Lucene search
+L

1164 matches found

Cvelist
Cvelist
added 2026/08/19 9:35 p.m.31 views

CVE-2026-76377 Information Disclosure through Action Parameters in Azure AD Graph app for Splunk SOAR

In versions below 2.5.3 of the Azure AD Graph app for Splunk SOAR, a user who holds a role with permission to run actions could expose a sensitive password by invoking the reset password action, because the action's temppassword parameter is not masked and is shown in cleartext in the user...

4.3CVSS0.00139EPSS
SaveExploits0References1
EUVD
EUVD
added 2026/08/19 7:35 p.m.10 views

EUVD-2026-62741

Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts derive temporary filenames from Math.random and place them in os.tmpdir. On a host with a shared world-writable temporary directory, a local unprivileged attacker...

4.2CVSS5.3AI score0.00122EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/08/19 7:35 p.m.31 views

CVE-2026-55086 Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts derive temporary filenames from Math.random and place them in os.tmpdir. On a host with a shared world-writable temporary directory, a local unprivileged attacker...

4.2CVSS0.00122EPSS
SaveExploits0References4
OSV
OSV
added 2026/08/19 7:35 p.m.8 views

CVE-2026-55086 Etherpad: Import/export use Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

Etherpad is a real-time collaborative editor. Prior to 3.1.0, src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts derive temporary filenames from Math.random and place them in os.tmpdir. On a host with a shared world-writable temporary directory, a local unprivileged attacker...

4.2CVSS5.5AI score
SaveExploits0References6
CVE
CVE
added 2026/08/19 7:35 p.m.32 views

CVE-2026-55086

Etherpad (ep_etherpad-lite) versions prior to 3.1.0 are vulnerable to a symlink-based file overwrite via predictable temporary filenames. The ImportHandler.ts and ExportHandler.ts components derive temp-file paths from Math.random() (~32 bits of entropy), which is predictable within the same Node...

4.2CVSS5.3AI score0.00122EPSS
SaveExploits0References4
CVE
CVE
added 2026/08/15 1:36 p.m.52 views

CVE-2026-19474

The CVE-2026-19474 entry concerns @fastify/multipart, affecting versions 3.0.0 up to but not including 10.1.1. The root cause is that request.saveRequestFiles() can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts; the iterato...

7.5CVSS5.3AI score0.00278EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2026/08/15 1:26 p.m.36 views

CVE-2026-18549 @fastify/multipart vulnerable to Denial of Service via aborted upload after fileSize limit

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

7.5CVSS0.0034EPSS
SaveExploits0References2
ATTACKERKB
ATTACKERKB
added 2026/08/15 1:26 p.m.13 views

CVE-2026-18549

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 5.3.0 up to but not including 10.1.1, when the busboy fileSize limit truncates a file part, the plugin clears its internal current-file reference while the underlying stream is still open. If the client then aborts t...

5.3AI score0.0034EPSS
SaveExploits0References3Affected Software1
Positive Technologies
Positive Technologies
added 2026/08/15 12:00 a.m.12 views

PT-2026-73034

@fastify/multipart is a multipart form-data parser for Fastify. In versions from 3.0.0 up to but not including 10.1.1, request.saveRequestFiles can leave completed temporary files on disk when a client disconnects while the parser is advancing between multipart parts. The iterator rejection that...

7.5CVSS5.3AI score0.00278EPSS
SaveExploits0References3
Veracode
Veracode
added 2026/08/14 3:04 p.m.8 views

Insecure Temporary File

Spring Boot is vulnerable to Insecure Temporary File. The vulnerability is due to the use of a predictable static directory for the embedded Artemis broker's data, which allows a local attacker to pre-create or replace the directory with a symlink and potentially redirect broker file operations t...

5.3CVSS5AI score0.00094EPSS
SaveExploits0References3Affected Software2
Chainguard
Chainguard
added 2026/08/13 8:26 p.m.8 views

CVE-2026-54399 vulnerabilities

Vulnerabilities for packages: apicurio-registry, floci-az, hadoop-fips, opensearch, airbyte-platform-fips, reposilite, airbyte-server, airbyte-platform, apache-nifi, floci, wso2is, apache-hop, akhq, pinot-fips, airbyte-server-fips, nrjmx, camunda-zeebe, cassandra-reaper, elasticsearch, pinot,...

7.5CVSS4.2AI score0.0087EPSS
SaveExploits0
NVD
NVD
added 2026/08/13 3:19 p.m.8 views

CVE-2026-53795

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside t...

8.1CVSS0.00415EPSS
SaveExploits0References3
Vulnrichment
Vulnrichment
added 2026/08/13 2:39 p.m.14 views

CVE-2026-53795 rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside t...

8.1CVSS5.5AI score0.00415EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2026/08/13 2:39 p.m.51 views

CVE-2026-53795 rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside t...

8.1CVSS0.00415EPSS
SaveExploits0References3
OSV
OSV
added 2026/08/13 2:39 p.m.6 views

CVE-2026-53795 rsync < 3.5.0 Arbitrary File Write via --temp-dir/--link-dest

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside t...

7.2CVSS5.6AI score
SaveExploits0References6
CVE
CVE
added 2026/08/13 2:39 p.m.31 views

CVE-2026-53795

CVE-2026-53795 affects rsync before 3.5.0. An arbitrary file write vulnerability arises when absolute paths are supplied to --temp-dir or --link-dest, bypassing rename-confinement and allowing attacker-controlled values to write files outside the destination tree to locations accessible to the rs...

8.1CVSS5.4AI score0.00415EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/08/13 2:39 p.m.7 views

CVE-2026-53795

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside t...

8.1CVSS5.4AI score0.00415EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/08/13 2:39 p.m.7 views

EUVD-2026-58034

rsync before 3.5.0 contains an arbitrary file write vulnerability that allows attackers to write files outside the intended destination tree by specifying an absolute path via --temp-dir or --link-dest options. The rename-confinement logic is bypassed when these options resolve to paths outside t...

8.1CVSS5.4AI score0.00415EPSS
SaveExploits0References3
Patchstack
Patchstack
added 2026/08/13 2:11 p.m.7 views

NPM: ep_etherpad-lite: Import/export uses Math.random() for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite

NPM: epetherpad-lite: Import/export uses Math.random for temp file paths; predictable paths on shared /tmp enable symlink-based file overwrite vulnerability discovered by ? in WordPress Npm epetherpad-lite versions = 3.0.0...

4.2CVSS5.2AI score0.00122EPSS
SaveExploits0References4Affected Software1
Snyk
Snyk
added 2026/08/13 2:11 p.m.7 views

Insufficient Entropy in PRNG

Overview epetherpad-lite is a modern really-real-time collaborative document editor. Affected versions of this package are vulnerable to Insufficient Entropy in PRNG through the ImportHandler and ExportHandler in src/node/handler/ImportHandler.ts and src/node/handler/ExportHandler.ts. An attacker...

4.2CVSS5.5AI score0.00122EPSS
SaveExploits0References4
Rows per page
Query Builder