sevenz-rust2 is a Rust-native 7z compressor and `decompress`or. Prior to 0.21.1, extracting an attacker-supplied 7z archive can write or overwrite files outside the destination ...

CVE-2026-61725

sevenz-rust2 is a Rust-native 7z compressor and `decompress`or. Prior to 0.21.1, extracting an attacker-supplied 7z arch

来源摘录 · NVD

Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path traversal vulnerability in the Blackboard question import format...

CVE-2026-119553

Moodle 5.3.0, 5.2.0 through 5.2.4, 5.1.0 through 5.1.8, 5.0.0 through 5.0.11, and through 4.5.15 contains a path travers

来源摘录 · NVD

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (RCE) on servers running the Veeam Management Pack for Micr...

CVE-2026-107239

A vulnerability allowing a member of the Veeam Virtualization Extensions Users group to perform remote code execution (R

来源摘录 · NVD

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release versions 8.3.1.0 through 8.3.1....

CVE-2026-90727

Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7

历史摘要 · 未重新核验 · NVD

PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, L...

CVE-2026-68866

PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1

来源摘录 · NVD

Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server...

CVE-2026-115812

Relative path traversal during model archive extraction in Amazon Web Services Multi Model Server 1.1.11 and earlier mig

历史摘要 · 未重新核验 · GitHub Advisory

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail_usercopy plugin. With the file based backend, the source...

CVE-2026-114714

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail

历史摘要 · 未重新核验 · NVD

CVE-2026-114714

CVE-2026-114714

Roundcube Webmail before 1.6.20 and 1.7.x before 1.7.5 is affected by a path traversal vulnerability in the squirrelmail

历史摘要 · 未重新核验 · OSV.dev

Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete...

CVE-2026-114110

Astral uv before 0.11.6 contains a path traversal vulnerability that allows attackers to delete arbitrary files by suppl

历史摘要 · 未重新核验 · GitHub Advisory

Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

CVE-2026-83923

Relative path traversal in OpenSSH for Windows allows an unauthorized attacker to execute code over a network.

来源摘录 · NVD

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

CVE-2026-70222

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally.

来源摘录 · NVD

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in...

CVE-2026-105275

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import function

历史摘要 · 未重新核验 · GitHub Advisory

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import functionality. An authenticated user with Viewer privileges could...

CVE-2026-105275

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data import function

历史摘要 · 未重新核验 · NVD

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could...

CVE-2026-101024

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export function

历史摘要 · 未重新核验 · NVD

In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be...

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended loca

历史摘要 · 未重新核验 · GitHub Advisory

In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended locations) during a recursive copy operation.

CVE-2026-106552

In sftp in OpenSSH before 10.6, a server can trigger directory traversal (causing files to be written to unintended loca

历史摘要 · 未重新核验 · NVD

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend package is affected by improper input validation in techdoc...

CVE-2026-106490

Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin-techdocs-backend pa

历史摘要 · 未重新核验 · NVD

Vibe-Trading file-read tools expose arbitrary server-readable files

### Summary: 2 findings — `safe_user_path()` accepts any path under `Path.home()` or `Path.cwd()`, which inside the shi

历史摘要 · 未重新核验 · GitHub Advisory

Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers to take over staff user accounts. Attackers with content p...

CVE-2026-103278

Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers t

历史摘要 · 未重新核验 · NVD

Ghost 5.8.0 before 6.34.0 Staff Account Takeover via Admin iframe

CVE-2026-103278

Ghost versions 5.8.0 before 6.34.0 contain an input validation vulnerability in the admin iframe that allows attackers t

历史摘要 · 未重新核验 · OSV.dev