Lucene search
+L

9 matches found

UbuntuCve
UbuntuCve
•added 2026/04/22 5:16 p.m.•27 views

CVE-2026-35362

The safetraversal module in uutils coreutils, which provides protection against Time-of-Check to Time-of-Use TOCTOU symlink races using file-descriptor-relative syscalls, is incorrectly limited to Linux targets. On other Unix-like systems such as macOS and FreeBSD, the utility fails to utilize...

3.6CVSS5.9AI score0.0018EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/03/16 3:30 p.m.•29 views

EUVD-2026-12109

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

9.8CVSS7.2AI score0.0503EPSS
SaveExploits0References14
NVD
NVD
•added 2026/02/03 3:15 a.m.•25 views

CVE-2026-24935

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

6.3CVSS0.00154EPSS
SaveExploits0References1
osv_cve
osv_cve
•added 2026/02/03 3:15 a.m.•29 views

CVE-2026-24935

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

5.6CVSS7.1AI score0.00154EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2026/02/03 2:28 a.m.•14 views

CVE-2026-24935

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

6.3CVSS7.2AI score0.00154EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2026/02/03 12:00 a.m.•11 views

CVE-2026-24935: Improper Certificate Validation

A third-party NAT traversal module fails to validate SSL/TLS certificates when connecting to the signaling server. While subsequent access to device services requires additional authentication, a Man-in-the-Middle MitM attacker can intercept or redirect the NAT tunnel establishment. This could...

6.3CVSS7.2AI score0.00154EPSS
SaveExploits0References1
NVD
NVD
•added 2025/06/12 8:15 a.m.•25 views

CVE-2025-40592

A vulnerability has been identified in Mendix Studio Pro 10 All versions V10.24.24 for Windows, Mendix Studio Pro 10 All versions V10.24.24 for Mac, Mendix Studio Pro 11 All versions V11.13.0 for Windows, Mendix Studio Pro 11 All versions V11.13.0 for Mac, Mendix Studio Pro 11.12 All versions...

6.1CVSS0.00408EPSS
SaveExploits0References1
Circl
Circl
•added 2018/05/29 3:50 p.m.•21 views

CVE-2019-17199

creationtimestamp| type| source ---|---|--- 2018-05-29 15:50:33+00:00| seen| https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/webpagetesttraversal.rb 2025-10-23 21:12:58+00:00| seen| MISP/a9d21043-f825-4bac-8d2b-56fb9e8343e7 2026-09-08 06:47:55+00:00| seen...

7.5CVSS7.3AI score0.09957EPSS
SaveExploits2References1
Hacker One
Hacker One
•added 2018/05/21 8:40 a.m.•20 views

Node.js third-party modules: [statics-server] Path Traversal due to lack of provided path sanitization

Hi Team, I would like to report Path Traversal in statics-server module. It allows to read content of any arbitrary file from the server. Module module name: statics-server version: 0.0.9 npm page: https://www.npmjs.com/package/statics-server Module Description npm install statics-server -g Go to...

0.7AI score
SaveExploits0
Rows per page
Query Builder