147878 matches found
CVE-2026-91789
Foxit PDF Editor/Reader contains a vulnerability within its U3D/GIF texture decoding path caused by insufficient validation of image dimensions and related size information. This oversight can lead to an incorrectly sized memory allocation , which may trigger an out-of-bounds write during pixel p...
CVE-2026-19438
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...
EUVD-2026-85035
The Directorist: AI-Powered Business Directory, Listings & Classified Ads WordPress plugin before 8.9.5 does not properly verify a listing's ownership before deleting it, allowing authenticated attackers with Subscriber-level access and above to delete arbitrary listings, including ones belonging...
Exploit for CVE-2026-87902
CVE-2026-87902 / GHSA-7hp8-65ch-5whp — WordPress getpagetem...
CVE-2026-19438 Mint Workbench I Path traversal Vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...
EUVD-2026-85017
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...
CVE-2026-19438 Mint Workbench I Path traversal Vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ABB Mint Workbench I. This issue affects Mint Workbench I: through 5876...
CVE-2026-19438
ABB Mint Workbench I is vulnerable to a Path Traversal vulnerability (Improper Limitation of a Pathname to a Restricted Directory). This issue affects versions through 5876 . The vulnerability allows for unauthorized access to files or directories outside of the intended restricted scope. No spec...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution
A flaw was found in net/url, a component of golang. This vulnerability arises when resolving relative paths that contain numerous parent directory '..' segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory...
Exploit for CVE-2026-87902
CVE-2026-87902-A-working-PoC-for-WordPress-s-critical-path-tra...
MGASA-2026-0435 Updated cpio packages fix security vulnerabilities
Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...
Updated cpio packages fix security vulnerabilities
Path Traversal in GNU cpio. CVE-2026-66484 Uncontrolled Memory Allocation in GNU cpio. CVE-2026-66485 Improper Output Encoding in GNU cpio. CVE-2026-66486...
EUVD-2026-84950
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote authenticated attacker to modify server files due to path traversal...
EUVD-2026-84956
IBM Financial Transaction Manager FTM for RedHat OpenShift could allow a remote attacker to read arbitrary files due to improper path canonicalization...
SUSE CVE-2026-93709
Dancer2 versions before 2.2.0 for Perl serve a layout as a page when an equivalent spelling of its path misses the guard in the AutoPage handler. The handler compares the request path against the layout directory name as text, while the lookup that follows canonicalises it. A doubled slash, a dot...
SUSE CVE-2026-93712
Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside publicdir via relative path segments in the File route handler. The handler joins the request path onto publicdir without collapsing relative segments, and checks only that the result is a readable regular file. A request...
SUSE CVE-2026-93986
rclone before 1.75.1 fails to confine names from server and third-party listing responses to the listed directory, allowing path traversal sequences in object names. Attackers can craft special names containing forward slashes and parent directory references to potentially write outside the...
HP Advance / Output Central Authentication Bypass / File Write
HP Advance and HP Output Central contain multiple vulnerabilities in the Drivve SecureScan and MFPsecure components. Remote unauthenticated attackers can exploit archive path traversal to write arbitrary files and achieve SYSTEM code execution, forge an HTTP header to bypass a local-only...
PT-2026-97639
Name of the Vulnerable Software and Affected Versions Luxion KeyShot affected versions not specified Description An uncontrolled search path element during the parsing of BIP files allows for remote code execution. This occurs when the application searches for required files in an insecure manner...