Known Vulnerabilities for Directory by Annuaire
Listed below are 2 of the newest known vulnerabilities associated with "Directory" by "Annuaire".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-81031 json | IDURAR ERP CRM changes the password of whichever account a request names rather than the account making the request. The upda... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-81030 json | Mage AI does not confine the paths accepted by its browser-items API to the project directory. BrowserItemResource in mage_ai... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-81028 json | ZLMediaKit confines the downloadFile API to a configured set of root directories with a prefix comparison that does not accou... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-80189 json | LeafWiki extracts an uploaded ZIP archive without limiting how much data it will write. ZipExtractor.ExtractToDir in internal... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-80158 json | A flaw was found in the ipa_getkeytab module of the community.general Ansible collection. The module's bind_pw parameter, use... | Not Provided | 2026-08-26 | 2026-08-26 |
| CVE-2026-80104 json | DB-GPT builds the destination path for an uploaded skill from the multipart filename without constraining it to the upload di... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-79781 json | rclone serve s3 before 1.74.4 contains a path traversal vulnerability that allows attackers to read and overwrite root-level ... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-79773 json | Winter CMS before 1.2.13 contains a local file inclusion vulnerability in the JavascriptImporter filter that allows authentic... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-78680 json | NLTK versions before 3.10.3 fail to use validated absolute paths when invoking the Graphviz dot binary in dependencygraph.dot... | Not Provided | 2026-08-25 | 2026-08-25 |
| CVE-2026-78677 json | GitPython before 3.1.59 omits --separate-git-dir from unsafe_git_clone_options, allowing attackers to create arbitrary git di... | Not Provided | 2026-08-25 | 2026-08-25 |