CVE-2024-57966

libarchiveplugin.cpp in KDE ark before 24.12.0 can extract to an absolute path from an archive...

CVE-2025-24611

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Smackcoders Inc., WP Ultimate Exporter wp-ultimate-exporter allows Absolute Path Traversal.This issue affects WP Ultimate Exporter: from n/a through = 2.9...

Ivanti EPM Absolute Path Traversal Vulnerability (CNVD-2025-30744)

Ivanti EPM is a comprehensive endpoint management solution developed by Ivanti. Ivanti EPM suffers from an absolute path traversal vulnerability that can be exploited by an attacker to obtain sensitive information...

Ivanti EPM Absolute Path Traversal Vulnerability

Ivanti EPM is a comprehensive endpoint management solution developed by Ivanti. Ivanti EPM suffers from an absolute path traversal vulnerability that can be exploited by an attacker to obtain sensitive information...

CVE-2024-13159

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-13160

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-10811

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-10811

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-13159

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-13160

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-13161

CVE-2024-13161 concerns Ivanti Endpoint Manager (EPM) where an absolute path traversal/credential-coercion issue was reported in the GetHashForSingleFile endpoint. The NUCLEI template confirms unauthenticated access could coerce the EPM machine account credential by triggering NTLM authentication...

EUVD-2024-33593

Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to leak sensitive information...

CVE-2024-10811

Ivanti Endpoint Manager (EPM) is affected by CVE-2024-10811, an absolute path traversal vulnerability that allows a remote unauthenticated attacker to leak sensitive information. The issue is reported for EPM versions before the 2024 January Security Update and before 2022 SU6 January 2025 Securi...

Ivanti EPM 安全漏洞

Ivanti EPM is a one-stop-shop for managing user profiles and all client devices from Ivanti, USA. A security vulnerability exists in Ivanti EPM that stems from the inclusion of an absolute path traversal. Allowing a remote unauthenticated attacker to exploit the vulnerability could reveal sensiti...

Ivanti EPM 安全漏洞

Ivanti EPM is a comprehensive endpoint management solution developed by Ivanti. Ivanti EPM suffers from an absolute path traversal vulnerability that can be exploited by an attacker to obtain sensitive information...

Ivanti EPM 安全漏洞

Ivanti EPM is a one-stop-shop for managing user profiles and all client devices from Ivanti, USA. A security vulnerability exists in Ivanti EPM that stems from the inclusion of an absolute path traversal. Allowing a remote unauthenticated attacker to exploit the vulnerability could reveal sensiti...

Ivanti EPM 安全漏洞

Ivanti EPM is a comprehensive endpoint management solution developed by Ivanti. Ivanti EPM suffers from an absolute path traversal vulnerability that can be exploited by an attacker to obtain sensitive information...

PT-2025-1134

Name of the Vulnerable Software and Affected Versions Ivanti EPM versions before 2024 January-2025 Security Update Ivanti EPM versions before 2022 SU6 January-2025 Security Update Description The issue is related to an absolute path traversal in Ivanti EPM, which can be exploited by a remote...

CVE-2024-12806

A post-authentication absolute path traversal vulnerability in SonicOS management allows a remote attacker to read an arbitrary file...

CVE-2024-11635

The WordPress File Upload plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 4.24.12 via the 'wfuABSPATH' cookie parameter. This makes it possible for unauthenticated attackers to execute code on the server...