https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:07:14 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-124570 EUVD-2026-124570 https://cve.radiocsirt.org/vuln/euvd-2026-124570 https://cve.radiocsirt.org/vuln/fkie_cve-2009-3898 <p>Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.</p> <p>Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2009-3898 https://cve.radiocsirt.org/vuln/ghsa-787j-9hgf-jxj6 <p>Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.</p> <p>Directory traversal vulnerability in src/http/modules/ngx_http_dav_module.c in nginx (aka Engine X) before 0.7.63, and 0.8.x before 0.8.17, allows remote authenticated users to create or overwrite arbitrary files via a .. (dot dot) in the Destination HTTP header for the WebDAV (1) COPY or (2) MOVE method.</p> https://cve.radiocsirt.org/vuln/ghsa-787j-9hgf-jxj6 https://cve.radiocsirt.org/vuln/gsd-2009-3898 gsd-2009-3898 https://cve.radiocsirt.org/vuln/gsd-2009-3898