EUVD-2023-50011

Malicious code in bioql PyPI...

EUVD-2023-36378

Malicious code in bioql PyPI...

EUVD-2025-19323

Malicious code in bioql PyPI...

EUVD-2024-39140

Malicious code in bioql PyPI...

CVE-2025-11182

The CVE-2025-11182 entry concerns GTONE ChangeFlow, where an improper pathname restriction (path traversal) combined with missing integrity checks on downloaded code exists in versions up to 9.0.1.1. Affected component: ChangeFlow download path handling; root cause: insufficient restriction of de...

CVE-2025-59002

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in SeaTheme BM Content Builder bm-builder allows Path Traversal.This issue affects BM Content Builder: from n/a through 3.16.3.3...

PT-2025-39534

Name of the Vulnerable Software and Affected Versions SeaTheme BM Content Builder affected versions not specified Description A Path Traversal issue exists in SeaTheme BM Content Builder. The vulnerability is due to improper limitation of a pathname to a restricted directory. This allows attacker...

PT-2025-39365

Name of the Vulnerable Software and Affected Versions Saysis Web Portal versions 3.1.9 through 3.2.0 Description A Path Traversal issue exists in Saysis Web Portal. The issue allows unauthorized access due to improper limitation of a pathname to a restricted directory. Recommendations Update to...

CVE-2025-54261 ColdFusion | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

ColdFusion versions 2025.3, 2023.15, 2021.21 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability that could lead to arbitrary code execution by an attacker. The victim must have optional configurations enabled. Scope is changed...

CVE-2025-25048

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...

CVE-2025-25048

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...

CVE-2025-25048

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...

CVE-2025-25048 IBM Jazz Foundation path traversal

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...

CVE-2025-25048

CVE-2025-25048 affects IBM Engineering Lifecycle Management - Jazz Foundation (versions 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002). The issue is a Relative Path Traversal caused by improper neutralization of sequences that can resolve to a restricte...

CVE-2025-58072

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in SS1 Ver.16.0.0.10 and earlier Media version:16.0.0a and earlier. If this vulnerability is exploited, arbitrary files may be viewed by a remote unauthenticated attacker...

CVE-2025-58072

Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in SS1 Ver.16.0.0.10 and earlier Media version:16.0.0a and earlier. If this vulnerability is exploited, arbitrary files may be viewed by a remote unauthenticated attacker...

CVE-2025-58072

CVE-2025-58072 affects SS1 (DOS Co., Ltd.) SS1 Ver.16.0.0.10 and earlier and SS1 Media 16.0.0a and earlier. The vulnerability is a path traversal flaw caused by an improperly restricted pathname, allowing a remote unauthenticated attacker to view arbitrary files. Multiple connected sources (Red H...

PT-2025-34978

Name of the Vulnerable Software and Affected Versions: SS1 versions 16.0.0.10 and earlier SS1 Media versions 16.0.0a and earlier Description: An improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists. This allows a remote, unauthenticated attacker to view...

CVE-2025-52450

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Salesforce Tableau Server on Windows, Linux abdoc api - create-data-source-from-file-upload modules allows Absolute Path Traversal.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12,...

CVE-2025-54927

CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause unauthorized access to sensitive files when an authenticated attackers uses a crafted path input that is processed by the system...