133162 matches found
CVE-2025-14753: Improper Limitation of a Pathname to a Restricted Directory
IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
WP < 7.1.1 - Author+ Path Traversal via Templates REST API
Description WordPress does not properly validate template identifiers passed to a REST API endpoint in some cases, which could allow users with a role as low as author to read HTML files outside of the themes directory via path traversal...
CVE-2017-20284: Improper Limitation of a Pathname to a Restricted Directory
Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...
EulerOS Virtualization 2.12.1 : sssd (EulerOS-SA-2026-3621)
According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability,...
EulerOS Virtualization 2.12.0 : sssd (EulerOS-SA-2026-3675)
According to the versions of the sssd packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in sssd. When authenticating with a YubiKey, the SSSD PAM responder can crash due to a use-after-free vulnerability,...
EulerOS 2.0 SP10 : perl-Archive-Tar (EulerOS-SA-2026-3710)
According to the versions of the perl-Archive-Tar packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction directory...
EulerOS Virtualization 2.11.1 : rsync (EulerOS-SA-2026-3470)
According to the versions of the rsync packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link...
EulerOS Virtualization 2.12.0 : acl (EulerOS-SA-2026-3627)
According to the versions of the acl packages installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : acl before version 2.4.0 contains a time-of-check to time-of-use TOCTOU race condition vulnerability that allows local attackers to...
EulerOS Virtualization 2.11.0 : rsync (EulerOS-SA-2026-3557)
According to the versions of the rsync package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : A flaw was found in rsync. When using the --safe-links option, the rsync client fails to properly verify if a symbolic link destinati...
EulerOS Virtualization 2.12.1 : attr (EulerOS-SA-2026-3575)
According to the versions of the attr package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attacker...
EulerOS 2.0 SP10 : acl (EulerOS-SA-2026-3729)
According to the versions of the acl packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : acl before version 2.4.0 contains a symlink traversal vulnerability in the libacl pathname-based functions aclgetfile, aclsetfile, aclextendedfile, a...
VulnCheck KEV: CVE-2017-20284
Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...
CVE-2026-40535: Improper Limitation of a Pathname to a Restricted Directory
An improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Desktop API in Synology DiskStation Manager DSM before 7.2.1-69057-10, 7.2.2-72806-7 and 7.3.2-86009-2 allows remote attackers to write limited files and conduct limited denial-of-service attacks...
CVE-2026-63445: Improper Limitation of a Pathname to a Restricted Directory
Perses is an open-source dashboard and visualization project for observability data. Prior to 0.54.0-rc.0, list endpoints used with the file-system database bind the request-controlled project query parameter into the resource Query structure without validating it against directory traversal...
EulerOS Virtualization 2.12.0 : perl-Archive-Tar (EulerOS-SA-2026-3658)
According to the versions of the perl-Archive-Tar package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : Archive::Tar versions before 3.08 for Perl extract symlinks with attacker controlled targets outside the extraction...
PT-2026-95227
Name of the Vulnerable Software and Affected Versions OAKlouds affected versions not specified Description An Arbitrary File Read issue exists in OAKlouds developed by HGiga. Unauthenticated remote attackers can use Relative Path Traversal—a technique used to access files and directories stored...
EulerOS Virtualization 2.12.0 : attr (EulerOS-SA-2026-3629)
According to the versions of the attr package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : attr before version 2.6.0 contains a symlink traversal vulnerability in the getfattr and setfattr utilities that allows local attacker...
CVE-2026-93468: Relative Path Traversal
The OAKlouds developed by HGiga has an Arbitrary File Read vulnerability. Unauthenticated remote attackers can exploit Relative Path Traversal to read arbitrary system files...
PT-2026-95324
Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-10 Synology DiskStation Manager versions prior to 7.2.2-72806-7 Synology DiskStation Manager versions prior to 7.3.2-86009-2 Description A path traversal issue exists in the Audio API,...
CVE-2026-21822: Improper Limitation of a Pathname to a Restricted Directory
HCLSoftware AppScan 360° was affected by a Path Traversal vulnerability in the ASReportService component. Improper handling of file paths allows an authenticated attacker to read or write files outside the intended directory, potentially enabling file system structure inspection or unauthorized...