PYSEC-2025-146

An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull...

PYSEC-2025-146

An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull...

CVE-2025-44779

An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull...

Incorrect Permission Assignment for Critical Resource

Overview Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource via the /api/pull endpoint. An attacker can remove files from the file system by sending a specially crafted packet to this endpoint. Remediation Upgrade...

CVE-2025-44779

An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull...

CVE-2025-44779

An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull...

PT-2025-32263 · Ollama · Ollama

Name of the Vulnerable Software and Affected Versions: Ollama version 0.1.33 Description: An issue allows attackers to delete arbitrary files by sending a crafted packet to the /api/pull endpoint. Recommendations: Update to a newer version that contains a fix for this issue. As a temporary...

CVE-2025-44779

An issue in Ollama v0.1.33 allows attackers to delete arbitrary files via sending a crafted packet to the endpoint /api/pull...

Ollama 安全漏洞

Ollama is a large language model that can be started and run locally from the Ollama open source. A security vulnerability exists in Ollama version v0.1.33, which stems from specially crafted packets that can lead to arbitrary file deletion...

CVE-2025-44779

CVE-2025-44779 affects Ollama v0.1.33. A crafted packet to the /api/pull endpoint allows deletion of arbitrary files on the server. The issue has multiple public disclosures (GitHub advisory, OSV, Red Hat, NVD, CNNVD). Exploitation details indicate local access with user interaction required; CVS...

CVE-2025-21015

Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege...

CVE-2025-21015

Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege...

CVE-2025-21015

CVE-2025-21015 affects Document scanner prior to SMR Aug-2025 Release 1. Root cause is a path traversal in the scanner that can allow a local attacker to delete files using the scanner’s privileges. Affected version details are tied to prior-to-Release 1; mitigation is to update to SMR Aug-2025 R...

CVE-2025-21015

Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege...

CVE-2025-21015

Path Traversal in Document scanner prior to SMR Aug-2025 Release 1 allows local attackers to delete file with Document scanner's privilege...

PT-2025-32106 · Unknown · Document Scanner

Name of the Vulnerable Software and Affected Versions: Document scanner versions prior to SMR Aug-2025 Release 1 Description: A path traversal issue exists in Document scanner prior to SMR Aug-2025 Release 1, allowing local attackers to delete files with Document scanner’s privileges...

WordPress Woffice Core plugin <= 5.4.26 - Authenticated (Contributor+) Arbitrary File Deletion vulnerability

Authenticated Contributor+ Arbitrary File Deletion vulnerability discovered by Trương Hữu Phúc truonghuuphuc in WordPress Plugin Woffice Core versions = 5.4.26...

CVE-2025-7694

The Woffice Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wofficefilemanagerdelete function in all versions up to, and including, 5.4.26. This makes it possible for authenticated attackers, with Contributor-level access and abov...

The vulnerabilities of the Support-per-file encoding() and Show origin of this line() functions in the Gitk browser allow attackers to gain unauthorized access to create and delete user files.

The vulnerability of the Support per-file encoding and Show origin of this line functions in the Gitk browser exists because measures to eliminate special elements are not taken. Exploiting this vulnerability can allow an intruder to gain unauthorized access to create and delete user files...

CVE-2014-125125

A path traversal vulnerability exists in A10 Networks AX Loadbalancer versions 2.6.1-GR1-P5, 2.7.0, and earlier. The vulnerability resides in the handling of the filename parameter in the /xml/downloads endpoint, which fails to properly sanitize user input. An unauthenticated attacker can exploit...