Lucene search
K

8 matches found

UbuntuCve
UbuntuCve
added 2026/04/22 5:16 p.m.3 views

CVE-2026-35362

The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...

3.6CVSS5.8AI score0.00018EPSS
Exploits0References2
EUVD
EUVD
added 2026/03/16 3:30 p.m.0 views

EUVD-2026-12109

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

9.8CVSS5.8AI score0.50565EPSS
Exploits0References14
OSV
OSV
added 2026/02/03 3:15 a.m.3 views

CVE-2026-24935

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

5.6CVSS5.8AI score
Exploits0References1
NVD
NVD
added 2026/02/03 3:15 a.m.3 views

CVE-2026-24935

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

6.3CVSS0.00013EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/02/03 2:28 a.m.3 views

CVE-2026-24935

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

6.3CVSS5.5AI score0.00013EPSS
Exploits0References2Affected Software1
NVD
NVD
added 2025/06/12 8:15 a.m.7 views

CVE-2025-40592

A vulnerability has been identified in Mendix Studio Pro 10 All versions V10.23.0, Mendix Studio Pro 10.12 All versions V10.12.17, Mendix Studio Pro 10.18 All versions V10.18.7, Mendix Studio Pro 10.6 All versions V10.6.24, Mendix Studio Pro 11 All versions V11.0.0, Mendix Studio Pro 8 All versio...

6.1CVSS0.00218EPSS
Exploits0References1
Circl
Circl
added 2018/05/29 3:50 p.m.3 views

CVE-2019-17199

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/webpagetesttraversal.rb 2025-10-23 21:12:58+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7...

7.5CVSS7.4AI score0.63051EPSS
Exploits1References1
Hacker One
Hacker One
added 2018/05/21 8:40 a.m.9 views

Node.js third-party modules: [statics-server] Path Traversal due to lack of provided path sanitization

Hi Team, I would like to report Path Traversal in statics-server module. It allows to read content of any arbitrary file from the server. Module module name: statics-server version: 0.0.9 npm page: https://www.npmjs.com/package/statics-server Module Description npm install statics-server -g Go to...

0.7AI score
Exploits0
Rows per page
Query Builder