1034 matches found
EUVD-2026-114862
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Crocoblock JetFormBuilder jetformbuilder allows Path Traversal.This issue affects JetFormBuilder: from n/a through 3.6.7.1...
EUVD-2026-112214
An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the...
CVE-2026-105457
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132...
EUVD-2026-111851
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132...
CVE-2026-105457
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132...
PT-2026-128048
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in HAVELSAN Inc. Liman MYS allows Path Traversal. This issue affects Liman MYS: before 2.3.5-1132...
PT-2026-128283
An Improper Limitation of a Pathname to a Restricted Directory vulnerability in ConfigDirector in Juniper Networks Session Smart Router and Session Smart Conductor allows an authenticated REST user to read, overwrite, or delete arbitrary certificate and key files on the host filesystem via the...
CVE-2026-116690: Improper Limitation of a Pathname to a Restricted Directory
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From 3.10.0 until 3.17.0, the prompt branch in createmodelversion accepts schemeless relative sources because path validation runs only when a source has a URL scheme, and...
CVE-2026-105947
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...
EUVD-2026-109783
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...
PT-2026-123284
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Innotim Software, Telecommunications, and Consulting Co. Ltd. Logsign SIEM allows Path Traversal. This issue affects Logsign SIEM: from 6.4.120 before 6.4.122...
CLSA-2026-1792766755 rsync: Fix of CVE-2026-53802
CVE-2026-53783: harden the support/rrsync wrapper: refuse paths that resolve outside the restricted directory, refuse -L/-k/-K and --copy-unsafe-links there, hand the transfer arguments and the receiver's directory options to rsync as held directories, stop path arguments being parsed as options,...
CLSA-2026-1792659934 rsync: Fix of CVE-2026-53783
CVE-2026-53783: fix a TOCTOU escape from rrsync's restricted directory by replacing the lexical-only Perl support/rrsync with upstream's Python one, which pins each validated path component through /proc/self/fd, fails closed on path anomalies, pins the receiver option directories a peer can...
CLSA-2026-1792576195 Fix CVE(s): CVE-2026-53783
SECURITY UPDATE: rrsync restricted directory escape via symlinks - debian/patches/CVE-2026-53783.patch: replace the Perl rrsync with upstream's path-pinning python3 rrsync without the 3.2.4 single-run lock, add receiver-only --drop-D - debian/control: depend on python3 for /usr/bin/rrsync -...
PT-2026-120615
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bold Grid weForms weforms allows Path Traversal.This issue affects weForms: from n/a through 1.6.28...
CVE-2026-85114: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API All versions V3.3.61. Affected applications do not properly validate filenames received from remote servers during ticket downloads. This could allow an attacker who can manipulate the ticket response to write...
PT-2026-111783
Name of the Vulnerable Software and Affected Versions FortiSIEM versions 7.0.0 through 7.0.4 FortiSIEM versions 7.1.0 through 7.1.9 FortiSIEM versions 7.2.0 through 7.2.7 FortiSIEM versions 7.3.0 through 7.3.5 FortiSIEM versions 7.4.0 through 7.4.2 FortiSIEM version 7.5.0 Description An...
CLSA-2026-1791480690 Fix CVE(s): CVE-2026-53783
SECURITY UPDATE: rrsync restricted-directory escape - debian/patches/CVE-2026-53783.patch: replace the Perl rrsync with upstream's hardened Python one and add the --drop-D option it passes - debian/control: add python3 to Build-Depends for the new test - CVE-2026-53783...