Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file
CVE-2026-93347
Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious
#cwe-22
共收录 2611 条相关情报。
← 返回所有主题Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functions
CVE-2026-74043
Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in upload_list_file, upload_rule_file, and upload
Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlers
CVE-2026-74033
Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_lists() and delete_list_file() CDB lis
Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helpers
CVE-2026-74031
Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the delete_rule_file and delete_decoder_file h
NLTK through 3.10.3 Path Traversal via WekaClassifier Model Path
CVE-2026-109956
NLTK through 3.10.3 contains a path traversal vulnerability in WekaClassifier that allows attackers to bypass nltk.paths
NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remote attacker may cause an improper limitation of a pathname...
CVE-2026-65164
NVIDIA AIStore for Linux contains a path traversal vulnerability in the dSort archive extraction component where a remot
NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read files accessible to the target process by supplying a craf...
CVE-2026-65161
NVIDIA AIStore for Linux contains a vulnerability in the Promote API where an unauthenticated remote attacker may read f
NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unauthenticated remote attacker could cause an improper limit...
CVE-2026-65103
NVIDIA AIStore for Linux contains a path traversal vulnerability in the target-side object rename handler, where an unau
A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlserver/env.py of the component environment_tarball Handler. ...
CVE-2026-109156
A vulnerability has been found in SeldonIO MLServer up to 1.6.1. Affected is the function _extract_env of the file mlser
A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler. This manipulation causes path traversal. The attack is ...
CVE-2026-109155
A flaw has been found in DeepPavlov up to 1.7.0. This impacts the function untar of the component Model Download Handler
A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file composer/utils/checkpoint.py of the component Checkpoint...
CVE-2026-109153
A vulnerability was detected in MosaicML Composer up to 0.32.1. This affects the function tarball.extractall of the file
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affected applications do not properly validate filenames receiv...
CVE-2026-85114
A vulnerability has been identified in .NET Client Library for SIMATIC S7 Webserver API (All versions < V3.3.61). Affect
A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_file/_recv_pushd of the component SCP Receive Handler. The ...
CVE-2026-109152
A security vulnerability has been detected in jbardin scp.py up to 0.16.1. The impacted element is the function _recv_fi
A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the function com.infraware.service.m.n.a of the component Document...
CVE-2026-109106
A security flaw has been discovered in Polaris Office App 9.9.19 on Android. Affected by this vulnerability is the funct
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause...
CVE-2026-82101
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to...
CVE-2026-82110
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to
A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the...
CVE-2026-108940
A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply
A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply of the file mistralrs-server-core/src/handlers.rs. Perfo...
CVE-2026-108940
A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3. The affected element is the function calibration_apply
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.
CVE-2026-82110
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.
CVE-2026-82101
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due