CVE-2026-65012

CVE-2026-65012 affects InvokeAI prior to 6.13.7. An unauthenticated vulnerability in GET /api/v2/models/scan_folder allows attacker-controlled scan_path to recursively enumerate arbitrary server filesystem directories, revealing existence/readability via HTTP response codes and bypassing multi-us...

Linux Distros Unpatched Vulnerability : CVE-2021-32056

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Cyrus IMAP before 3.2.7, and 3.3.x and 3.4.x before 3.4.1, allows remote authenticated users to bypass intended access restrictions on server annotations and...

CVE-2015-0550: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in EMC Documentum Thumbnail Server 6.7SP1 before P32, 6.7SP2 before P25, 7.0 before P19, 7.1 before P16, and 7.2 before P01 allows remote attackers to bypass intended Content Server access restrictions via unspecified vectors...