1693 matches found
OneUptime < 10.0.21 - Path Traversal
OneUptime 10.0.21 contains a path traversal caused by unsanitized componentName parameter in /workflow/docs/:componentName endpoint, letting unauthenticated attackers read arbitrary files from the server filesystem. id: CVE-2026-30958 info: name: OneUptime 10.0.21 - Path Traversal author:...
webp_server_go 0.4.0 - Path Traversal
webpservergo 0.4.0 contains a path traversal caused by insufficient sanitization in file handling, letting attackers read arbitrary files on the server, exploit requires attacker to send crafted requests. id: CVE-2021-46104 info: name: webpservergo 0.4.0 - Path Traversal author: pikpikcu severity...
Mockoon < 9.2.0 - Path Traversal
Mockoon before 9.2.0 contains a path traversal and local file inclusion caused by unsafe templating of server filenames from user input, letting attackers read arbitrary files on the mock server filesystem, exploit requires crafted request. id: CVE-2025-59049 info: name: Mockoon 9.2.0 - Path...
Duplicate Advisory: Mistune: Path Traversal and XSS in Include directive
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-h7ww-273w-6cm8. This link is maintained to preserve external references. Original Description Mistune before 3.3.0 contains a path traversal vulnerability in the Include directive that allows attackers to read...
CVE-2022-51022
YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory...
CVE-2018-25438
Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...
EUVD-2022-56066
YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory...
CVE-2022-51022
The YiShaAdmin software (versions 2.2 through 3.1 ) is susceptible to an unauthenticated path traversal vulnerability within the /admin/File/DownloadFile endpoint. The root cause allows attackers to use directory traversal sequences in the filePath parameter to read or delete arbitrary system fil...
EUVD-2018-21962
Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...
CVE-2018-25438
Intermesh Group-Office versions 3.3.0 before 3.5.5 are vulnerable to an unauthenticated path traversal vulnerability in the compress.php component. The flaw allows remote attackers to read arbitrary files by manipulating the file parameter with ../ sequences, which are appended to the cache path ...
CVE-2017-20287
The Javo Spot theme for WordPress (versions before 3.0.0 ) is vulnerable to a path traversal flaw. This vulnerability exists in the jvfrm_spot_get_json AJAX action, where an unauthenticated attacker can use the fn parameter to read arbitrary files. Specifically, by sending a GET request to /wp-ad...
VulnCheck KEV: CVE-2022-51022
YiShaAdmin 2.2 through 3.1, fixed in commit 025b062, contains an unauthenticated path traversal vulnerability in the /admin/File/DownloadFile endpoint that allows attackers to read and delete arbitrary files via the filePath parameter. Attackers can send crafted GET requests with directory...
VulnCheck KEV: CVE-2018-25438
Intermesh Group-Office 3.3.0 before 3.5.5 contains an unauthenticated path traversal vulnerability in compress.php that allows remote attackers to read arbitrary files by manipulating the 'file' parameter. Attackers can send GET requests to /compress.php with '../' sequences in the 'file'...
CVE-2016-20104
EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd,...
CVE-2016-20104 EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.php
EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd,...
EUVD-2016-10921
EyeLock nano NXT 3.05.1193, 3.04.1108, 3.03.944, and 3.01.646 contain a path traversal vulnerability that allows unauthenticated attackers to read arbitrary files via the 'path' parameter. Attackers can send GET requests to /scripts/logdownload.php with traversal sequences like ../../etc/passwd,...
CVE-2016-20104
The EyeLock nano NXT (versions 3.05.1193 , 3.04.1108 , 3.03.944 , and 3.01.646 ) is vulnerable to a path traversal vulnerability. An unauthenticated attacker can read arbitrary local system files by sending GET requests to /scripts/logdownload.php using the 'path' parameter with traversal sequenc...
CVE-2026-112262
RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...
CVE-2026-112262 RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors
RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...
CVE-2026-112262 RisingWave before 3.1.0 Missing Authorization via posix_fs and fs Connectors
RisingWave before 3.1.0 contains a missing authorization vulnerability that allows low-privileged SQL users to read and write arbitrary server files by creating posixfs sources and fs sinks. Attackers holding schema CREATE privilege can set posixfs.root or fs.path to any directory to read...