Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Wed, 21 Oct 2026 00:33:52 +0000 bdu:2025-06818 https://cve.radiocsirt.org/vuln/bdu:2025-06818 bdu:2025-06818 https://cve.radiocsirt.org/vuln/bdu:2025-06818 EUVD-2026-249955 https://cve.radiocsirt.org/vuln/euvd-2026-249955 EUVD-2026-249955 https://cve.radiocsirt.org/vuln/euvd-2026-249955 fkie_cve-2024-49780 https://cve.radiocsirt.org/vuln/fkie_cve-2024-49780 <p>IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to traverse directories on the system. An attacker with privileges to perform Import Configuration could send a specially crafted http request containing &#34;dot dot&#34; sequences (/../) in the file name parameter used in Import Configuration to write files to arbitrary locations outside of the specified directory and possibly overwrite arbitrary files.</p> <p>IBM OpenPages with Watson 8.3 and 9.0 IBM OpenPages could allow a remote attacker to traverse directories on the system. An attacker with privileges to perform Import Configuration could send a specially crafted http request containing &#34;dot dot&#34; sequences (/../) in the file name parameter used in Import Configuration to write files to arbitrary locations outside of the specified directory and possibly overwrite arbitrary files.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-49780 GHSA-qj8v-rq4h-7fwh https://cve.radiocsirt.org/vuln/ghsa-qj8v-rq4h-7fwh <p>IBM OpenPages with Watson 8.3 and 9.0</p> <p>IBM OpenPages could allow a remote attacker to traverse directories on the system. An attacker with privileges to perform Import Configuration could send a specially crafted http request containing &#34;dot dot&#34; sequences (/../) in the file name parameter used in Import Configuration to write files to arbitrary locations outside of the specified directory and possibly overwrite arbitrary files.</p> <p>IBM OpenPages with Watson 8.3 and 9.0</p> <p>IBM OpenPages could allow a remote attacker to traverse directories on the system. An attacker with privileges to perform Import Configuration could send a specially crafted http request containing &#34;dot dot&#34; sequences (/../) in the file name parameter used in Import Configuration to write files to arbitrary locations outside of the specified directory and possibly overwrite arbitrary files.</p> https://cve.radiocsirt.org/vuln/ghsa-qj8v-rq4h-7fwh