Lucene search
+L

63554 matches found

CVE
CVE
added 2026/07/21 3:40 p.m.34 views

CVE-2026-64825

CVE-2026-64825 : Home Assistant Core prior to 2026.6.0 contains a path traversal vulnerability reachable during initial onboarding via a crafted backup archive. By manipulating the name field inside the archive’s backup.json to supply an absolute path, the code path using pathlib.Path.truediv dis...

9.3CVSS5.6AI score0.00482EPSS
SaveExploits0References4
OSV
OSV
added 2026/07/21 3:40 p.m.5 views

CVE-2026-64825 Home Assistant Core < 2026.6.0 Path Traversal File Write via Backup Upload

Home Assistant Core before 2026.6.0 contains a path traversal vulnerability that allows unauthenticated attackers to write arbitrary files to any directory on the host filesystem by uploading a crafted backup archive during the initial onboarding window. Attackers can manipulate the 'name' field...

9CVSS5.6AI score
SaveExploits0References7
Vulnrichment
Vulnrichment
added 2026/07/21 3:39 p.m.5 views

CVE-2026-64824 Home Assistant Core < 2026.7.0 Symlink Path Traversal RCE via backup-restore

Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attackers to write files to arbitrary absolute filesystem paths by supplying a crafted tar archive with a SYMTYPE entry containing a benign member name paired with an absolute...

9.3CVSS6.5AI score0.00576EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/21 3:39 p.m.7 views

EUVD-2026-46300

Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore function that allows attackers to write files to arbitrary absolute filesystem paths by supplying a crafted tar archive with a SYMTYPE entry containing a benign member name paired with an absolute...

9.3CVSS6.5AI score0.00576EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/21 3:39 p.m.7 views

EUVD-2026-46299

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain administrator access is required, and the impact is lower in Windows installations...

9.1CVSS5.8AI score0.00409EPSS
SaveExploits0References2
CVE
CVE
added 2026/07/21 3:39 p.m.18 views

CVE-2026-28321

SolarWinds Serv-U is affected by a broken access control vulnerability (CVE-2026-28321) that could allow arbitrary file read and write, enabling privilege escalation and code execution as root. A domain administrator access is required, and impact is lower on Windows installations. The provided c...

9.1CVSS5.8AI score0.00409EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/21 3:39 p.m.31 views

CVE-2026-28321 SolarWinds Serv-U Broken Access Control Vulnerability

SolarWinds Serv-U is affected by a broken access control vulnerability that could allow arbitrary file read and write, which can then be used to escalate privileges and execute code as root. A domain administrator access is required, and the impact is lower in Windows installations...

9.1CVSS0.00409EPSS
SaveExploits0References2
EUVD
EUVD
added 2026/07/21 2:15 p.m.9 views

EUVD-2026-46265

A vulnerability was found in D-Link DNS-120, DNR-202L, DNS-315L, DNS-320, DNS-320L, DNS-320LW, DNS-321, DNR-322L, DNS-323, DNS-325, DNS-326, DNS-327L, DNR-326, DNS-340L, DNS-343, DNS-345, DNS-726-4, DNS-1100-4, DNS-1200-05 and DNS-1550-04 up to 20260205. The affected element is the function...

6.5CVSS6.3AI score0.01055EPSS
SaveExploits0References6
CVE
CVE
added 2026/07/21 1:53 p.m.49 views

CVE-2026-47121

Sparkle vulnerability CVE-2026-47121 (affecting macOS AutoUpdate) arises from a defense-in-depth gap in delta application. An archive item can create a symlink in the destination tree and a subsequent file write may traverse the symlink path, allowing writes outside the intended destination when ...

6.1CVSS5.5AI score0.00229EPSS
SaveExploits0References2Affected Software1
Cvelist
Cvelist
added 2026/07/21 1:53 p.m.30 views

CVE-2026-47121 Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta

Sparkle is a software update framework for macOS. Prior to version 2.9.2, Autoupdate/SUBinaryDeltaApply.m enforces relativePath.pathComponents containsObject:@".." and rejects writes whose immediate parent directory IS itself a symbolic link, but does not detect symlinks deeper in the relative...

