17 matches found
Huawei HarmonyOS Denial-of-Service Vulnerability
Huawei HarmonyOS is a distributed operating system developed independently by Huawei, designed for various scenarios. Huawei HarmonyOS has a denial-of-service vulnerability. This vulnerability stems from issues with the preview service module, which can affect the availability of services when...
CVE-2026-88790
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...
CVE-2026-88790 proma-ai Proma File Preview Service file-preview-service.ts resolveTargetPath path traversal
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...
EUVD-2026-75507
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...
CVE-2026-88790
proma-ai Proma versions up to 0.19.37 contain a path traversal vulnerability in the File Preview Service component, specifically in the resolveTargetPath function within apps/electron/src/main/lib/file-preview-service.ts. The root cause is a basename-collision fallback that allows an attacker to ...
CVE-2026-88790 proma-ai Proma File Preview Service file-preview-service.ts resolveTargetPath path traversal
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...
CVE-2026-88790 proma-ai Proma File Preview Service file-preview-service.ts resolveTargetPath path traversal
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...
PT-2026-89423
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument file path leads to path traversal. Local...
CVE-2026-88790: Improper Limitation of a Pathname to a Restricted Directory
A security vulnerability has been detected in proma-ai Proma up to 0.19.37. Affected is the function resolveTargetPath of the file apps/electron/src/main/lib/file-preview-service.ts of the component File Preview Service. Such manipulation of the argument filepath leads to path traversal. Local...
CVE-2026-81644
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-81644
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...
EUVD-2026-74599
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-81644
CVE-2026-81644 is a Denial of Service vulnerability in the preview service module , with impact limited to availability . The CVSS 3.1 score is 4.3 (MEDIUM) with vector AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L, indicating a network-reachable, low-complexity attack that requires user interaction and no...
CVE-2026-81644
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...
PT-2026-88801
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2026-81644: Undefined Security Weakness
DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability...
CVE-2025-0639 Allocation of Resources Without Limits or Throttling in GitLab
An issue has been discovered affecting service availability via issue preview in GitLab CE/EE affecting all versions from 16.7 before 17.9.7, 17.10 before 17.10.5, and 17.11 before 17.11.1...