Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 19:34:19 +0000 cnvd-2021-37765 https://cve.radiocsirt.org/vuln/cnvd-2021-37765 cnvd-2021-37765 https://cve.radiocsirt.org/vuln/cnvd-2021-37765 EUVD-2026-26477 https://cve.radiocsirt.org/vuln/euvd-2026-26477 EUVD-2026-26477 https://cve.radiocsirt.org/vuln/euvd-2026-26477 fkie_cve-2021-29641 https://cve.radiocsirt.org/vuln/fkie_cve-2021-29641 <p>Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain installations with the Apache HTTP Server and the local-storage driver (e.g., when the product was obtained from hub.docker.com).</p> <p>Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain installations with the Apache HTTP Server and the local-storage driver (e.g., when the product was obtained from hub.docker.com).</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-29641 GHSA-cfr5-vjc2-p7gj https://cve.radiocsirt.org/vuln/ghsa-cfr5-vjc2-p7gj <p>Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain installations with the Apache HTTP Server and the local-storage driver (e.g., when the product was obtained from hub.docker.com).</p> <p>Directus 8 before 8.8.2 allows remote authenticated users to execute arbitrary code because file-upload permissions include the ability to upload a .php file to the main upload directory and/or upload a .php file and a .htaccess file to a subdirectory. Exploitation succeeds only for certain installations with the Apache HTTP Server and the local-storage driver (e.g., when the product was obtained from hub.docker.com).</p> https://cve.radiocsirt.org/vuln/ghsa-cfr5-vjc2-p7gj gsd-2021-29641 https://cve.radiocsirt.org/vuln/gsd-2021-29641 gsd-2021-29641 https://cve.radiocsirt.org/vuln/gsd-2021-29641