434 matches found
CVE-2026-21878 BACnet Stack Improperly Limits Pathnames to a Restricted Directory
BACnet Stack is a BACnet open source protocol stack C library for embedded systems. Prior to 1.5.0.rc3, a vulnerability has been discovered in BACnet Stack's file writing functionality where there is no validation of user-provided file paths, allowing attackers to write files to arbitrary...
Container and Containerization archive extraction does not guard against escapes from extraction base directory.
Summary The ArchiveReader.extractContents function used by cctl image load and container image load performs no pathname validation before extracting an archive member. This means that a carelessly or maliciously constructed archive can extract a file into any user-writable location on the system...
Unity Linux 20.1060a / 20.1070a Security Update: kernel (UTSA-2026-002691)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-002691 advisory. The ecryptfsprivilegedopen function in fs/ecryptfs/kthread.c in the Linux kernel before 4.6.3 allows local users to gain privileges or cause a denial of service stac...
CVE-1999-0313
diskbandwidth on SGI IRIX 6.4 S2MP for Origin/Onyx2 allows local users to gain root access using relative pathnames...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-992397)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-992397 advisory. In the Linux kernel, the following vulnerability has been resolved: udf: Fix uninitialized array access for some pathnames For filenames that begin with . and are...
The vulnerability of the Microsoft Office suite arises from errors in processing relative pathnames to the directory, allowing an attacker to execute arbitrary code.
The vulnerability of the Microsoft Office package is related to errors in processing the relative path to the directory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...
The vulnerability of SonicWall Email Security’s email security software, related to errors in the mechanism for processing relative pathnames to the catalog, allows attackers to gain unauthorized access to protected information.
The vulnerability of SonicWall Email Security’s email security software lies in errors in the mechanism for processing relative pathnames to the catalog. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...
WordPress plugin WP Pipes 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A path travers...
WordPress plugin taskbot 路径遍历漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin. A path travers...
EUVD-2002-1030
Malware in sbrugna...
EUVD-2014-0254
Malware in sbrugna...
EUVD-2016-0339
Malware in sbrugna...
EUVD-2011-4593
Malware in sbrugna...
EUVD-2007-2445
Malware in sbrugna...
EUVD-2004-0303
Malware in sbrugna...
EUVD-2002-0968
Malware in sbrugna...
EUVD-2009-0940
Malware in sbrugna...
EUVD-2003-0622
Malware in sbrugna...