Tutte le CVE degli ultimi sei mesi, aggiornate ogni giorno.

Mostrate 5 di 5

• AltaCVE-2026-66152Punteggio CVSS 8.825 ago 2026

  A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.

  CWE-29
• MediaCVE-2026-10732Punteggio CVSS 6.45 giu 2026

  All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archive containing two entries with the same path - the first being a symlink to an arbitrary target and the second being a re

  CWE-29CWE-22
• AltaCVE-2026-24217Punteggio CVSS 8.820 mag 2026

  NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this vulnerability might lead to code execution, denial of service, information disclosure, and data tampering

  CWE-29nvidia bionemo_frameworklinux linux_kernel
• AltaCVE-2026-5627Punteggio CVSS 7.27 apr 2026

  A path traversal vulnerability exists in mintplex-labs/anything-llm versions up to and including 1.9.1, within the `AgentFlows` component. The vulnerability arises from improper handling of user input in the `loadFlow` and `deleteFlow` methods in `server/utils

  CWE-29mintplexlabs anythingllm
• CriticaCVE-2025-15036Punteggio CVSS 10.030 mar 2026

  A path traversal vulnerability exists in the `extract_archive_to_dir` function within the `mlflow/pyfunc/dbconnect_artifact_cache.py` file of the mlflow/mlflow repository. This vulnerability, present in versions before v3.7.0, arises due to the lack of validat

  CWE-29CWE-22lfprojects mlflow