147564 matches found
CLEANSTART-2026-WN13169 carefully crafted request uri-path can cause mod_proxy_uwsgi to read above the allocated memory and crash (DoS)
Security vulnerability affects the apache2 package. A carefully crafted request uri-path can cause modproxyuwsgi to read above the allocated memory and crash DoS...
CLEANSTART-2026-BM33422 crafted request uri-path can cause mod_proxy to forward the request to an origin server choosen by the remote user
Security vulnerability affects the apache2 package. A crafted request uri-path can cause modproxy to forward the request to an origin server choosen by the remote user...
CLEANSTART-2026-UE43947 Previously, resolving relative paths containing parent directory ('
CVE-2026-56860 affects multiple packages. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...
EUVD-2026-95325
IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability...
EUVD-2026-95346
A flaw was found in ansible-core. When installing a collection with ansible-galaxy collection install, the archive extractor validates member paths using lexical path normalisation os.path.abspath instead of resolving symbolic links os.path.realpath, and it performs no containment check on...
EUVD-2026-95339
IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal...
EUVD-2026-95316
Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could access file paths outside the intended directory and use observable application responses to determine whether files...
PT-2026-108808
Name of the Vulnerable Software and Affected Versions Dell Secure Connect Gateway SCG Policy Manager versions prior to 5.34.00.16 Description An Improper Limitation of a Pathname to a Restricted Directory, also known as Path Traversal, exists in the software. A high privileged attacker with local...
PT-2026-108794
Name of the Vulnerable Software and Affected Versions gvproxy affected versions not specified Description A path traversal issue exists in gvproxy, the network forwarder within the gvisor-tap-vsock package. The unauthenticated endpoint '/services/forwarder/expose' fails to validate the socket pat...
PT-2026-108835
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from n/a through 4.2.1...
Grafana 8.2.6 Plugin Path Traversal
Grafana version 8.2.6 contains an unauthenticated plugin asset path traversal vulnerability. A proof of concept request demonstrates reading files accessible to the Grafana server. https://packetstorm.news/download/235012...
Apache HTTP Server 2.4.50 Path Traversal
Apache HTTP Server version 2.4.50 contains a path traversal vulnerability that may disclose files outside the document root and, with CGI enabled, permit command execution. This archive provides a deliberately vulnerable Docker environment and proof of concept requests...
Node.js 8.5.0 Path Traversal
Node.js version 8.5.0 contains a path traversal vulnerability in path normalization that allows an Express static-file server to disclose files outside its static directory. https://packetstorm.news/download/234994...
Ruby on Rails 5.0.7 Sprockets Path Traversal
Ruby on Rails version 5.0.7 with Sprockets 3.7.1 contains a path traversal vulnerability that permits reading files outside allowed asset paths. The proof of concept demonstrates the issue. https://packetstorm.news/download/234984...
uWSGI 2.0.16 PHP Plugin Path Traversal
uWSGI version 2.0.16 PHP plugin contains a path traversal vulnerability that permits reading files outside the configured document root through URL-encoded ../ sequences. This proof of concept provides a vulnerable Docker environment and request example. https://packetstorm.news/download/234966...
CVE-2026-75345
OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service...
EUVD-2026-95903
OpENer v2.3.0 / commit 76b95cf contains an out-of-bounds read in the unconnected explicit messaging path. This allows a remote attacker to cause a denial of service...
CVE-2026-75351
OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...
CVE-2026-75352
The OpENer v2.3/commit 76b95cf software is affected by an integer underflow vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . A remote attacker can exploit this flaw by sending specially crafted network requests, which can cause the service to crash and result ...