Lucene search
+L

2000 matches found

OSV
OSV
added 2026/02/04 5:34 p.m.8 views

CVE-2025-64712 Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

The unstructured library provides open-source components for ingesting and pre-processing images and text documents, such as PDFs, HTML, Word docs, and many more. Prior to version 0.18.18, a path traversal vulnerability in the partitionmsg function allows an attacker to write or overwrite arbitra...

9.8CVSS5.5AI score0.00616EPSS
SaveExploits0References4
SUSE Linux
SUSE Linux
added 2026/02/04 12:55 p.m.5 views

Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: CVE-2021-47633: ath5k: fix OOB in ath5keepromreadpcalinfo5111 bsc1237768. CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream bsc1238729...

8.5CVSS6.9AI score0.00303EPSS
SaveExploits1References48
OSV
OSV
added 2026/02/04 12:55 p.m.14 views

SUSE-SU-2026:0385-1 Security update for the Linux Kernel

The SUSE Linux Enterprise 11 SP4 kernel was updated to receive various security bugfixes. The following security bugs were fixed: - CVE-2021-47633: ath5k: fix OOB in ath5keepromreadpcalinfo5111 bsc1237768. - CVE-2022-49545: ALSA: usb-audio: Cancel pending work at closing a MIDI substream...

7.8CVSS6.7AI score0.00303EPSS
SaveExploits1References25
RedhatCVE
RedhatCVE
added 2026/02/04 3:15 a.m.21 views

CVE-2025-36194

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations...

3.3CVSS5.3AI score0.00113EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.5 views

PT-2026-6495

Impact Config partition measurement was moved from PCR 13 to PCR 14 in a commit, but PCR 14 was not added to the list of PCRs that seal/unseal the vault key. As a result, an attacker can remove the disk, use another server to modify the files in the config partition, and then re-insert the disk...

8.8CVSS5.4AI score0.00159EPSS
SaveExploits0References6
CNNVD
CNNVD
added 2026/02/04 12:0 a.m.8 views

Unstructured 安全漏洞

Unstructured is an open-source preprocessing tool for unstructured data developed by Unstructured. Versions of Unstructured prior to 0.18.18 contained a security vulnerability due to a path traversal vulnerability in the partitionmsg function. This vulnerability could allow arbitrary files to be...

9.8CVSS7.5AI score0.00616EPSS
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2026/02/04 12:0 a.m.19 views

PT-2026-6354

Impact On boot, the Pillar container checks for /config/authorized keys. If present with a valid public key, it enables SSH on port 22 with root login. The /config partition is not protected by measured boot, is mutable and unencrypted. This enables an attacker with physical access to the device ...

8.8CVSS5.5AI score0.00159EPSS
SaveExploits0References8
RedhatCVE
RedhatCVE
added 2026/02/03 9:19 p.m.5 views

CVE-2025-47363

Memory corruption when calculating oversized partition sizes without proper checks...

7.8CVSS5.3AI score0.00093EPSS
SaveExploits0References1
RedhatCVE
RedhatCVE
added 2026/02/03 9:19 p.m.9 views

CVE-2025-47364

Memory corruption while calculating offset from partition start point...

7.8CVSS5.3AI score0.00093EPSS
SaveExploits0References1
OSV
OSV
added 2026/02/03 5:43 p.m.5 views

GHSA-GM8Q-M8MV-JJ5M Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

A Path Traversal vulnerability in the partitionmsg function allows an attacker to write or overwrite arbitrary files on the filesystem when processing malicious MSG files with attachments. Impact An attacker can craft a malicious .msg file with attachment filenames containing path traversal...

9.8CVSS6.3AI score0.00616EPSS
SaveExploits0References4
Github Security Blog
Github Security Blog
added 2026/02/03 5:43 p.m.16 views

Unstructured has Path Traversal via Malicious MSG Attachment that Allows Arbitrary File Write

A Path Traversal vulnerability in the partitionmsg function allows an attacker to write or overwrite arbitrary files on the filesystem when processing malicious MSG files with attachments. Impact An attacker can craft a malicious .msg file with attachment filenames containing path traversal...

9.8CVSS6.3AI score0.00616EPSS
SaveExploits0References4Affected Software1
Positive Technologies
Positive Technologies
added 2026/02/03 12:0 a.m.5 views

PT-2026-5943

Name of the Vulnerable Software and Affected Versions Unstructured versions prior to 0.18.18 Description The Unstructured library, used for ingesting and pre-processing various document types like PDFs, HTML, Word documents, and images, contains a path traversal vulnerability in the partition msg...

9.8CVSS6AI score0.00616EPSS
SaveExploits0References31
OSV
OSV
added 2026/02/02 11:15 p.m.10 views

CVE-2025-36194

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations...

3.3CVSS5.8AI score0.00113EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/02 11:15 p.m.9 views

CVE-2025-36194

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations...

3.3CVSS0.00113EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/02/02 10:1 p.m.30 views

CVE-2025-36194 This Power System update is being released to address

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations...

2.8CVSS0.00113EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/02 10:1 p.m.2 views

CVE-2025-36194

IBM PowerVM Hypervisor FW1110.00 through FW1110.03, FW1060.00 through FW1060.51, and FW950.00 through FW950.F0 may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations...

2.8CVSS5.3AI score0.00113EPSS
SaveExploits0References2
CVE
CVE
added 2026/02/02 10:1 p.m.19 views

CVE-2025-36194

Summary: CVE-2025-36194 affects IBM PowerVM Hypervisor. The hypervisor may expose a limited amount of data to a peer partition in specific shared processor configurations during certain operations. Affected versions: PowerVM Hypervisor FW1110.00–FW1110.03, FW1060.00–FW1060.51, and FW950.00–FW950....

3.3CVSS5.3AI score0.00113EPSS
SaveExploits0References1Affected Software1
NVD
NVD
added 2026/02/02 4:16 p.m.11 views

CVE-2025-47363

Memory corruption when calculating oversized partition sizes without proper checks...

7.8CVSS0.00093EPSS
SaveExploits0References1
NVD
NVD
added 2026/02/02 4:16 p.m.9 views

CVE-2025-47364

Memory corruption while calculating offset from partition start point...

7.8CVSS0.00093EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/02/02 3:20 p.m.7 views

EUVD-2025-206607

Memory corruption while calculating offset from partition start point...

6.8CVSS5.3AI score0.00093EPSS
SaveExploits0References1
Rows per page
Query Builder