Lucene search
+L

108726 matches found

Cvelist
Cvelist
added 2026/07/29 12:58 p.m.44 views

CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

6.9CVSS0.0033EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
added 2026/07/29 12:58 p.m.7 views

CVE-2026-44943 remote limited file-write as root via discovery in open-iscsi

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in open-iscsi allows remote MITM attackers to create root-owned files outside the database and inject lines into the record. This issue affects open-iscsi: from through...

6.9CVSS5.9AI score0.0033EPSS
SaveExploits0References2
RedhatCVE
RedhatCVE
added 2026/07/29 11:19 a.m.11 views

CVE-2026-29509

A flaw was found in Patool. A remote attacker could exploit a path traversal vulnerability in the safeextract function by providing a specially crafted archive. This vulnerability arises because a helper function uses an insecure comparison method, allowing malicious paths to bypass security...

5.4CVSS5.9AI score0.00282EPSS
SaveExploits0References6
NVD
NVD
added 2026/07/29 11:16 a.m.8 views

CVE-2026-56390

GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing...

4.6CVSS0.00133EPSS
SaveExploits0References3
RedhatCVE
RedhatCVE
added 2026/07/29 11:14 a.m.5 views

CVE-2026-64400

A flaw was found in the Linux kernel's ksmbd component. A vulnerability in the ksmbd component allows a remote authenticated attacker to bypass path restrictions. Specifically, a bug in the caseless retry logic during path resolution fails to properly handle directory traversal attempts. This...

8.6CVSS5.9AI score0.00357EPSS
SaveExploits0References4
GithubExploit
GithubExploit
added 2026/07/29 10:23 a.m.46 views

Exploit for CVE-2026-52832

CVE-2026-52832-PoC-exploit-nuclei-dashboard Nuclio Dashboard...

6AI score
SaveExploits2
GithubExploit
GithubExploit
added 2026/07/29 10:23 a.m.42 views

Exploit for CVE-2026-52832

CVE-2026-52832-PoC-exploit-nuclio-dashboard Nuclio Dashboard...

6AI score
SaveExploits2
NVD
NVD
added 2026/07/29 10:16 a.m.8 views

CVE-2026-58177

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

9.8CVSS0.00547EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/29 9:40 a.m.7 views

CVE-2026-56390

GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing...

6.8CVSS5.9AI score0.00154EPSS
SaveExploits0References4Affected Software1
Cvelist
Cvelist
added 2026/07/29 9:40 a.m.29 views

CVE-2026-56390 Arbitrary Output Location Change in GNU Bison

GNU Bison improperly handles grammar‑defined output paths. Grammar directives such as %output and %header allow specifying file paths, which are accepted without restriction and override caller‑supplied output options. When processing attacker-supplied grammar, this behavior allows directing...

4.6CVSS0.00133EPSS
SaveExploits0References3
CVE
CVE
added 2026/07/29 9:40 a.m.15 views

CVE-2026-56390

GNU Bison is affected by CVE-2026-56390 through grammar-defined output directives (%output, %header), which can accept unrestricted file paths and override caller-supplied output options. When processing attacker-supplied grammar, this allows writing generated files to arbitrary writable location...

4.6CVSS5.9AI score0.00133EPSS
SaveExploits0References3
OSV
OSV
added 2026/07/29 8:42 a.m.5 views

CVE-2026-58177 Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

8.3CVSS5.4AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/07/29 8:42 a.m.5 views

CVE-2026-58177 Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

8.3CVSS5.8AI score0.00547EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2026/07/29 8:42 a.m.8 views

CVE-2026-58177

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

8.3CVSS5.8AI score0.00547EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/29 8:42 a.m.29 views

CVE-2026-58177 Apache Traffic Server: Memory-safety and path-traversal errors in the Cripts framework

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

8.3CVSS0.00547EPSS
SaveExploits0References1
CVE
CVE
added 2026/07/29 8:42 a.m.20 views

CVE-2026-58177

The CVE-2026-58177 entry describes memory-safety issues in the Apache Traffic Server Cripts framework, including out-of-bounds writes, path traversal, and use-after-free errors affecting 10.0.0–10.1.3. The issue is mitigated by upgrading to version 10.1.4, which fixes the vulnerability. The conne...

9.8CVSS5.8AI score0.00547EPSS
SaveExploits0References1Affected Software1
EUVD
EUVD
added 2026/07/29 8:42 a.m.6 views

EUVD-2026-50222

The Apache Traffic Server Cripts framework has out-of-bounds writes, path traversal, and use-after-free errors. This issue affects Apache Traffic Server: from 10.0.0 through 10.1.3. Users are recommended to upgrade to version 10.1.4, which fix the issue...

8.3CVSS5.8AI score0.00547EPSS
SaveExploits0References1
NVD
NVD
added 2026/07/29 8:16 a.m.4 views

CVE-2026-18192

VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS0.0038EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/29 8:10 a.m.2 views

SUSE-SU-2026:22978-1 Security update for openssh

This update for openssh fixes the following issues: - CVE-2026-59995: sftp: location of downloaded files not properly constrained when sftp server:/path . is used with an attacker-controlled server bsc1271044. - CVE-2026-59996: scp: file placed in the parent directory of an intended target...

9.4CVSS5.5AI score0.00441EPSS
SaveExploits0References17
ATTACKERKB
ATTACKERKB
added 2026/07/29 6:40 a.m.8 views

CVE-2026-18192

VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit Relative Path Traversal to download arbitrary system files...

7.1CVSS6AI score0.0038EPSS
SaveExploits0References3
Rows per page
Query Builder