Lucene search
+L

16976 matches found

RedHat Linux
RedHat Linux
added 2026/01/12 2:30 a.m.14 views

tar: Tar path traversal

A flaw was found in GNU Tar. An attacker could exploit this vulnerability by providing two specially crafted TAR archives, if those archives were extracted in the same directory. The first archive contains a symbolic link that points to a critical directory. The second archive, when extracted, us...

4.1CVSS6.3AI score0.00433EPSS
SaveExploits1References7
RedHat Linux
RedHat Linux
added 2026/01/12 2:05 a.m.22 views

keylime: Keylime: Registrar allows identity takeover via duplicate UUID registration

A vulnerability has been identified in keylime where an attacker can exploit this flaw by registering a new agent using a different Trusted Platform Module TPM device but claiming an existing agent's unique identifier UUID. This action overwrites the legitimate agent's identity, enabling the...

8.2CVSS5.7AI score0.00438EPSS
SaveExploits0References5
OPENSUSE Linux
OPENSUSE Linux
added 2026/01/12 12:00 a.m.15 views

Security update for wget2 (important)

openSUSE Security Update: Security update for wget2 Announcement ID: openSUSE-SU-2026:0010-1 Rating: important References: 1255728 1255729 Cross-References: CVE-2025-69194 CVE-2025-69195 Affected Products: openSUSE Backports SLE-15-SP6 An update that fixes two vulnerabilities is now available...

9.8CVSS7.4AI score0.0072EPSS
SaveExploits1References2
NVD
NVD
added 2026/01/10 6:15 a.m.13 views

CVE-2026-22685

DevToys is a desktop app for developers. In versions from 2.0.0.0 to before 2.0.9.0, a path traversal vulnerability exists in the DevToys extension installation mechanism. When processing extension packages NUPKG archives, DevToys does not sufficiently validate file paths contained within the...

9.8CVSS0.00399EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/01/10 5:43 a.m.35 views

CVE-2026-22685 DevToys Path Traversal (“Zip Slip”) Vulnerability in DevToys Extension Installation

DevToys is a desktop app for developers. In versions from 2.0.0.0 to before 2.0.9.0, a path traversal vulnerability exists in the DevToys extension installation mechanism. When processing extension packages NUPKG archives, DevToys does not sufficiently validate file paths contained within the...

8.8CVSS0.00399EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/01/10 5:43 a.m.5 views

CVE-2026-22685 DevToys Path Traversal (“Zip Slip”) Vulnerability in DevToys Extension Installation

DevToys is a desktop app for developers. In versions from 2.0.0.0 to before 2.0.9.0, a path traversal vulnerability exists in the DevToys extension installation mechanism. When processing extension packages NUPKG archives, DevToys does not sufficiently validate file paths contained within the...

8.8CVSS6.9AI score0.00399EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/10 5:40 a.m.7 views

CVE-2026-21876

The OWASP core rule set CRS is a set of generic attack detection rules for use with compatible web application firewalls. Prior to versions 4.22.0 and 3.3.8, the current rule 922110 has a bug when processing multipart requests with multiple parts. When the first rule in a chain iterates over a...

9.3CVSS6.8AI score0.13346EPSS
SaveExploits4References1
Vulnrichment
Vulnrichment
added 2026/01/10 12:07 a.m.4 views

CVE-2026-21897 CryptoLib Has Out-of-Bounds Write in Crypto_Config_Add_Gvcid_Managed_Parameters

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures SDLS-EP to secure communications between a spacecraft running the core Flight System cFS and a ground station. Prior to version 1.4.3, the CryptoConfigAddGvcidManagedParameters...

7.3CVSS6.7AI score0.00266EPSS
SaveExploits0References2
CNNVD
CNNVD
added 2026/01/10 12:00 a.m.8 views

DevToys 路径遍历漏洞

DevToys is a developer toolkit for DevToys open source. A path traversal vulnerability exists in DevToys version 2.0.0.0 through versions prior to 2.0.9.0, which stems from insufficient path validation in the extension installation mechanism, and could lead to arbitrary file overwriting and code...

9.8CVSS7.2AI score0.00399EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/01/09 12:46 p.m.11 views

CVE-2005-1917

kpopper 1.0 and earlier allows local users to create and overwrite arbitrary files via a symlink attack on the .popper-new temporary file...

2.1CVSS6.8AI score0.00292EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:38 p.m.10 views

CVE-2023-29736

Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to overwrite arbitrary files in its internal storage and achieve arbitrary code execution...

9.8CVSS7.3AI score0.01199EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:16 p.m.15 views

CVE-2018-1000607

A arbitrary file write vulnerability exists in Jenkins Fortify CloudScan Plugin 1.5.1 and earlier in ArchiveUtil.java that allows attackers able to control rulepack zip file contents to overwrite any file on the Jenkins master file system, only limited by the permissions of the user the Jenkins...

6.5CVSS6.8AI score0.0078EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 12:13 p.m.11 views

CVE-2018-9402

In multiple functions of glproc.c, there is a buffer overwrite due to a missing bounds check. This could lead to escalation of privileges in the kernel...

8.8CVSS7.3AI score0.00097EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:53 a.m.8 views

CVE-2009-4013

Multiple directory traversal vulnerabilities in Lintian 1.23.x through 1.23.28, 1.24.x through 1.24.2.1, and 2.x before 2.3.2 allow remote attackers to overwrite arbitrary files or obtain sensitive information via vectors involving 1 control field names, 2 control field values, and 3 control file...

9.8CVSS6.9AI score0.05683EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:43 a.m.17 views

CVE-2010-0360

Sun Java System Web Server aka SJWS 7.0 Update 7 allows remote attackers to overwrite memory locations in the heap, and discover the contents of memory locations, via a malformed HTTP TRACE request that includes a long URI and many empty headers, related to an "overflow." NOTE: this might overlap...

10CVSS6.8AI score0.03573EPSS
SaveExploits3References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:38 a.m.17 views

CVE-2003-1281

cgihtml 1.69 allows local users to overwrite arbitrary files via a symlink attack on certain temporary files...

2.1CVSS6.8AI score0.00329EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:37 a.m.9 views

CVE-2003-1246

NtCreateSymbolicLinkObject in ntdll.dll in Integrity Protection Driver IPD 1.2 and 1.3 allows local users to create and overwrite arbitrary files via a symlink attack on \winnt\system32\drivers using the subst command...

2.1CVSS6.8AI score0.00333EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:23 a.m.10 views

CVE-2021-31795

The PowerVR GPU kernel driver in pvrsrvkm.ko through 2021-04-24 for the Linux kernel, as used on Alcatel 1S phones, allows attackers to overwrite heap memory via PhysmemNewRamBackedPMR...

7CVSS6.8AI score0.00363EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:12 a.m.14 views

CVE-2016-10848

cPanel before 11.54.0.4 allows arbitrary file-overwrite operations in scripts/quotacheck SEC-81...

9CVSS7.1AI score0.01299EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/01/09 11:12 a.m.9 views

CVE-2016-10804

The SQLite journal feature in cPanel before 57.9999.54 allows arbitrary file-overwrite operations during Horde Restore SEC-58...

8.7CVSS7.1AI score0.01114EPSS
SaveExploits0References1
Rows per page
Query Builder