54412 matches found
cve-2026-47862 - MEDIUM - ZipTransformer uses file_name header to build workDirectory path without sanitization
cve-2026-47862 - MEDIUM - ZipTransformer uses filename header to build workDirectory path without sanitization...
PT-2026-79240
Name of the Vulnerable Software and Affected Versions IBM AIX versions 7.2 and 7.3 IBM PowerVM VIOS version 4.1 Description Remote attackers can bypass security restrictions because the system does not properly limit pathnames to restricted directories. Recommendations At the moment, there is no...
Linux Distros Unpatched Vulnerability : CVE-2026-76217
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - GitPython versions before 3.1.58 fail to validate options passed to git rm and git checkout commands in IndexFile.remove and Head.checkout. Attackers can supply...
UBUNTU-CVE-2026-65612
nnn does not sanitize the filename variable. An attacker can place a f...
UBUNTU-CVE-2026-65611
nnn does not sanitize the path variable. An attacker can createa direc...
PT-2026-79061
VictoriaMetrics is a scalable solution for monitoring and managing time series data. Prior to 1.122.25, 1.136.12, and 1.146.0, vmrestore does not validate backup part path components before using lib/backup/actions/restore.go and lib/backup/fslocal/fslocal.go to write restored data below...
PT-2026-79021
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Estonian Information System Authority RIA DigiDoc4 client. This issue affects DigiDoc4: from 4.0.0 before 4.11.0...
PT-2026-79208
Name of the Vulnerable Software and Affected Versions Azure Logic Apps affected versions not specified Description An issue exists where improper limitation of a pathname to a restricted directory, known as path traversal, allows an unauthorized attacker to elevate privileges over a network. Path...
Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory. - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and...
Wireshark 4.6.x < 4.6.8 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.6.8. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.6.8 advisory. - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service...
PT-2026-79197
Name of the Vulnerable Software and Affected Versions Microsoft Fabric affected versions not specified Description A relative path traversal issue exists that allows an authorized attacker to elevate privileges over a network. Path traversal is a technique used to access files and directories tha...
PT-2026-80731
Name of the Vulnerable Software and Affected Versions Velero versions prior to 1.18.1 Description An attacker who gains control of the backup object-storage backend can upload a malicious backup tarball. This tarball can contain parent-directory paths that allow files to escape the intended...
PT-2026-79267
Path traversal in apport-unpack in Canonical Apport before 2.36.0, 2.34.2, and 2.28.4 on Linux allows an attacker to create or overwrite arbitrary files with the privileges of the executing user via an attacker controlled key names in crash report files...
PT-2026-79032
IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to overwrite arbitrary files due to improper neutralization of special elements in input...
PT-2026-79051
Name of the Vulnerable Software and Affected Versions Apache InLong versions 2.0.0 through 2.3.x Description A relative path traversal issue allows for arbitrary file read operations from the Agent host filesystem. Path traversal is a flaw that allows an attacker to access files and directories...
Wireshark 4.4.x < 4.4.18 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 4.4.18. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.18 advisory. - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of servic...
Linux Distros Unpatched Vulnerability : CVE-2026-19672
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - The tarfile module's tar and data extraction filters created directories outside the destination for members whose name leaves the destination and returns to it...
Wireshark 4.4.x < 4.4.18 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 4.4.18. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-4.4.18 advisory. - Profile import path traversal in Wireshark 4.6.0 to 4.6.4 and 4.4.0 to 4.4.14 allows denial of service and...