Lucene search
+L

13358 matches found

NVD
NVD
added 2026/07/08 3:16 p.m.13 views

CVE-2026-49145

App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up the directory hierarchy from the current directory for a project .ackrc and loads its options. The project-source option blocklist in App::Ack::ConfigLoader does not include...

7.5CVSS0.00488EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/08 3:16 p.m.8 views

UBUNTU-CVE-2026-49145

App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up the directory hierarchy from the current directory for a project .ackrc and loads its options. The project-source option blocklist in App::Ack::ConfigLoader does not include...

7.5CVSS6.2AI score0.00488EPSS
SaveExploits0References3
ATTACKERKB
ATTACKERKB
added 2026/07/08 2:55 p.m.10 views

CVE-2026-49145

App::Ack versions through 3.10.0 for Perl read arbitrary files via --files-from in a project .ackrc. ack searches up the directory hierarchy from the current directory for a project .ackrc and loads its options. The project-source option blocklist in App::Ack::ConfigLoader does not include...

7.5CVSS6AI score0.00488EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/08 6:16 a.m.25 views

CVE-2026-14500

The Bulk Order Update for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 1.6. This is due to the bouwfetchcsvdata AJAX handler being registered on the wpajaxnopriv hook with no capability or nonce check, and passing the attacker-supplied...

5.3CVSS0.00472EPSS
SaveExploits0References4
CVE
CVE
added 2026/07/08 5:34 a.m.31 views

CVE-2026-14500

The CVE-2026-14500 entry concerns the Bulk Order Update for WooCommerce plugin for WordPress (

5.3CVSS6.1AI score0.00472EPSS
SaveExploits0References4
EUVD
EUVD
added 2026/07/08 5:34 a.m.20 views

EUVD-2026-42175

The Bulk Order Update for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 1.6. This is due to the bouwfetchcsvdata AJAX handler being registered on the wpajaxnopriv hook with no capability or nonce check, and passing the attacker-supplied...

5.3CVSS6.1AI score0.00472EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2026/07/08 5:34 a.m.43 views

CVE-2026-14500 Bulk Order Update for WooCommerce <= 1.6 - Unauthenticated Arbitrary File Read via 'csv_url' Parameter

The Bulk Order Update for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 1.6. This is due to the bouwfetchcsvdata AJAX handler being registered on the wpajaxnopriv hook with no capability or nonce check, and passing the attacker-supplied...

5.3CVSS0.00472EPSS
SaveExploits0References4
ATTACKERKB
ATTACKERKB
added 2026/07/08 5:34 a.m.12 views

CVE-2026-14500

The Bulk Order Update for WooCommerce plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 1.6. This is due to the bouwfetchcsvdata AJAX handler being registered on the wpajaxnopriv hook with no capability or nonce check, and passing the attacker-supplied...

5.3CVSS6.1AI score0.00472EPSS
SaveExploits0References5
CVE
CVE
added 2026/07/08 4:30 a.m.37 views

CVE-2026-14244

The CVE-2026-14244 entry concerns the Jssor Slider WordPress plugin. Vulnerable component: directory traversal via the url parameter in all versions up to 3.1.24. Root cause: improper handling of path input allows unauthenticated attackers to read arbitrary server files containing sensitive infor...

7.5CVSS6AI score0.01028EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2026/07/08 4:30 a.m.45 views

CVE-2026-14244 Jssor Slider by jssor.com <= 3.1.24 - Unauthenticated Arbitrary File Read via 'url' Parameter

The Jssor Slider by jssor.com plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.1.24 via the 'url' parameter parameter. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain...

7.5CVSS0.01028EPSS
SaveExploits0References7
Positive Technologies
Positive Technologies
added 2026/07/08 12:00 a.m.27 views

PT-2026-56323

Name of the Vulnerable Software and Affected Versions Bulk Order Update for WooCommerce versions prior to 1.7 Description An unauthenticated arbitrary file read exists due to the bouw fetch csv data AJAX handler being registered on the wp ajax nopriv hook without capability or nonce checks. The...

