159 matches found
CVE-2026-76479
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...
EUVD-2026-107346
As part of Cisco's ongoing commitment to proactive security and product quality, engineering teams for Cisco Emergency Responder, Cisco Prime Collaboration Deployment, Cisco Unified Communications Manager Unified CM, Cisco Unified Communications Manager IM & Presence Service Unified CM IM&P, Cisc...
CVE-2026-40805: Improper Limitation of a Pathname to a Restricted Directory
Subscriber Arbitrary File Deletion in PeepSo = 9.0.5.4 versions...
EUVD-2026-95336
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...
CVE-2026-82900
IBM Guardium Data Protection versions 12.1 and 12.2.2 are vulnerable to a remote attack that allows for the deletion of arbitrary files . This issue is caused by the improper limitation of a pathname to a restricted directory (CWE-22). While the vulnerability poses a risk to data integrity and av...
CVE-2026-82900 IBM Guardium Data Protection is affected by multiple vulnerabilities.
IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory...
EUVD-2026-94130
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...
CVE-2026-93448
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...
CVE-2026-103360
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...
CVE-2026-93448
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...
CVE-2026-93448 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...
EUVD-2026-94111
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...
CVE-2026-93448
IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a vulnerability that allows a remote authenticated attacker to obtain sensitive information . This is caused by an improper limitation of a pathname to a restricted directory (CWE-22). No specific remediation or exploit details are pr...
PT-2026-107321
Name of the Vulnerable Software and Affected Versions IBM Langflow OSS versions 1.0.0 through 1.12.2 Description A remote authenticated attacker can obtain sensitive information because the software does not properly limit pathnames to a restricted directory, leading to a path traversal issue...
CVE-2026-103870: Improper Limitation of a Pathname to a Restricted Directory
A flaw was found in pulp-rpm when it publishes a distribution tree. Addon and variant ids from .treeinfo are used as directory names. A user who can sync or upload that tree can make the publish task create a new directory outside the task work area and write that tree's repository metadata and...
CVE-2026-103360 Langflow OSS is affected by multiple vulnerabilities
IBM Langflow OSS 1.0.0 through 1.12.2 could allow a remote authenticated attacker to obtain sensitive information due to improper limitation of a pathname to a restricted directory...
CVE-2026-103360
IBM Langflow OSS versions 1.0.0 through 1.12.2 are affected by a Path Traversal vulnerability (CWE-22 ). A remote authenticated attacker can exploit the improper limitation of a pathname to a restricted directory to obtain sensitive information . To remediate this issue, IBM strongly recommends u...
CVE-2026-106496: Improper Limitation of a Pathname to a Restricted Directory
Backstage is an open framework for building developer portals. Prior to 3.9.1, the @backstage/plugin-catalog-backend package is affected by inconsistent enforcement of allowed location types during catalog processing. Under certain configurations, the catalog backend could process location types...
CVE-2026-63266: Improper Limitation of a Pathname to a Restricted Directory
LibreOffice Calc can link a cell range to an external data source, and the link is saved in the document. Through such a link a document could open an embedded Firebird database that wrote a file to any location the user could write to. In fixed versions an embedded Firebird database can open or...