Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its database download feature that allows unauthenticated attacker...

CVE-2026-65689

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its datab

来源摘录 · NVD

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function...

CVE-2026-16653

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http_sendfile2 of the

历史摘要 · 未重新核验 · GitHub Advisory

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http_sendfile2 of the file lib/facil/http/http.c of the component Public Folder...

CVE-2026-16653

CVE-2026-16653 是一个影响 boazsegev facil.io 库（版本 0.7.58 及之前）的路径遍历漏洞。facil.io 是一个轻量级的 C 语言网络框架，常用于构建高性能 Web 应用。该漏洞存在于 http_se

历史摘要 · 未重新核验 · NVD

boazsegev facil.io Public Folder http.c http_sendfile2 path traversal

CVE-2026-16653

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http_sendfile2 of the

历史摘要 · 未重新核验 · OSV.dev

LiteLLM: Arbitrary file write via path traversal in Skills archive extraction

CVE-2026-59820

### Impact LiteLLM Skills archive extraction did not sufficiently validate file paths from uploaded skill ZIP archives.

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Path-Confinement Bypass in computer-use search_files Allows Reading Files Outside the Base Directory

## Impact The component `@n8n/computer-use` file-search tool confined searches to a configured base directory. A crafte

历史摘要 · 未重新核验 · GitHub Advisory

n8n: Git Node fetch/pull/pushTags Operations Bypass Sandbox Path Restriction

## Impact Authenticated n8n users with workflow create/execute rights could use the Git node's fetch, pull, or push-tag

历史摘要 · 未重新核验 · GitHub Advisory

In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persistence storage provider can be exploited when the storage key is de...

CVE-2026-13186

In Progress® Telerik® UI for AJAX prior to v2026.2.708, a path traversal vulnerability in the file-based persistence sto

历史摘要 · 未重新核验 · NVD

Traefik versions <= v2.11.51, >= v3.6.0 <= v3.6.22, and >= v3.7.0 <= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathRegex middleware. When ReplaceP...

CVE-2026-65600

Traefik versions = v3.6.0 = v3.7.0 <= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathRegex

历史摘要 · 未重新核验 · NVD

A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traversal, allows an attacker to manipulate an AI agent through...

CVE-2026-44192

A flaw was found in the Ansible Lightspeed Model Context Protocol (MCP) server. This vulnerability, known as path traver

历史摘要 · 未重新核验 · NVD

Traefik before v2.11.52 Authentication Bypass via ReplacePathRegex

CVE-2026-65600

Traefik versions = v3.6.0 = v3.7.0 <= v3.7.6 contain an authentication bypass via path traversal in the ReplacePathRegex

历史摘要 · 未重新核验 · OSV.dev

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a...

CVE-2026-56844

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate their privileges and gain root-level access to the underl...

CVE-2026-56844

A vulnerability in the Veeam Updater component of the Veeam Software Appliance that could allow a local user to elevate

历史摘要 · 未重新核验 · NVD

The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based software suite developed to handle Ground Data System (G...

CVE-2026-47731

The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based

历史摘要 · 未重新核验 · NVD

NASA AMMOS Instrument Toolkit: Path traversal resulting in arbitrary file append (can be triggered over the network by unauthenticated attacker)

CVE-2026-47731

The AMMOS Instrument Toolkit (Formerly the Bespoke Links to Instruments for Surface and Space (BLISS)) is a Python-based

历史摘要 · 未重新核验 · OSV.dev

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc and update_doc tools.

CVE-2026-30633

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted path value to the get_doc and update_doc tools

历史摘要 · 未重新核验 · NVD

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary code via the nex-ai-draw-io/mcp-server

CVE-2026-50757

Directory Traversal vulnerability in DayuanJiang next-ai-draw-io 0.4.13 allowsa remote attacker to execute arbitrary cod

历史摘要 · 未重新核验 · NVD

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the create_doc tool.

CVE-2026-30632

Directory traversal vulnerability in knowns-dev/knowns 0.11.4 via crafted folder name value to the create_doc tool.

历史摘要 · 未重新核验 · NVD

An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an attacker to copy arbitrary files to a user readable locat...

CVE-2026-63454

An authenticated path traversal vulnerability exists in AOS-CX. Successful exploitation of this vulnerability allows an

历史摘要 · 未重新核验 · NVD

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, `EntryPoint::FromStr` in `rattler_conda_types` performs only `....

CVE-2026-47425

Rattler is a library that provides common functionality used within the conda ecosystem. Prior to version 0.43.2, `Entry

历史摘要 · 未重新核验 · NVD