https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 04:29:49 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-105739 EUVD-2026-105739 https://cve.radiocsirt.org/vuln/euvd-2026-105739 https://cve.radiocsirt.org/vuln/fkie_cve-2013-1939 <p>The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ (backslash) character.</p> <p>The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a \ (backslash) character.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2013-1939 https://cve.radiocsirt.org/vuln/ghsa-qg5v-jw6f-rpfj <p><strong>Affected:</strong> Packagist: sabre/dav</p> <p>The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a `\` (backslash) character.</p> <p><strong>Affected:</strong> Packagist: sabre/dav</p> <p>The HTML\Browser plugin in SabreDAV before 1.6.9, 1.7.x before 1.7.7, and 1.8.x before 1.8.5, as used in ownCloud, when running on Windows, does not properly check path separators in the base path, which allows remote attackers to read arbitrary files via a `\` (backslash) character.</p> https://cve.radiocsirt.org/vuln/ghsa-qg5v-jw6f-rpfj https://cve.radiocsirt.org/vuln/gsd-2013-1939 gsd-2013-1939 https://cve.radiocsirt.org/vuln/gsd-2013-1939