147521 matches found
RainbowFish PacsOne Server 7.3.9 STOW-RS Path Traversal / Remote Code Execution
RainbowFish PacsOne Server version 7.3.9 contains an authenticated path traversal flaw in the DICOMweb STOW-RS store path that can write a DICOM object to a served PHP directory and execute it as the web server user. https://packetstorm.news/download/235397...
PT-2026-111561
Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete rule file and delete decoder file helpers that allows malicious cluster workers to delete arbitrary files via an unvalidated filename parameter. Attackers holding the cluster key can invoke these helpers through...
PT-2026-111527
A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The...
PT-2026-111372
A vulnerability was identified in wbond certvalidator up to 0.11.1. This issue affects some unknown processing of the component Certificate Path Builder. Such manipulation leads to resource consumption. The attack can be launched remotely. The vendor was contacted early about this disclosure but...
PT-2026-111407
Name of the Vulnerable Software and Affected Versions SeldonIO MLServer versions prior to 1.6.2 Description A remote path traversal issue exists within the environment tarball Handler. The flaw is located in the extract env function of the mlserver/env.py file, allowing an attacker to manipulate...
PT-2026-111406
A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is possible to be carried out remotely. The project was informed of the problem early through an issue report but has not...
PT-2026-111405
Name of the Vulnerable Software and Affected Versions MosaicML Composer versions prior to 0.32.2 Description A path traversal issue exists in the Checkpoint Extraction component within the tarball.extractall function of the composer/utils/checkpoint.py file. This flaw allows a remote attacker to...
PT-2026-111683
A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files...
PT-2026-111673
Name of the Vulnerable Software and Affected Versions Ivanti Xtraction versions prior to 2026.4 Description An External Control of File Name or Path issue allows a remote authenticated attacker to redirect application-generated requests to an endpoint under their control. This can lead to the the...
PT-2026-111671
A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system...
PT-2026-111550
Name of the Vulnerable Software and Affected Versions Hono versions 4.12.4 through 4.13.10 Description A middleware bypass exists in the serveStatic function. Unauthenticated attackers can bypass prefix middleware by using double path decoding, sending malformed percent-encoded paths that the...
PT-2026-111591
HyperScale contained a path traversal issue affecting information disclosure. Software customers upgrade to resolved maintenance release. Update Commvault installation of HyperScale MediaAgents...
PT-2026-111570
Name of the Vulnerable Software and Affected Versions Wazuh versions 4.1.1 through 4.14.7 Description A path traversal issue exists in the upload list file, upload rule file, and upload decoder file functions. Attackers possessing the cluster key can send DistributedAPI requests containing ../...
PT-2026-111295
A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the function com.infraware.service.m.n.a of the component Document Intake. The manipulation of the argument display name results in path traversal. The attack is only possible with local...
PT-2026-111574
Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get list file helper that allows malicious cluster workers to read arbitrary files via unvalidated filename values. Attackers holding the cluster key can send DistributedAPI requests with traversal filenames to read...
PT-2026-111708
Risesoft-y9 Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager storeFile endpoint that allows unauthenticated attackers to write arbitrary files. Attackers can send crafted fullPath and fileName parameters to POST /rest/storeFile to create or...
CVE-2026-107614
An integer underflow in WinCursorShapeUtils::trimTransparent in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to crash the server, and potentially read out-of-bounds memory, by causing a cursor shape with a width or height of zero to be processed on the DXGI...
CVE-2026-107615
An uncontrolled search path element vulnerability in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to execute arbitrary code with SYSTEM privileges. DynamicLibrary::init and ThemeLib load screenhooks32.dll / screenhooks64.dll with LoadLibrary using a bare fi...
PT-2026-111783
Name of the Vulnerable Software and Affected Versions FortiSIEM versions 7.0.0 through 7.0.4 FortiSIEM versions 7.1.0 through 7.1.9 FortiSIEM versions 7.2.0 through 7.2.7 FortiSIEM versions 7.3.0 through 7.3.5 FortiSIEM versions 7.4.0 through 7.4.2 FortiSIEM version 7.5.0 Description An...