Lucene search
+L

109076 matches found

NVD
NVD
added 2026/07/30 6:25 a.m.10 views

CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

5.3CVSS0.00357EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/30 6:25 a.m.6 views

UBUNTU-CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

5.3CVSS5.7AI score0.00357EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/30 5:41 a.m.18 views

CVE-2026-16531

CVE-2026-16531 affects PCP’s pmproxy logger servlet, where a crafted hostname enables path traversal leading to arbitrary file and directory creation and potential DoS. Root cause is unauthenticated remote exploitation of the logger servlet via crafted hostnames. The Red Hat mitigation recommends...

5.3CVSS6AI score0.00357EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/07/30 5:41 a.m.44 views

CVE-2026-16531 Pcp: pcp: arbitrary file creation via path traversal in pmproxy logger servlet

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

5.3CVSS0.00357EPSS
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/07/30 5:41 a.m.8 views

CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

5.3CVSS6AI score0.00357EPSS
SaveExploits0
EUVD
EUVD
added 2026/07/30 5:41 a.m.10 views

EUVD-2026-50980

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service...

5.3CVSS6AI score0.00357EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/07/30 5:30 a.m.7 views

CVE-2026-16531

An unauthenticated remote attacker can exploit a path traversal vulnerability in the PCP pmproxy logger servlet using a crafted hostname. This allows arbitrary file and directory creation, potentially leading to a denial of service. Mitigation To mitigate this issue, restrict network access to TC...

5.3CVSS6AI score0.00357EPSS
SaveExploits0References3
NVD
NVD
added 2026/07/30 5:16 a.m.10 views

CVE-2026-67247

A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...

7.1CVSS0.00302EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/30 5:16 a.m.10 views

CVE-2026-67245

A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an...

8.1CVSS0.00215EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/30 5:16 a.m.11 views

CVE-2026-67246

A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated before being used for file access. An authenticated attacker can exploit this issue to access or manipulate files outside...

6.9CVSS0.00307EPSS
SaveExploits0References1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/30 4:49 a.m.5 views

Security Bulletin: IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings (CVE-2026-14522 & CVE-2026-14519)

Summary IBM App Connect Enterprise is vulnerable to an arbitrary file read and arbitrary changes to configuration settings. Vulnerability Details CVEID:CVE-2026-14522 DESCRIPTION: IBM App Connect Enterprise could allow a remote attacker to execute arbitrary commands due to improper neutralization...

9.8CVSS6.2AI score0.01016EPSS
SaveExploits0Affected Software1
IBM Security Bulletins
IBM Security Bulletins
added 2026/07/30 4:43 a.m.5 views

Security Bulletin: IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability (CVE-2026-15435)

Summary IBM App Connect Enterprise is vulnerable to arbitrary file write vulnerability. Vulnerability Details CVEID:CVE-2026-15435 DESCRIPTION: IBM App Connect Enterprise could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request...

9.8CVSS6AI score0.00734EPSS
SaveExploits0Affected Software1
Vulnrichment
Vulnrichment
added 2026/07/30 3:42 a.m.11 views

CVE-2026-67247 A path traversal vulnerability was found in the IHM Log handling of ADM

A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...

7.1CVSS5.8AI score0.00302EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 3:42 a.m.10 views

EUVD-2026-50964

A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...

7.1CVSS5.8AI score0.00302EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/30 3:42 a.m.21 views

CVE-2026-67247

CVE-2026-67247 describes a path traversal vulnerability in ADM’s IHM Log handling where user-controlled disk serial input is not sufficiently validated before being used to construct the path to an IHM log database file. An authenticated attacker could access an unintended filesystem path or log ...

7.1CVSS5.8AI score0.00302EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2026/07/30 3:42 a.m.50 views

CVE-2026-67247 A path traversal vulnerability was found in the IHM Log handling of ADM

A path traversal vulnerability was found in the IHM Log handling of ADM. The vulnerability occurs because user-controlled disk serial input is not sufficiently validated before being used to construct the path of an IHM log database file. An authenticated attacker can exploit this issue to cause...

7.1CVSS0.00302EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/07/30 3:33 a.m.10 views

EUVD-2026-50963

A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated before being used for file access. An authenticated attacker can exploit this issue to access or manipulate files outside...

6.9CVSS5.8AI score0.00307EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2026/07/30 3:33 a.m.49 views

CVE-2026-67246 A path traversal vulnerability was found in the Wallpaper component of ADM

A path traversal vulnerability was found in the Wallpaper component of ADM. The vulnerability occurs because user-controlled wallpaper path input is not sufficiently validated before being used for file access. An authenticated attacker can exploit this issue to access or manipulate files outside...

6.9CVSS0.00307EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/30 3:33 a.m.21 views

CVE-2026-67246

CVE-2026-67246 is a path traversal vulnerability in the Wallpaper component of ADM. Authenticated users can supply a crafted wallpaper path input that is not sufficiently validated before file access, allowing access to or manipulation of files outside the intended wallpaper directory, constraine...

6.9CVSS5.8AI score0.00307EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/30 3:29 a.m.11 views

EUVD-2026-50962

A path traversal vulnerability was found in the VPN Clients on the ADM. The vulnerability occurs because user-controlled certificate name input is not sufficiently validated before being used to construct the upload destination path. An authenticated attacker can exploit this issue to write an...

7CVSS5.8AI score0.00215EPSS
SaveExploits0References1
Rows per page
Query Builder