54382 matches found
CVE-2026-10094: Improper Limitation of a Pathname to a Restricted Directory
A Path Traversal vulnerability affecting SOLIDWORKS Visualize from SOLIDWORKS Desktop Release 2024 through SOLIDWORKS Desktop Release 2026 could allow an attacker to write arbitrary files on the server...
PT-2026-50307
Subscriber Arbitrary File Upload in Webenvo = 0.0.6 versions...
PT-2026-50313
CP Client Arbitrary File Download in Client Portal Pro = 5.6.2 versions...
PT-2026-50563
Name of the Vulnerable Software and Affected Versions Postman Download Module affected versions not specified Description The postman download module fails to sanitize the workspace name field retrieved from the Postman API when constructing local directory paths. A malicious workspace name...
PT-2026-50275
Subscriber Arbitrary File Upload in PT Luxa Addons = 1.2.2 versions...
PT-2026-50276
Subscriber Arbitrary File Deletion in WPBot Pro Wordpress Chatbot = 13.6.5 versions...
PT-2026-50287
Subscriber Arbitrary File Download in Woocommerce Book Price = 1.3 versions...
PT-2026-50267
Subscriber Arbitrary File Upload in Grip = 1.0.9 versions...
PT-2026-50344
Unauthenticated Arbitrary File Upload in SigmaForms Pro – AI Generated Forms = 1.4.5 versions...
PT-2026-50412
Unauthenticated Arbitrary File Deletion in WorkScout-Core = 1.7.11 versions...
PT-2026-50318
Subscriber Arbitrary File Upload in Ecommerce Zone = 0.9.7 versions...
PT-2026-50298
Unauthenticated Arbitrary File Deletion in BookPro = 1.1.0 versions...
PT-2026-50281
Subscriber Arbitrary File Upload in Restaurt = 1.0.4 versions...
PT-2026-50320
Subscriber Arbitrary File Upload in Charity Zone = 1.1.1 versions...
CVE-2026-40724: Improper Limitation of a Pathname to a Restricted Directory
CP Client Arbitrary File Download in Client Portal Pro = 5.6.2 versions...
CVE-2026-9690: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Download in WP Media folder Addon = 4.0.1 versions...
CVE-2026-54193: Improper Limitation of a Pathname to a Restricted Directory
Contributor Arbitrary File Deletion in Fusion Builder = 3.15.4 versions...
CVE-2026-52716: Improper Limitation of a Pathname to a Restricted Directory
Unauthenticated Arbitrary File Deletion in WorkScout-Core = 1.7.11 versions...
CVE-2026-47277: Improper Limitation of a Pathname to a Restricted Directory
Runtipi is a personal homeserver orchestrator. In versions 4.9.1 through 4.9.3, Runtipi serves marketplace app logos from files inside cloned app-store repositories through an unauthenticated endpoint, which leads to arbitrary file read through app-store logo symlinks. The path guard checks only...