Sqlalchemy Mako Path Traversal

The vulnerability of the Sqlalchemy mako Python template library relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Dulwich Git Path Traversal

The vulnerability of the Python library for working with Git Dulwich repositories is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

TOTOLINK X5000R exportOvpn Function Unauthorized Access

The vulnerability of the exportOvpn function in the /web/cgi-bin/cstecgi.cgi component of the TOTOLINK X5000R router microprogramming system is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to ga...

Open WebUI sanitize_proxy_path function Data Compromise

The vulnerability of the sanitizeproxypath function backend/openwebui/routers/terminals.py in the Open WebUI AI-based web interface is related to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise the...

ROS-20260713-73-0025

The vulnerability in Python-Relenv relates to incorrect path name restrictions for the restricted access catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

CVE-2026-11720 Path Traversal in googleapis/mcp-toolbox HTTP Tool URL Builder

A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When constructing downstream API requests, the URL builder substitutes user-controlled pathParams into the configured tool path and parses the resulting string as a relative URL. While it checks that the...

CVE-2026-6865 Improper Limitation of a Pathname to a Restricted Directory Vulnerability on Multiple Products

CWE-22: Improper Limitation of a Pathname to a Restricted Directory “Path Traversal” vulnerability that could cause unauthorized access to sensitive files when user-supplied input is improperly handled during server-side file path processing...

FortiOS FortiPAM FortiProxy Path Traversal

The vulnerabilities of the FortiOS operating system, the FortiPAM account management system, and the FortiProxy proxy server for protection against internet attacks are related to incorrect restrictions on the path to the restricted directory. Exploiting these vulnerabilities could allow attacker...

Adobe Commerce Path Traversal Vulnerability (CNVD-2026-16594)

Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. A path traversal vulnerability exists in Adobe Commerce that could be exploited by an attacker to access unauthorized files or directories outside of th...

CVE-2025-69411

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Robert Seyfriedsberger ionCube tester plus ioncube-tester-plus allows Path Traversal.This issue affects ionCube tester plus: from n/a through = 1.3...

CVE-2025-67963

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This issue affects Movie Booking: from n/a through = 1.1.5...

Vite transformMiddleware File Read

The vulnerability of the transformMiddleware function in the @fs mechanism of the local development server for Vite applications is related to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files by...

CVE-2025-11531

HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths. This potential vulnerability was remediated with HP System Event Utility version 3.2.12 and Omen Gaming Hub version 1101.2511.101.0...

CVE-2025-40605

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences such as ../ and may access files and directories outside the intended restricted path...

CVE-2025-40605

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences such as ../ and may access files and directories outside the intended restricted path...

CVE-2025-40605

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences such as ../ and may access files and directories outside the intended restricted path...

PT-2025-47568

Name of the Vulnerable Software and Affected Versions Email Security appliance affected versions not specified Description A Path Traversal issue exists in the Email Security appliance. This allows an attacker to manipulate file system paths by injecting crafted directory-traversal sequences, suc...

OneDrive for Android Path Traversal Privilege Escalation

The vulnerability of the OneDrive for Android file sharing service is related to an incorrect limitation on the path name of the restricted access directory. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

OTP library Path Traversal

The vulnerability in theOTP library of the Erlang programming language is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow an attacker to write arbitrary files into the system...

ROS-20251006-07

The vulnerability of the pamaccess component of the access.conf file of the Linux-PAM authentication module is related to the flaws in the authentication procedure. Exploitation of the vulnerability could allow an attacker acting remotely to bypass existing security restrictions and gain access t...