Lucene search
+L

54752 matches found

CVE
CVE
added 2026/07/28 5:39 a.m.28 views

CVE-2026-16585

Technical details (affected versions, root cause, impact, and fixes) are not publicly available in the provided documents; monitor for updates.

7.2CVSS6.6AI score0.00712EPSS
SaveExploits0References6
Cvelist
Cvelist
added 2026/07/28 5:39 a.m.47 views

CVE-2026-16585 Better Messages <= 2.15.19 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal via 'file' Parameter

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesticker function in all versions up to, and including, 2.15.19. This makes it possible for authenticate...

7.2CVSS0.00712EPSS
SaveExploits0References6
ATTACKERKB
ATTACKERKB
added 2026/07/28 5:39 a.m.10 views

CVE-2026-16585

The Better Messages – Chat Rooms, Group Chat, Private Messages & AI Chat Bots plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the deletesticker function in all versions up to, and including, 2.15.19. This makes it possible for authenticate...

7.2CVSS6.6AI score0.00712EPSS
SaveExploits0References7
RedHat Linux
RedHat Linux
added 2026/07/28 1:45 a.m.19 views

sssd: sssd: GPO cache path traversal via unsanitized gPCFileSysPath allows Kerberos authentication bypass

A path traversal flaw was found in SSSD's AD GPO provider. The adgpoextractsmbcomponents function does not sanitize .. sequences in the gPCFileSysPath LDAP attribute, allowing an attacker with AD GPO management access to write files outside the GPO cache directory as root. On default RHEL...

8CVSS5.8AI score0.00668EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2026/07/28 12:00 a.m.18 views

PT-2026-65625

Name of the Vulnerable Software and Affected Versions goshs versions prior to 2.1.5 Description The multipart upload handler in the httpserver/updown.go file splits the part.FileName on the path separator but fails to reject the .. sequence. This allows an unauthenticated user to upload a file wi...

6.5CVSS7.7AI score0.00233EPSS
SaveExploits0References8
Positive Technologies
Positive Technologies
added 2026/07/28 12:00 a.m.22 views

PT-2026-65619

Name of the Vulnerable Software and Affected Versions openhole versions prior to 0.1.2 Description The openhole-server in internal/server/public proxy.go forwarded the URL-decoded request path r.URL.Path to tunnel clients instead of preserving the original request target. This behavior allowed...

8.6CVSS5.5AI score0.00361EPSS
SaveExploits0References9
Positive Technologies
Positive Technologies
added 2026/07/28 12:00 a.m.19 views

PT-2026-65513

wakaru is a JavaScript decompiler and unminifier toolkit. From 1.0.0 until 1.4.0, @wakaru/cli sanitizes bundle-controlled module filenames only once before writing extracted modules, so a crafted filename containing overlapping traversal sequences such as ....// collapses to ../ after sanitizatio...

7.1CVSS6AI score0.00149EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/28 12:00 a.m.8 views

ALSA-2026:46990 Important: sssd security, bug fix, and enhancement update

The System Security Services Daemon SSSD service provides a set of daemons to manage access to remote directories and authentication mechanisms. It also provides the Name Service Switch NSS and the Pluggable Authentication Modules PAM interfaces toward the system, and a pluggable back-end system ...

8.8CVSS6AI score0.00668EPSS
SaveExploits0References6
Tenable Nessus
Tenable Nessus
added 2026/07/28 12:00 a.m.15 views

Linux Distros Unpatched Vulnerability : CVE-2026-47078

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Relative Path Traversal vulnerability in Erlang OTP stdlib zip module allows writing files outside the intended extraction directory via a crafted zip archive...

4.8CVSS5.4AI score0.00149EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/27 10:02 p.m.15 views

MAL-2026-11094 Malicious code in cfgzen (PyPI)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a904eba641878bae63f76595a468b0faaa66fd27104ac557249e457f005c3fb1 The package installs a site-wide cfgzen.pth containing import dotcfg, which Python's site machinery executes automatically at every interpreter start...

5.5AI score
SaveExploits0References10
NVD
NVD
added 2026/07/27 9:17 p.m.14 views

CVE-2026-43772

A path traversal issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox...

8.2CVSS0.00213EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/27 8:16 p.m.12 views

CVE-2026-65921

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location...

8.8CVSS0.00639EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/27 8:12 p.m.57 views

CVE-2026-43772

CVE-2026-43772 describes a path traversal issue in macOS components that could allow an app to break out of its sandbox. The vulnerability is tied to improved input validation and is stated as fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, and macOS Tahoe 26.6. Connected advisories confirm t...

8.2CVSS5.8AI score0.00213EPSS
SaveExploits0References3Affected Software1
EUVD
EUVD
added 2026/07/27 8:12 p.m.12 views

EUVD-2026-49489

A path traversal issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox...

5.8AI score0.00213EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/07/27 8:12 p.m.35 views

CVE-2026-43772

A path traversal issue was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.7.8, macOS Sonoma 14.8.8, macOS Tahoe 26.6. An app may be able to break out of its sandbox...

0.00213EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/27 8:07 p.m.15 views

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring MVC [CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846]

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in Spring MVC or WebFlux CVE-2026-41841, CVE-2026-41842, CVE-2026-41843, CVE-2026-41844, CVE-2026-41846. Spring MVC is used as part of our microservices. These vulnerabilities have been addressed. Please read the detail...

7.5CVSS5.9AI score0.00399EPSS
SaveExploits0Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/07/27 7:27 p.m.14 views

CVE-2026-65921

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location...

8.8CVSS5.8AI score0.00639EPSS
SaveExploits0References3Affected Software1
Cvelist
Cvelist
added 2026/07/27 7:27 p.m.44 views

CVE-2026-65921 Potential path traversal leading to unauthorized file writes

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location...

8.8CVSS0.00639EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/27 7:27 p.m.10 views

CVE-2026-65921 Potential path traversal leading to unauthorized file writes

A path validation weakness in archive extraction/write handling allows entries with traversal sequences to be written outside the intended build artifacts location...

8.8CVSS5.8AI score0.00639EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/27 7:27 p.m.36 views

CVE-2026-65921

Technical details, including affected product/version, root cause, and remediation, are not publicly available in the provided documents; monitor for updates.

8.8CVSS5.8AI score0.00639EPSS
SaveExploits0References2Affected Software1
Rows per page
Query Builder