An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files contained in non-public pages of the affected product when the fi...

CVE-2026-100727

An improper access control vulnerability exists in GROWI, which allow an unauthenticated attacker to read files containe

历史摘要 · 未重新核验 · NVD

Vibe-Trading file-read tools expose arbitrary server-readable files

### Summary: 2 findings — `safe_user_path()` accepts any path under `Path.home()` or `Path.cwd()`, which inside the shi

历史摘要 · 未重新核验 · GitHub Advisory

Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platforms allows a remote client to read ...

CVE-2026-58415

Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Server befor

历史摘要 · 未重新核验 · NVD

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables...

CVE-2026-71379

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted PO

历史摘要 · 未重新核验 · GitHub Advisory

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request.

CVE-2026-71379

The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted PO

历史摘要 · 未重新核验 · NVD

IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due...

CVE-2026-15915

IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of

历史摘要 · 未重新核验 · GitHub Advisory

IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of build context directories into container images.

CVE-2026-15915

IBM Concert 1.0.0 through 3.0.0 could allow a local attacker to obtain sensitive information due to recursive copying of

历史摘要 · 未重新核验 · NVD

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, confluence_upload_attachment opens a caller-selected server...

CVE-2026-77259

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, co

历史摘要 · 未重新核验 · NVD

MCP Atlassian: Arbitrary file read via confluence_upload_attachment allows exfiltration of server credentials

CVE-2026-77259

MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (Confluence and Jira). Prior to 0.22.0, co

历史摘要 · 未重新核验 · OSV.dev

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQLite virtual table modules such as csv_reader and log_reader throug...

CVE-2026-54629

Anyquery is an SQL query engine built on top of SQLite. Prior to 0.4.5, anyquery server exposes file-backed SQLite virtu

历史摘要 · 未重新核验 · NVD

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The server listens on TCP port 8080 and serves files and dir...

CVE-2026-77884

Gallery - Private Photo Vault 1.0.41 starts an unauthenticated HTTP server that is reachable from the local network. The

来源摘录 · NVD

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker to disclose information locally.

CVE-2026-68831

Files or directories accessible to external parties in Windows Defender Firewall Service allows an authorized attacker t

历史摘要 · 未重新核验 · NVD

An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allows a remote authenticated user with the low-privileged St...

CVE-2026-75164

An arbitrary file read vulnerability in /cgi-bin/ugwdownload.cgi of MBS-Solutions X-Serie Gateway firmware V6_00_05 allo

历史摘要 · 未重新核验 · NVD

The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing users with the author role and above to read arbitrary fi...

CVE-2026-74853

The Pods WordPress plugin before 3.3.9.2 does not restrict which functions a display callback may resolve to, allowing

历史摘要 · 未重新核验 · NVD

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI...

CVE-2026-67402

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger

历史摘要 · 未重新核验 · GitHub Advisory

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger v3 HTTPS virtual host. A remote unauthenticated attacker...

CVE-2026-67402

An insecure Apache configuration in ConfigServer Security & Firewall maps /usr/bin as CGI programs through the Messenger

历史摘要 · 未重新核验 · NVD

SiYuan versions <= 3.8.1 (fixed in v3.8.2) contain an incomplete blocklist in the IsForbiddenAbsPath() function (kernel/util/path_guard.go), which only blocks conf/conf.json by ...

CVE-2026-85175

SiYuan versions <= 3.8.1 (fixed in v3.8.2) contain an incomplete blocklist in the IsForbiddenAbsPath() function (kernel/

历史摘要 · 未重新核验 · NVD

Handlebars.java: Arbitrary file read in `SpringTemplateLoader` via URL-fragment suffix bypass

CVE-2026-63490

### Summary `com.github.jknack.handlebars.springmvc.SpringTemplateLoader` resolves Spring MVC view names into URLs via S

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker to view some system files. Successful expl...

CVE-2026-73736

A vulnerability in the web-based management interface of HPE Networking Fabric Composer could allow an unauthenticated r

历史摘要 · 未重新核验 · NVD

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to access some information beyond their privilege level. Su...

CVE-2026-73735

Vulnerabilities in the API of HPE Networking Fabric Composer could allow an authenticated low privilege operator user to

历史摘要 · 未重新核验 · NVD