20491 matches found
CVE-2021-48011
Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escape the served root by sending URL-encoded dot segments. Attackers can send %2e%2e/ sequences, which decodeURI decodes before path.join in serveStaticFile and serveDirectoryListin...
Digital-Infrastructure path traversal vulnerability in Yisheng Software
Versions 9.6.5 through 9.6.11 of the Digital-Infrastructure software contain a path traversal vulnerability. This vulnerability stems from path traversal in the fileManager Y9FileController.retrieveFileStream handler. Unauthenticated attackers can exploit this by providing a parent directory path...
PT-2026-110917
🚨 CVE-2021-48011 Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escape the served root by sending URL-encoded dot segments. Attackers can send %2e%2e/ sequences, which decodeURI decodes before path.join in serveStaticFile and...
CVE-2026-105052: Improper Limitation of a Pathname to a Restricted Directory
IBM Maximo Application Suite 8.10, 8.11, 9.0, 9.1, and 9.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...
CVE-2026-75061: Improper Limitation of a Pathname to a Restricted Directory
IBM Planning Analytics 2.0, and 2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to write arbitrary files on the system...
PT-2026-110963
Name of the Vulnerable Software and Affected Versions IBM Maximo Application Suite versions 8.10 through 9.2 Description A remote attacker can perform directory traversal on the system. By sending a specially crafted URL request containing "dot dot" sequences /../, an attacker can view arbitrary...
CVE-2021-48011: Improper Limitation of a Pathname to a Restricted Directory
Servor 1.0.0 through 4.0.2 contains a path traversal vulnerability that allows unauthenticated remote attackers to escape the served root by sending URL-encoded dot segments. Attackers can send %2e%2e/ sequences, which decodeURI decodes before path.join in serveStaticFile and serveDirectoryListin...
Luke Jackson Servør path traversal vulnerability
Luke Jackson Servo versions 1.0.0 to 4.0.2 and earlier have a path traversal vulnerability. This vulnerability arises from the fact that decodeURI is executed before path.join in serveStaticFile and serveDirectoryListing. Attackers can send URL-encoded strings to escape the root directory, making...
CVE-2026-97348
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the getinstancecss function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary file...
EUVD-2026-96222
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the getinstancecss function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary file...
EUVD-2026-96096
The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'filepath' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...
PT-2026-109748
Name of the Vulnerable Software and Affected Versions slide-maker versions prior to 5.8.1 Description A path traversal issue exists in the generate images openai.py file. This flaw allows attackers to write image files outside the intended output directory by manipulating filenames provided in th...
CVE-2026-104763: Improper Limitation of a Pathname to a Restricted Directory
The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'filepath' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...
CVE-2026-108603: Improper Limitation of a Pathname to a Restricted Directory
slide-maker through 5.8.0 contains a path traversal vulnerability in generateimagesopenai.py that allows attackers to write image files outside the output directory via manifest-supplied filenames. Attackers can influence deck source material so the image prompt manifest contains ../ or symlinked...
PT-2026-109569
The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the get instance css function. This makes it possible for authenticated attackers, with contributor-level access and above, to read the contents of arbitrary...
UBUNTU-CVE-2026-107935
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...
EUVD-2026-95578
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...
CVE-2026-107935
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...
CVE-2026-107935
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...