863 matches found
CVE-2026-80130
CVE-2026-80130 affects Dell Secure Connect Gateway (SCG) 5.0 , specifically the Appliance (versions prior to 5.36.00.16 ) and the Application (versions prior to 5.36.00.00 ). The root cause is a Relative Path Traversal vulnerability that allows a low-privileged attacker with remote access to achi...
CVE-2026-80133
Dell Secure Connect Gateway (SCG) 5.0 Appliance versions prior to 5.36.00.16 and Application versions prior to 5.36.00.00 are affected by a Relative Path Traversal vulnerability. An unauthenticated attacker with remote network access could potentially exploit this flaw to achieve remote code exec...
CVE-2025-64446-PoC---FortiWeb-Path-Traversal
CVE-2025-64446 PoC - FortiWeb Path Traversal Description Proof of Concept for the relative path traversal vulnerability in Fortinet FortiWeb CVE-2025-64446 that allows execution of administrative commands. Technical Details CVE: CVE-2025-64446 CVSS: 9.8 CRITICAL AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:...
PT-2026-86760
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Relative Path Traversal vulnerability. An unauthenticated attacker with remote access could potentially exploit this vulnerability, leading to remote execution...
fortinet-fortiweb-cve-2025-64446-58034
Comprendiendo las vulnerabilidades de Fortinet FortiWeb CVE-2025-64446, CVE-2025-58034 1. Resumen Fortinet FortiWeb es un dispositivo Web Application Firewall WAF ampliamente implementado en los sistemas empresariales para proteger las aplicaciones web frente a amenazas comunes. Dado que FortiWeb...
Astra Linux – Vulnerability in Tomcat9
Apache Tomcat has a Relative Path Traversal vulnerability. The fix for bug 60013 introduced a regression where the rewritten URL was normalized before it was decoded. This created the possibility that, for rewrite rules that modify query parameters into the URL, an attacker could manipulate the...
CVE-2026-78212 4MOSAn Security Technology|4MOSAn Management Center - Arbitrary File Read
4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files...
CVE-2026-78212
4MOSAn (4MOSAn Management Center) by 4MOSAn Security Technology Co., Ltd. is affected by an Arbitrary File Read vulnerability caused by a Relative Path Traversal flaw. An unauthenticated remote attacker can exploit this to download arbitrary system files from the affected instance, resulting in a...
EUVD-2026-64708
4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit a Relative Path Traversal flaw to download arbitrary system files...
Kibana 8.x < 8.19.17 / 9.0.x < 9.3.6 / 9.4.x < 9.4.3 Vulnerability (ESA-2026-94)
The version of Kibana installed on the remote host is 8.x prior to 8.19.17, 9.0.x prior to 9.3.6, or 9.4.x prior to 9.4.3. It is, therefore, affected by a vulnerability as referenced in the ESA-2026-94 advisory. - Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of...
CVE-2026-72677
Kibana Fleet is affected by a Relative Path Traversal (CWE-23) that can enable unauthorized deletion of Kibana resources. The issue arises from accepting a user-supplied Fleet Server host configuration identifier without rejecting relative traversal sequences; the identifier is stored as provided...
CVE-2026-72677 Relative Path Traversal in Kibana Fleet Leading to Unauthorized Deletion of Users and Other Resources
Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...
EUVD-2026-58264
Relative Path Traversal CWE-23 in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path Traversal CAPEC-139. Kibana Fleet accepted a user-supplied identifier for a Fleet Server host configuration without rejecting relative traversal sequences. The identifier is stored...
CVE-2026-21082
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
EUVD-2026-55107
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-21082
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-21082
Relative path traversal in Samsung Health prior to version 7.0.0 allows local attackers to access sensitive information...
CVE-2026-21082
The CVE-2026-21082 entry identifies a relative path traversal vulnerability in Samsung Health prior to version 7.0.0, allowing local attackers to access sensitive information. Affected software: Samsung Health (pre-7.0.0). Root cause: relative path traversal. Impact: confidentiality of data may b...
EUVD-2026-54475
Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A low privileged attacker with remote access could potentially exploit this vulnerability, leading to Filesystem access for attacker...
CVE-2026-66881
Relative Path Traversal vulnerability in livebook-dev livebook allows an attacker-authored notebook to write a file with attacker-controlled content to an arbitrary path. A .livemd notebook can declare fileentries metadata, each entry carrying a name. Every path that creates a file entry through...