CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

71029 matches found

PyPA•added 2026/09/10 9:44 a.m.•30 views

Accelerate path traversal and denial of service via sharded checkpoint weight_map entries

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in loadcheckpointinmodel and loadcheckpointanddispatch functions that fail to sanitize weightmap entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read...

7.1CVSS7.4AI score0.00187EPSS

SaveExploits0References8Affected Software1

GithubExploit•added 2026/09/10 9:25 a.m.•46 views

Plex_Vuln_PoCs

Plex Media Server Patch-Diff Vulnerability PoCs This reposito...

6.1AI score

SaveExploits0

Snyk•added 2026/09/10 8:56 a.m.•16 views

Relative Path Traversal

Overview org.freemarker:freemarker is a "template engine"; a generic tool to generate text output anything from HTML to auto generated source code based on templates. Affected versions of this package are vulnerable to Relative Path Traversal through the ClassTemplateLoader and WebappTemplateLoad...

7.5CVSS6AI score0.00854EPSS

SaveExploits0References2

Snyk•added 2026/09/10 8:56 a.m.•15 views

Relative Path Traversal

Overview Affected versions of this package are vulnerable to Relative Path Traversal through the ClassTemplateLoader and WebappTemplateLoader template-loading paths. An attacker can force loading of templates outside the intended base package or webapp subdirectory by supplying a malformed locale...

7.5CVSS6AI score0.00854EPSS

SaveExploits0References2

GithubExploit•added 2026/09/10 7:17 a.m.•36 views

Exploit for CVE-2026-53519

Lab CVE-2026-53519 - Nezha Dashboard pre-auth path traversal...

9.1CVSS8.4AI score0.02286EPSS

SaveExploits2

Github Security Blog•added 2026/09/10 6:31 a.m.•20 views

Apache FreeMarker template loading mechanism vulnerable to path traversal

Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled it's by default enabled. This issue affects Apache FreeMarker from 2.2.0...

6.1AI score0.00854EPSS

SaveExploits0References6Affected Software1

osv_ghsa•added 2026/09/10 6:31 a.m.•35 views

GHSA-27J2-H3M2-8237 Apache FreeMarker template loading mechanism vulnerable to path traversal

9.1CVSS6.1AI score0.00854EPSS

SaveExploits0References6

osv_debian•added 2026/09/10 6:17 a.m.•18 views

DEBIAN-CVE-2026-84939

9.1CVSS6.1AI score0.00854EPSS

SaveExploits0References1

NVD•added 2026/09/10 6:17 a.m.•33 views

CVE-2026-84939

9.1CVSS0.00854EPSS

SaveExploits0References2

UbuntuCve•added 2026/09/10 6:17 a.m.•21 views

CVE-2026-84939

9.1CVSS6.2AI score0.00854EPSS

SaveExploits0References3

osv_ubuntu•added 2026/09/10 6:17 a.m.•21 views

UBUNTU-CVE-2026-84939

9.1CVSS6.1AI score0.00854EPSS

SaveExploits0References4

Mend•added 2026/09/10 5:07 a.m.•13 views

CVE-2026-84939

9.3CVSS6.1AI score0.00854EPSS

SaveExploits0References6

EUVD•added 2026/09/10 5:07 a.m.•25 views

EUVD-2026-75251

9.1CVSS6.2AI score0.00854EPSS

SaveExploits0References1

CVE•added 2026/09/10 5:07 a.m.•210 views

CVE-2026-84939

Apache FreeMarker versions 2.2.0 through 2.3.34 are vulnerable to a path traversal vulnerability in the template loading mechanism. This flaw occurs when an attacker provides a specially crafted, malformed locale identifier while the localized lookup configuration setting is enabled (which is the...

6.1AI score0.00854EPSS

SaveExploits0References2Affected Software1

Cvelist•added 2026/09/10 5:07 a.m.•56 views

CVE-2026-84939 Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacks

0.00854EPSS

SaveExploits0References1

Debian CVE•added 2026/09/10 5:07 a.m.•23 views

CVE-2026-84939

6.1AI score0.00854EPSS

SaveExploits0

Cvelist•added 2026/09/10 3:40 a.m.•53 views

CVE-2026-18386 WP BackItUp Community Edition <= 2.1.0 - Authenticated (Administrator+) Path Traversal to Arbitrary File Read via 'backup_file' Parameter

The WP BackItUp Community Edition plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.1.0 via the 'backupfile' parameter parameter. This makes it possible for authenticated attackers, with administrator-level access and above, to read the contents of...

4.9CVSS0.00725EPSS

SaveExploits0References9

osv_cleanstart•added 2026/09/10 3:04 a.m.•16 views

CLEANSTART-2026-FD87409 Previously, resolving relative paths containing parent directory ('

Multiple security vulnerabilities affect the nats-streaming package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...

9.8CVSS6.3AI score0.00568EPSS

SaveExploits0References18

osv_cleanstart•added 2026/09/10 2:49 a.m.•18 views

CLEANSTART-2026-OB24504 Previously, resolving relative paths containing parent directory ('

Multiple security vulnerabilities affect the kube-state-metrics package. Previously, resolving relative paths containing parent directory '. See references for individual vulnerability details...

9.8CVSS6.3AI score0.00692EPSS

SaveExploits0References23

SUSE CVE•added 2026/09/10 1:48 a.m.•14 views

SUSE CVE-2026-86251

h3 versions before 1.15.9 contain a path traversal vulnerability in the serveStatic utility. A double-decoding flaw allows a request path containing double-encoded dot sequences e.g. %252e%252e to be decoded to %2e%2e, which survives resolveDotSegments because that function only checks for litera...

8.2CVSS5.8AI score0.00428EPSS

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by