7406 matches found
PT-2025-36692
Name of the Vulnerable Software and Affected Versions: TYPO3 CMS versions 9.0.0 through 9.5.54 TYPO3 CMS versions 10.0.0 through 10.4.53 TYPO3 CMS versions 11.0.0 through 11.5.47 TYPO3 CMS versions 12.0.0 through 12.4.36 TYPO3 CMS versions 13.0.0 through 13.4.17 Description: The File Abstraction...
CVE-2025-9065: Externally Controlled Reference to a Resource in Another Sphere
A server-side request forgery security issue exists within Rockwell Automation ThinManager® software due to the lack of input sanitization. Authenticated attackers can exploit this vulnerability by specifying external SMB paths, exposing the ThinServer® service account NTLM hash...
NVIDIA NVDebug path traversal vulnerability
NVIDIA NVDebug is a debugging and diagnostic tool from NVIDIA Corporation. NVIDIA NVDebug suffers from a path traversal vulnerability that originates from the ability to potentially cause a file to be written to a restricted component, which could lead to information disclosure, denial of service...
PT-2025-36729
Name of the Vulnerable Software and Affected Versions: Rockwell Automation ThinManager® affected versions not specified Description: A server-side request forgery issue exists in Rockwell Automation ThinManager® software due to insufficient input sanitization. Authenticated attackers can exploit...
Salt Path Traversal
The vulnerability of configuration management systems and remote execution of operations related to Salt is related to incorrect restrictions on the path to the restricted access catalog. Exploiting this vulnerability can allow an attacker to gain read and modify access to data...
Insecure parsing of Windows paths with a \??\ prefix in path/filepath
...
block: fix race between set_blocksize and read paths
...
Unexpected paths returned from LookPath in os/exec
...
smb: prevent use-after-free due to open_cached_dir error paths
...
x86/fred: Clear WFE in missing-ENDBRANCH #CPs
...
Linux Distros Unpatched Vulnerability : CVE-2013-1831
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - lib/setuplib.php in Moodle through 2.1.10, 2.2.x before 2.2.8, 2.3.x before 2.3.5, and 2.4.x before 2.4.2 allows remote attackers to obtain sensitive informatio...
GHSA-9GH8-9R95-3FC3 MobSF Vulnerable to Arbitrary File Write (AR-Slip) via Absolute Path in .a Extraction
Summary The vulnerability allows any user to overwrite any files available under the account privileges of the running process. Details As part of static analysis, iOS MobSF supports loading and parsing statically linked libraries .a. When parsing such archives, the code extracts the embedded...
Acronis Cyber Protect Cloud Agent Privilege Escalation
The vulnerability of the multi-functional security agent and the backup copy of Acronis Cyber Protect Cloud Agent is related to the absence of quotation marks in the wording of certain elements or search paths. Exploiting this vulnerability can allow attackers to enhance their privileges...
Linenoise security vulnerabilities
Linenoise is an application by the individual developer Salvatore Sanfilippo. A security vulnerability exists in Linenoise that stems from a competing condition on history paths that could lead to arbitrary file overwrites and permission changes...
Linux Distros Unpatched Vulnerability : CVE-2025-27837
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Artifex Ghostscript before 10.05.0. Access to arbitrary files can occur through a truncated path with invalid UTF-8 characters, for...
O2OA security vulnerabilities
O2OA is an enterprise application development platform from O2OA open source. A security vulnerability exists in O2OA 10.0-410 and earlier versions, which originates from a cross-site scripting error in the parameter name/shortName/distinguishedName/pinyin/ in the file...
CVE-2025-30041
The paths "/cgi-bin/CliniNET.prd/utils/userlogstat.pl", "/cgi-bin/CliniNET.prd/utils/usrlogstat.pl", and "/cgi-bin/CliniNET.prd/utils/dblogstat.pl" expose data containing session IDs...
Linux Distros Unpatched Vulnerability : CVE-2020-11739
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An issue was discovered in Xen through 4.13.x, allowing guest OS users to cause a denial of service or possibly gain privileges because of missing memory barrie...
Linux Distros Unpatched Vulnerability : CVE-2019-17670
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - WordPress before 5.2.4 has a Server Side Request Forgery SSRF vulnerability because Windows paths are mishandled during certain validation of relative URLs...