CVE-2025-14753 IBM Cloud Pak for Data is vulnerable to path traversal

IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2025-14753

IBM Cloud Pak for Data 5.1.2 is vulnerable to a path traversal (CWE-22) attack. A remote, unauthenticated attacker can send a specially crafted URL containing "dot dot" (/../) sequences to traverse directories and view arbitrary files on the system, potentially exposing sensitive information. The...

CVE-2025-14753 IBM Cloud Pak for Data is vulnerable to path traversal

IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

CVE-2026-6205

An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks...

EUVD-2026-82777

An external control of file name or path vulnerability in Upload API in Synology DiskStation Manager DSM before 7.2.1-69057-12, 7.2.2-72806-9, 7.3.2-86009-4 and 7.4-90075 allows remote authenticated users to write arbitrary files and conduct denial-of-service attacks...

Path Traversal

Grav is vulnerable to Path Traversal. The vulnerability is due to insufficient validation of directory paths in MediaUploadTrait::deleteFile, which allows an authenticated attacker with media management permissions to use ../ sequences to delete arbitrary files outside the intended media storage...

PT-2026-95288

Name of the Vulnerable Software and Affected Versions The Store Exporter – Export WooCommerce Products, Orders, Subscriptions, Customers versions prior to 2.8.1 Description A Directory Traversal issue exists where authenticated attackers with shop manager-level access or higher can read arbitrary...

PT-2026-95435

Name of the Vulnerable Software and Affected Versions IBM Cloud Pak for Data version 5.1.2 Description A remote attacker can perform directory traversal on the system by sending a specially crafted URL request containing "dot dot" sequences /../. This allows the attacker to view arbitrary files o...

PT-2026-95284

Name of the Vulnerable Software and Affected Versions Printcart Web to Print Product Designer for WooCommerce versions prior to 2.8.6 Description This issue involves a Directory Traversal flaw that allows unauthenticated attackers to read arbitrary files on the server, potentially exposing...

PT-2026-95641

Caucho Resin contains a path traversal vulnerability in the documentation webapp resin-doc that allows remote unauthenticated attackers to read arbitrary files by supplying a relative path through the inputFile request parameter of the jndi-appconfig tutorial servlet. Attackers can craft requests...

CVE-2025-14753: Improper Limitation of a Pathname to a Restricted Directory

IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request containing "dot dot" sequences /../ to view arbitrary files on the system...

PT-2026-95327

Name of the Vulnerable Software and Affected Versions Synology DiskStation Manager versions prior to 7.2.1-69057-10 Synology DiskStation Manager versions prior to 7.2.2-72806-7 Synology DiskStation Manager versions prior to 7.3.2-86009-2 Description An improper certificate validation issue exists...

EUVD-2026-52282

Grav: Path Traversal in ImageMedium::watermark — arbitrary file disclosure via publicly-cached images...

PT-2026-94171

Name of the Vulnerable Software and Affected Versions wpShopGermany IT-RECHT KANZLEI versions prior to 2.4 Description The plugin fails to generate API authentication tokens securely. The token is derived from data controlled by the requester and is created as a side effect of the validation chec...

PT-2026-94335

Name of the Vulnerable Software and Affected Versions HUBzero CMS versions prior to 2.2.33 Description A path traversal issue exists in project file upload handlers. This allows authenticated project members to write arbitrary files outside the project repository by supplying traversal sequences ...

PT-2026-94250

Name of the Vulnerable Software and Affected Versions admin3 version 3.0.0 Description The upload handler fails to sanitize client-supplied filenames on Windows deployments. This allows authenticated users to use dot-dot path segments in filenames to escape the configured storage directory and...

CVE-2026-76432: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of Cisco ISE and Cisco ISE-PIC could allow an authenticated, remote attacker with administrative-level privileges to write arbitrary files on an affected device. This vulnerability exists because the affected software does not properly validat...

PT-2026-94029

Name of the Vulnerable Software and Affected Versions Cisco ISE affected versions not specified Cisco ISE-PIC affected versions not specified Description A flaw in the file management function of the web-based management interface allows an authenticated remote attacker with administrative...

PT-2026-93980

Name of the Vulnerable Software and Affected Versions Cisco Secure Firewall Management Center FMC Software affected versions not specified Description A flaw in the sftunnel inter-device communication protocol allows an authenticated remote attacker to execute arbitrary commands with root...

PT-2026-94068

Name of the Vulnerable Software and Affected Versions Uber Kraken versions 0.1.0 through 0.1.29 Description An issue exists where the application fails to validate the tag parameter in the '/tags/tag' endpoint. This allows unauthenticated attackers to perform directory traversal by using...