5.3CVSS5.5AI score0.00472EPSS
SaveExploits0References9
Github Security Blog
Github Security Blog
added 2026/07/07 11:42 p.m.20 views

Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

Click here to jump to the Simplified Chinese version 点击跳转到简体中文版本 Goploy System Arbitrary File Read Vulnerability Basic Information - Vulnerability Name: Goploy Endpoints Arbitrary File Read via Path Traversal - Vulnerability Type: Path Traversal CWE-22 / Arbitrary File Read - Affected Product:...

6.4AI score
SaveExploits0References2Affected Software1
OSV
OSV
added 2026/07/07 11:42 p.m.16 views

GHSA-4G5X-HCWM-82JW Goploy: Arbitrary File Read via Path Traversal in /deploy/fileDiff allows Remote Server Compromise

Click here to jump to the Simplified Chinese version 点击跳转到简体中文版本 Goploy System Arbitrary File Read Vulnerability Basic Information - Vulnerability Name: Goploy Endpoints Arbitrary File Read via Path Traversal - Vulnerability Type: Path Traversal CWE-22 / Arbitrary File Read - Affected Product:...

7.7CVSS6.4AI score
SaveExploits0References2
OSV
OSV
added 2026/07/07 4:52 p.m.11 views

GO-2026-5762 Wish has SCP Path Traversal that allows arbitrary file read/write in charm.land/wish

Wish has SCP Path Traversal that allows arbitrary file read/write in charm.land/wish...

9.6CVSS6AI score0.00393EPSS
SaveExploits1References2
OSV
OSV
added 2026/07/07 4:41 p.m.16 views

GO-2026-5923 Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder

Coder's workspace agent API insecure redirect handling allowed cross-agent file read and write in github.com/coder/coder...

5.9AI score
SaveExploits0References2
CVE
CVE
added 2026/07/07 4:37 p.m.63 views

CVE-2026-14904

The CVE concerns AWS RES: an improper link resolution before file access (CWE-59) in Auth.GetUserPrivateKey could allow an authenticated remote user to substitute their SSH private key (~/.ssh/id_rsa) with a symlink and read arbitrary host files on the cluster-manager EC2 instance. Since the clus...

7.1CVSS6.2AI score0.0057EPSS
SaveExploits0References2
OSV
OSV
added 2026/07/07 4:37 p.m.14 views

CVE-2026-14904 RES Auth.GetUserPrivateKey Arbitrary File Read

AWS Research and Engineering Studio RES is an open-source solution that enables researchers and engineers to create and manage secure virtual desktops and computing resources on AWS. Improper link resolution before file access issue CWE-59 in the Auth.GetUserPrivateKey API. An authenticated remot...

7.1CVSS6.2AI score
SaveExploits0References4
OSV
OSV
added 2026/07/07 4:03 p.m.17 views

PYSEC-2026-1787 picklescan has Arbitrary file read using `io.FileIO`

Summary Unsafe pickle deserialization allows unauthenticated attackers to read arbitrary server files and perform SSRF. By chaining io.FileIO and urllib.request.urlopen, an attacker can bypass RCE-focused blocklists to exfiltrate sensitive data example: /etc/passwd to an external server. Details...

8.7CVSS6AI score0.00509EPSS
SaveExploits0References9
OSV
OSV
added 2026/07/07 4:03 p.m.15 views

PYSEC-2026-2040 Weblate has an arbitrary file read via symbolic links

Impact It was possible to read arbitrary files from the server file system using crafted symbolic links in the repository. Resources Thanks to Jason Marcello for responsible disclosure...

7.7CVSS6AI score0.00399EPSS
SaveExploits0References8
OSV
OSV
added 2026/07/07 4:03 p.m.15 views

PYSEC-2026-1700 NiceGUI has a path traversal in app.add_media_files() allows arbitrary file read

Summary A directory traversal vulnerability in NiceGUI's App.addmediafiles allows a remote attacker to read arbitrary files on the server filesystem. Details Hello, I am Seungbin Yang, a university student studying cybersecurity. While reviewing the source code of the repository, I discovered a...

7.5CVSS6.2AI score0.01095EPSS
SaveExploits1References6
Rows per page
Query Builder