142593 matches found
CVE-2026-78249
A path traversal vulnerability exists in the web management interface of multiple Multifunction Devices and Printers , including Apeos C4571 (version 1.1.3 and earlier) and Apeos C3567 (version 1.1.3). The root cause is the insecure handling of externally supplied parameters , which may allow a s...
Unauthenticated Arbitrary File Disclosure
org.apache.wicket, wicket-core is vulnerable to an unauthenticated arbitrary file disclosure. The vulnerability is due to improper validation of attacker-controlled locale, style, and variation URL attributes before they are appended to the resource path, which allows an attacker to use path...
CVE-2025-41753
The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the...
Path Traversal
Apache Ivy is vulnerable to Path Traversal. The vulnerability is due to insufficient validation of module coordinates in the PackagerResolver, where the calculated subdirectory path based on coordinates such as organisation, name, or version is concatenated with the buildRoot directory and an...
EUVD-2025-211020
The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the...
CVE-2025-41753 Path traversal in dynamically created BACnet File Objects
The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the...
CVE-2025-41753
A path traversal vulnerability exists in dynamically created BACnet File Objects . The system fails to perform sufficient validation on the object name, which is interpreted as a file path. This allows an unauthenticated remote attacker to use relative paths to traverse outside the intended direc...
CVE-2025-41753 Path traversal in dynamically created BACnet File Objects
The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation. Because relative paths are not limited to the intended directory, an unauthenticated remote attacker can traverse outside of it and read or overwrite arbitrary files on the...
CLEANSTART-2026-NW20382 If the PATH environment variable contains paths which are executables (rather than just directories), passing certain strings to LookPath ("", "
Security vulnerability affects the cri-tools package. If the PATH environment variable contains paths which are executables rather than just directories, passing certain strings to LookPath "", "...
CVE-2026-82824
Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0...
CVE-2026-76147
A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...
EUVD-2026-90495
Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0...
CVE-2026-82824 Path traversal may allow arbitrary files to be viewed, created, modified, or deleted
Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0...
CVE-2026-82824 Path traversal may allow arbitrary files to be viewed, created, modified, or deleted
Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue affects Hitachi Coding Software Suite: through 3.3.0...
CVE-2026-82824
The Hitachi Coding Software Suite (versions through 3.3.0 ) is vulnerable to a Path Traversal vulnerability. This flaw allows an attacker to perform unauthorized actions on the file system, including accessing, creating, modifying, or deleting files . The vulnerability is rated as CRITICAL with a...
CVE-2026-76147
A path traversal (ZIP Slip) vulnerability exists in the agent upgrade feature of Genian NAC/ZTNA . The root cause is insufficient authorization and integrity verification , which allows a remote attacker to achieve remote code execution . No specific patch versions or exploit links are provided i...
EUVD-2026-90489
A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...
CVE-2026-76147 Genians, Inc Genian NAC/ZTNA Remote Code Execution
A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...
CVE-2026-76147 Genians, Inc Genian NAC/ZTNA Remote Code Execution
A path traversal ZIP Slip vulnerability caused by insufficient authorization and integrity verification in the agent upgrade feature of Genian NAC/ZTNA allows a remote attacker to execute arbitrary code...
CVE-2026-103533
A vulnerability was found in David-Crty databasement up to 1.7.1. This impacts the function https:/github.com/David-Crty/databasement/pull/511 of the file app/Http/Requests/Api/V1/RestoreRequest.php of the component database-servers API Endpoint. The manipulation of the argument schemaname result...