CVE-2026-12660

IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation...

CVE-2026-12660 IBM MQ Path Traversal

IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation...

EUVD-2026-104466

IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation...

CVE-2026-12660 IBM MQ Path Traversal

IBM MQ Web Console could allow an authenticated administrator to write files outside the intended directory due to improper path validation...

CVE-2026-12660

The IBM MQ Web Console is vulnerable to a path traversal issue (CWE-22) caused by improper path validation . This flaw could allow an authenticated administrator to write files outside the intended directory. The CVSS 3.1 base score is 2.7 (Low) , with an integrity impact of low and no impact on ...

CVE-2026-111045

CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path ...

Python Packaging Authority virtualenv post-link vulnerability

The Python Packaging Authority identifies a post-link vulnerability in virtualenv versions prior to 21.14.9. This vulnerability arises because the built-in creator calls ensuredir when handling executable files, libraries, and package directories; it accepts existing symbolic links pointing to...

Apple iOS Buffer Overflow Vulnerability

Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple tvOS versions prior to 27, Apple visionOS versions prior to 27, and Apple watchOS versions prior to 27 have a buffer error vulnerability. This vulnerability stems from improper...

Eclipse ThreadX – NetX Duo input validation vulnerability

Eclipse ThreadX – NetX Duo 6.5.1.202602 and earlier versions have a security vulnerability. This vulnerability stems from the X.509 parser in NetX Secure accepting RSA public keys of arbitrary size and decrypting them into a fixed-size buffer. Certificates with larger modulus values may lead to...

Apple macOS Buffer Error Vulnerability

Apple macOS Sequoia versions prior to 15.8 and macOS Tahoe versions prior to 26.7 have a buffer error vulnerability. This vulnerability stems from an out-of-bounds write issue, which may cause the application to terminate unexpectedly...

Apple iOS Buffer Overflow Vulnerability

Apple iOS versions prior to 26.7, Apple iPadOS versions prior to 26.7, Apple iOS versions prior to 27, Apple iPadOS versions prior to 27, Apple macOS Golden Gate versions prior to 27, Apple macOS Sequoia 15.8 versions prior to 27, Apple macOS Tahoe versions prior to 26.7, Apple tvOS versions prio...

Eclipse ThreadX GUIX buffer error vulnerability

Eclipse ThreadX GUIX versions 6.5.1.202602a and earlier contain a buffer error vulnerability. This vulnerability arises because the PNG block reader fails to validate the order of blocks; it allows reading the IHDR after the IDAT and overwriting the image dimensions. As a result, when performing...

Eclipse ThreadX GUIX numeric error vulnerability

The Eclipse ThreadX GUIX has a security vulnerability. This vulnerability arises because the GUIX binary resource loader fails to validate the glyph range of font pages. When firstglyph exceeds lastglyph, a count underflow occurs. Additionally, an unchecked multiplication wrapup in buffer size...

Eclipse ThreadX FileX input validation error vulnerability

Versions 6.5.1.202602 and earlier of Eclipse ThreadX FileX contain a security vulnerability. This vulnerability arises when an attacker with control over the FAT image that enables fault tolerance mounts a filesystem, leading to an out-of-bounds heap write during log replay. Both the location and...

Eclipse ThreadX buffer error vulnerability

A buffer error vulnerability exists in Eclipse ThreadX versions 6.1 through 6.5.1.202602a. This vulnerability arises because the Cortex-A7 MMU Modules port only validates the address of the first byte in the buffer; it fails to verify the full length and the actual instance of the module. As a...

uTox path traversal vulnerability

uTox versions 0.18.1 and earlier contain a path traversal vulnerability. This vulnerability arises from path traversal, allowing attackers to write arbitrary files by sending absolute paths or ../ filenames when the victim enables auto-accepting connections. This can overwrite shell startup files...

Python Packaging Authority virtualenv post-link vulnerability

The Python Packaging Authority’s virtualenv versions prior to 21.14.9 have a post-release vulnerability. This vulnerability stems from the handling of errors during the safedelete function’s deletion operations. When deletion fails, the error handling code uses os.lstatpath to read the file mode...

CLSA-2026-1792425300 rsync: Fix of CVE-2026-70461

CVE-2026-70461: heap out-of-bounds write in addimpliedinclude -- trailing backslash not counted when sizing the implied-include rule...

CLSA-2026-1792425174 rsync: Fix of CVE-2026-70461

CVE-2026-70461: heap out-of-bounds write in addimpliedinclude -- trailing backslash not counted when sizing the implied-include rule...

EUVD-2026-104412

CLI Bridge provides filesystem access within a workspace root. Prior to 0.0.2, a dangling symlink pointing outside the workspace root bypasses resolveSafePath when fs.realpathSync throws ENOENT for a nonexistent target. The fallback resolves only the parent directory and returns the symlink path ...