6.1CVSS0.00229EPSS
SaveExploits0References2
SUSE CVE
SUSE CVE
added 2026/07/21 1:7 p.m.6 views

SUSE CVE-2026-53375

In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/vce: Prevent partial address patches In the case that only one of lo/hi is valid, the patching could result in a bad address written to in FW...

8.8CVSS5.2AI score0.0012EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/21 1:2 p.m.8 views

SUSE CVE-2026-63949

In the Linux kernel, the following vulnerability has been resolved: auxdisplay: line-display: fix OOB read on zero-length messagestore linedispdisplay unconditionally reads msgcount - 1 before checking whether count is zero, so a write of zero bytes to the message sysfs attribute hits msg-1:...

5.4AI score0.00172EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:2 p.m.6 views

SUSE CVE-2026-63952

In the Linux kernel, the following vulnerability has been resolved: memfd: deny writeable mappings when implying SEALWRITE When SEALEXEC is added, SEALWRITE is implied to make W^X. But the implied seal is set after the check that makes sure the memfd can not have any writable mappings. This means...

8.4CVSS5.3AI score0.0016EPSS
SaveExploits0References4
SUSE CVE
SUSE CVE
added 2026/07/21 1:1 p.m.8 views

SUSE CVE-2026-63995

In the Linux kernel, the following vulnerability has been resolved: ethtool: cmis: validate startcmdpayloadsize from module The CMIS firmware update code reads startcmdpayloadsize from the module's FW Management Features CDB reply and uses it directly as the byte count for memcpy. The destination...

7.8CVSS5.6AI score0.00129EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:1 p.m.9 views

SUSE CVE-2026-64001

In the Linux kernel, the following vulnerability has been resolved: ALSA: pcm: oss: Fix setup list UAF on proc write error sndpcmossprocwrite links a newly allocated setup entry into the OSS setup list before duplicating the task name. If the task-name allocation fails, the error path frees the...

5.3AI score0.00168EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:1 p.m.6 views

SUSE CVE-2026-64009

In the Linux kernel, the following vulnerability has been resolved: xfrm: Check for underflow in xfrmstatemtu Leo Lin reported OOB write issue in esp component: xfrmstatemtu returns u32 but performs its arithmetic in unsigned modulo-2^32 space using an attacker-influenced "headerlen + authsize +...

7.8CVSS5.3AI score0.00143EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:1 p.m.7 views

SUSE CVE-2026-64029

In the Linux kernel, the following vulnerability has been resolved: ALSA: seq: Serialize UMP output teardown with eventinput sequmpprocessevent borrows client-outrfile.output without synchronizing with the first-open and last-close transition in sequmpclientopen and sequmpclientclose. The last...

7.8CVSS5.3AI score0.00125EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:0 p.m.9 views

SUSE CVE-2026-64059

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix folio-private handling in netfsperformwrite Under some circumstances, netfsperformwrite doesn't correctly manipulate folio-private between NULL, NETFSFOLIOCOPYTOCACHE, pointing to a group and pointing to a netfsfolio...

5.3AI score0.00168EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:0 p.m.9 views

SUSE CVE-2026-64060

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix leak of request in netfswritebegin error handling Fix netfswritebegin to not leak our ref on the request in the event that we get an error from netfswaitforread...

5.3AI score0.00166EPSS
SaveExploits0References3
SUSE CVE
SUSE CVE
added 2026/07/21 1:0 p.m.8 views

SUSE CVE-2026-64062

In the Linux kernel, the following vulnerability has been resolved: netfs: Fix potential deadlock in write-through mode Fix netfsadvancewritethrough to always unlock the supplied folio and to mark it dirty if it isn't yet written to the end. Unfortunately, it can't be marked for writeback until t...

5.2AI score0.00168EPSS
SaveExploits0References3
Rows per page
Query Builder