VulnCheck KEV: CVE-2024-4956

Path Traversal in Sonatype Nexus Repository 3 allows an unauthenticated attacker to read system files. Fixed in version 3.68.1...

Oracle Linux 10 : ELSA-2026-61586-0: / tar (ELSA-2026-615860)

The remote Oracle Linux 10 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2026-615860 advisory. - Backport upstream patches for CVE-2026-18477, fixes a bug where incremental restore with cyclic renames between backups may create a temporary...

PT-2026-85229

Name of the Vulnerable Software and Affected Versions rubyzip versions prior to 3.4.0 Description An issue exists in the Zip::Entryextract function that allows for path traversal. The software fails to properly validate extraction paths when using prefix comparison without trailing separators. Th...

PT-2026-85305

Name of the Vulnerable Software and Affected Versions MOOS-IvP versions prior to 24.8.2 Description The SplitHandler fails to properly validate variable names extracted from alog files. On Windows systems, an attacker can provide specially crafted alog files containing backslash sequences in...

PT-2026-85135

Name of the Vulnerable Software and Affected Versions OpenList versions prior to 4.2.3 Description The offline-download feature at the 'POST /api/fs/add offline download' endpoint is susceptible to path traversal when using the tool: "SimpleHttp" configuration. The application accepts a...

EUVD-2026-63392

Handlebars.java: Arbitrary file read in SpringTemplateLoader via URL-fragment suffix bypass...

EUVD-2026-64015

Omnigent: Unvalidated osenv.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENTRUNNERWORKSPACE...

GHSA-P8RW-8QJ3-HF33 Omnigent: Unvalidated os_env.cwd in agent bundle yields arbitrary host filesystem access on runners without OMNIGENT_RUNNER_WORKSPACE

Summary An authenticated, non-admin user can obtain arbitrary host-filesystem read/write and host environment-secret disclosure on an Omnigent runner by uploading an agent bundle whose osenv.cwd points outside any intended workspace e.g. / or /home/. The cwd field is taken verbatim from the bundl...

CVE-2026-27825

CVE-2026-27825 — Path Traversal in mcp-atlassian via confluenceuploadattachment Severity : Critical CVSS 9.3 CWE : CWE-22 — Path Traversal Affected : sooperset/mcp-atlassian = 0.17.0 read-side twin of GHSA-xjgw-4wvw-rgm4 Advisory : GHSA NVD : https://nvd.nist.gov/vuln/detail/CVE-2026-27825 TL;DR...

GHSA-FQ2J-3J99-RX65 vulnerabilities

Vulnerabilities for packages: librechat, kubeflow-centraldashboard, kibana, opensearch-dashboards-fips, wazuh-dashboard-fips, arangodb, jitsucom-jitsu, langfuse-fips, redisinsight, nextcloud-server, gitlab-rails-ce, langfuse, awx, lerna, gitlab-rails-ce-fips, prism, wazuh-dashboard, semaphore,...

CVE-2026-84852

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler. The manipulation of the argument displayname leads to path traversal. An attack has to be approached locally...

python: cpython: CPython: tarfile extraction filter bypass allows escaping the destination directory

A flaw was found in the tarfile.extractall function within Python. A remote attacker could exploit this vulnerability by providing a specially crafted archive. This archive could bypass security filters by using a hardlink that references a symlink, allowing the symlink to be recreated outside th...

CVE-2026-84852 Reader Tools PDF Reader App File ActSplashNew.handleDeeplink path traversal

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler. The manipulation of the argument displayname leads to path traversal. An attack has to be approached locally...

CVE-2026-84852

A path traversal vulnerability exists in Reader Tools PDF Reader App version 98.8 for Android. The flaw resides in the ActSplashNew.handleDeeplink function of the File Handler component, where manipulation of the _display_name argument allows local path traversal. The attack requires local access...

EUVD-2026-70259

A security vulnerability has been detected in Reader Tools PDF Reader App 98.8 on Android. The affected element is the function ActSplashNew.handleDeeplink of the component File Handler. The manipulation of the argument displayname leads to path traversal. An attack has to be approached locally...

CVE-2026-49831

DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.7, 8.4, 9.3, and 10.0, the Curation Task feature allows an output path to be used by the reporter -r parameter, typically used to stream results and status of curation...

CVE-2026-49833

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, 9.0-rc1 to before 9.3, and 10-rc1 to before 10.0, a path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. The attacker...

CVE-2026-75593

A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. A malicious client with valid permissions to access the BuildKit control API can craft a special upload request. This request allows files to escape from the BuildKit-controlled state directory, potentially...

CVE-2026-49833 DSpace: Path Traversal possible in LDN message generation

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, 9.0-rc1 to before 9.3, and 10-rc1 to before 10.0, a path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. The attacker...

CVE-2026-49833 DSpace: Path Traversal possible in LDN message generation

DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, 9.0-rc1 to before 9.3, and 10-rc1 to before 10.0, a path traversal vulnerability is possible via the COAR Notify / LDN service in DSpace. The attacker...