79805 CVSS 9.8 Critical A path traversal flaw in HPE ClearPass Policy Manager allows remote attackers to read and overwrite sensitive OS files, leading to system compromise. https://t.co/AuVFW8JRTI https://t.co/jsTxIa6pL3...