Lucene search
+L

12532 matches found

EUVD
EUVD
added 2026/08/23 12:30 a.m.7 views

EUVD-2026-64606

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.9.8 via the getimagesrcinbase64 function. This makes it possible for authenticated attackers, with...

6.5CVSS5.7AI score
SaveExploits0References7
EUVD
EUVD
added 2026/08/23 12:30 a.m.8 views

EUVD-2026-64603

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/id/archive, /containers/id/export, /containers/id/logs, and /containers/id/top to read arbitrary files a...

8.3CVSS5.6AI score
SaveExploits1References7
CVE
CVE
added 2026/08/22 11:27 p.m.14 views

CVE-2026-18027

The WebToffee WooCommerce PDF Invoices, Packing Slips, Delivery Notes & Shipping Labels plugin for WordPress is vulnerable to Directory Traversal in all versions up to and including 4.9.8 . The flaw resides in the get_image_src_in_base64 function, which processes the customer_note parameter witho...

6.5CVSS5.7AI score
SaveExploits0References6
CVE
CVE
added 2026/08/22 2:12 p.m.8 views

CVE-2026-70626

NLTK versions before 3.9.4 are affected by a symlink escape vulnerability in CorpusReader.open() . The root cause is that path validation is purely lexical and does not resolve symlinks, allowing a local attacker to place a symlink inside the corpus root to read arbitrary files outside the intend...

8.6CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/22 2:12 p.m.6 views

EUVD-2026-64314

NLTK versions before 3.9.4 contain a symlink escape vulnerability in CorpusReader.open that allows local attackers to read arbitrary files outside the corpus root. The vulnerability exists because path validation is lexical and does not account for symlink resolution, enabling attackers to place...

8.6CVSS5.5AI score
SaveExploits0References2
CVE
CVE
added 2026/08/22 2:12 p.m.7 views

CVE-2026-65915

NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open() where the sandbox validation check compares a normalized path against itself, rendering the security check permanently inert. An attacker with low privileges can pass file:// URLs to nltk.data.load() to read arbitrary...

7.1CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/22 2:12 p.m.6 views

EUVD-2026-64309

NLTK versions before 3.10.0 contain a logic bug in FileSystemPathPointer.open where the sandbox validation check compares a normalized path against itself, making the security check permanently inert. Attackers can pass file:// URLs to nltk.data.load to read arbitrary files accessible to the...

7.1CVSS5.5AI score
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/22 2:12 p.m.3 views

CVE-2026-63312

NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open directly instead of pathsec.open. Attackers who control the fileid argument can read arbitrary local files regardless of the ENFORCE setting,...

8.7CVSS5.5AI score
SaveExploits0
CVE
CVE
added 2026/08/22 2:12 p.m.9 views

CVE-2026-63312

NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView . The root cause is that the component calls builtins.open() directly instead of the sandboxed pathsec.open() , effectively bypassing the pathsec.ENFORCE security mechanism. An attacker who controls t...

8.7CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/22 2:12 p.m.5 views

EUVD-2026-64333

NLTK before 3.10.0 contains an arbitrary local file read vulnerability in StreamBackedCorpusView that bypasses pathsec.ENFORCE by calling builtins.open directly instead of pathsec.open. Attackers who control the fileid argument can read arbitrary local files regardless of the ENFORCE setting,...

8.7CVSS5.5AI score
SaveExploits0References2
CVE
CVE
added 2026/08/22 2:12 p.m.11 views

CVE-2026-62384

NLTK (Python Natural Language Toolkit) versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader . An attacker who can place symlinks with names containing no path separators inside a corpus subdirectory can bypass the path validation guard and read arbitrary XML files...

8.7CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/22 2:12 p.m.5 views

EUVD-2026-64337

NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader that allows attackers to parse XML files outside the corpus root by supplying unsafe selectors or poisoned index state. Attackers can exploit framebyname, doc, lu, and header methods wi...

8.2CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/22 2:12 p.m.5 views

EUVD-2026-64338

NLTK versions before 3.10.2 contain a symlink-based sandbox bypass in FramenetCorpusReader that allows attackers to read arbitrary XML files outside the corpus root. Attackers can place symlinks with names containing no path separators inside the corpus subdirectory, which pass the path validatio...

8.7CVSS5.5AI score
SaveExploits0References2
CVE
CVE
added 2026/08/22 2:12 p.m.10 views

CVE-2026-62385

NLTK versions before 3.10.0 contain a path traversal vulnerability in FramenetCorpusReader and NKJPCorpusReader . By supplying unsafe selectors or poisoned index state, an attacker can exploit the frame_by_name, doc, lu, and header methods to parse XML files outside the corpus root, enabling arbi...

8.2CVSS5.5AI score
SaveExploits0References2
CVE
CVE
added 2026/08/22 2:12 p.m.10 views

CVE-2026-62383

nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in the IPIPANCorpusReader component. The root cause is a complete bypass of nltk.pathsec validation: an attacker with local access can place a symlink in the corpus root directory and invoke channels(), domains(...

6.8CVSS5.5AI score
SaveExploits0References2
EUVD
EUVD
added 2026/08/22 2:12 p.m.6 views

EUVD-2026-64339

nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely. Attackers can place a symlink in the corpus root directory and read arbitrary files accessible to the process by calling channels,...

6.8CVSS5.5AI score
SaveExploits0References2
Debian CVE
Debian CVE
added 2026/08/22 2:12 p.m.3 views

CVE-2026-62383

nltk versions before 3.10.2 contain a symlink-based arbitrary file read vulnerability in IPIPANCorpusReader methods that bypass nltk.pathsec validation entirely. Attackers can place a symlink in the corpus root directory and read arbitrary files accessible to the process by calling channels,...

6.8CVSS5.6AI score
SaveExploits0
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.33 views

Error Log Viewer By WP Guru <= 1.0.1.3 - Missing Authorization to Arbitrary File Read

The Error Log Viewer By WP Guru plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.0.1.3 via the wpajaxnoprivelvwplogdownload AJAX action. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, whi...

7.5CVSS8.2AI score0.46858EPSS
SaveExploits1References4
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.8 views

Audiobookshelf - Authentication Bypass

Audiobookshelf contains a path traversal caused by improper authentication-exemption check on URL-encoded paths in server/routers/Auth.js, letting unauthenticated attackers read arbitrary files, exploit requires crafted URL with encoded traversal sequences. id: CVE-2026-71209 info: name:...

7.5CVSS5.4AI score0.0176EPSS
SaveExploits0References2
Nuclei
Nuclei
added 2026/08/22 12:19 p.m.14 views

Microweber CMS <= 2.0.20 - Unauthenticated Arbitrary File Read

Microweber CMS = 2.0.20 contains a path traversal vulnerability caused by failure to normalize path query parameter in static file controller, letting unauthenticated remote attackers read arbitrary files. id: CVE-2026-65694 info: name: Microweber CMS = 2.0.20 - Unauthenticated Arbitrary File Rea...

8.7CVSS5.5AI score0.02456EPSS
SaveExploits1References2
Rows per page
Query Builder