fortinet-fortiweb-cve-2025-64446-58034

Understanding Fortinet FortiWeb Vulnerabilities CVE-2025-64446, CVE-2025-58034 1. Overview Fortinet FortiWeb is a Web Application Firewall WAF device widely deployed in enterprise systems to protect web applications from common threats. Since FortiWeb typically sits at a central protection layer,...

CVE-2026-41545

A relative path traversal vulnerability has been reported to affect QuMagie. If a remote attacker gains an administrator account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...

CVE-2026-39993

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains a user account, they can then exploit the vulnerability to read the contents of unexpected files or system data. We have already fixed the vulnerability in the following version:...

Cisco Secure Email Gateway 16.0 AMP Arbitrary File Write

Cisco Secure Email Gateway versions 13.0 through 16.0 prior to Content Scanner Tools package 25.3.0.5525 contain a relative path traversal vulnerability in AMP File Reputation attachment handling that allows unauthenticated arbitrary file write...

Security Bulletin: SPSS Collaboration and Deployment Services is affected by an Apache Ant vulnerability that could allow arbitrary file overwrite via malicious FTP/SCP downloads

Summary SPSS Collaboration and Deployment Services is affected by an Apache Ant vulnerability that could allow arbitrary file overwrite via malicious FTP/SCP downloads. This has been addressed in the remediation section. Vulnerability Details CVEID:CVE-2026-78254 DESCRIPTION: The ftp and scp task...

CISA Adds Four Known Exploited Vulnerabilities to Catalog

CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities KEV Catalog, based on evidence of active exploitation. CVE-2026-0322link is external Palo Alto Networks PAN-OS Code Injection Vulnerability CVE-2026-76519link is external Cisco Secure Email Gateway Relative Path...

Cisco Secure Email Gateway Relative Path Traversal Vulnerability

Cisco Secure Email Gateway contains a relative path traversal vulnerability that could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system...

CVE-2026-83873

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-83865

Relative path traversal in Windows Internet wininet.dll allows an authorized attacker to perform tampering locally...

CVE-2026-70222

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

CVE-2026-83923

A relative path traversal vulnerability exists in OpenSSH for Windows , potentially allowing an unauthorized attacker to achieve remote code execution over a network. The vulnerability is categorized under CWE-23 . While the specific component or file is not detailed in the provided documents, th...

CVE-2026-83873

A Relative path traversal vulnerability exists in Windows Shell , which allows an authorized attacker to achieve local privilege escalation . The vulnerability is categorized under CWE-23 . While the documents confirm the existence of the vulnerability and the potential for privilege elevation, s...

CVE-2026-70222

A Relative path traversal vulnerability exists in Windows Shell . This flaw allows an authorized attacker to achieve local privilege elevation . The vulnerability is associated with CWE-23 . No specific exploit information or specific internal component details are provided in the documentation.

Windows libarchive Tampering Vulnerability

Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network...

Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows Internet (wininet.dll) Tampering Vulnerability

Relative path traversal in Windows Internet wininet.dll allows an authorized attacker to perform tampering locally...

Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Microsoft Windows: CVE-2026-83873: Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

PT-2026-112684

Name of the Vulnerable Software and Affected Versions OpenSSH for Windows affected versions not specified Description A relative path traversal issue allows an unauthorized remote attacker to execute arbitrary code over a network, potentially compromising the affected system. Recommendations At t...

Microsoft Windows: CVE-2026-83865: Windows Internet (wininet.dll) Tampering Vulnerability

Relative path traversal in Windows Internet wininet.dll allows an authorized attacker to perform tampering locally...