EUVD-2026-95286

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...

CVE-2026-101024

Satel Netco Design versions prior to v2.1.7 are vulnerable to a relative path traversal vulnerability within the data export functionality . An authenticated user with Viewer privileges can exploit this flaw to write attacker-influenced content to file system locations accessible to the applicati...

CVE-2026-101024 Satel Netco Design Relative path traversal

Satel Netco Design versions prior to v2.1.7 contains a relative path traversal vulnerability in its data export functionality. An authenticated user with Viewer privileges could write attacker influenced content to file system locations accessible to the application service. Successful exploitati...

CVE-2026-19493 Security vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path traversal...

CVE-2026-19493

IBM Security Verify Access versions 10.0 through 10.0.9.2 and IBM Verify Identity Access versions 11.0 through 11.0.3 are vulnerable to a path traversal flaw. This vulnerability could allow a remote attacker to perform an arbitrary file write . Exploitation details are not provided in the documen...

EUVD-2026-95274

IBM Security Verify Access 10.0 through 10.0.9.2 and IBM Verify Identity Access 11.0 through 11.0.3 could allow a remote attacker to perform an arbitrary file write due to path traversal...

Important: Red Hat Security Advisory: OpenShift Container Platform 4.14.75 bug fix and security update

Red Hat OpenShift Container Platform release 4.14.75 is now available with updates to packages and images that fix several bugs and add enhancements. This release includes a security update for Red Hat OpenShift Container Platform 4.14. Red Hat Product Security has rated this update as having a...

CVE_2021-41773

Vulnerability scanner for Apache Path Traversal CVEs 2021-41773...

Exploit for CVE-2020-14882

Oracle WebLogic Console Pre-Auth RCE CVE-2020-14882, CVE-2020...

CVE-2026-107318

The @fastify/reply-from Fastify plugin (versions prior to 12.7.0 ) is vulnerable to improper certificate validation in its built-in HTTPS transports. The root cause is that these transports override the secure default by setting rejectUnauthorized to false, causing the proxy to fail to verify the...

CVE-2026-107318 @fastify/reply-from vulnerable to improper certificate validation in built-in HTTPS transports

@fastify/reply-from is a Fastify plugin that forwards requests to an upstream HTTP or HTTPS server. In versions prior to 12.7.0, all of the built-in HTTPS transports override the secure default and set rejectUnauthorized to false, so the proxy does not verify the TLS certificate of the upstream...

CVE-2026-84275

IBM Guardium Data Protection 12.2 is vulnerable to path traversal in the GIM file-upload functionality. An unauthenticated attacker could exploit this vulnerability to write arbitrary files to the Collector...

Exploit for Path Traversal in Rubyonrails Rails

Ruby on Rails Accept Header File Disclosure CVE-2019-5418...

CVE-2026-53713

A flaw was found in Envoy Gateway. An authenticated attacker with permissions to submit Lua extension policies can bypass file path restrictions by submitting paths containing redundant slashes. This flaw allows the attacker to read arbitrary files from the gateway controller container, resulting...

Exploit for Path Traversal in Unbit Uwsgi

uWSGI PHP Plugin Path Traversal CVE-2018-7490 Vulhubhttp...

GHSA-C3JG-QH8M-J3H2 CairoSVG: Quadratic-time DoS parsing a crafted SVG <path>

Summary Rendering an untrusted SVG whose contains many segments is On² CPU. A single under 1 MiB burns tens of seconds. Two independent On² sites in cairosvg/path.py: 1. Tokenizer — the path-data parser consumes the d string with a while string: loop that repeatedly slices/re-scans the remaining...

Inefficient Algorithmic Complexity

Overview Affected versions of this package are vulnerable to Inefficient Algorithmic Complexity via the path tokenizer in cairosvg/path.py, where the path function uses repeated string splitting on SVG path data, resulting in quadratic time complexity. An attacker can supply an SVG file containin...

Exploit for Path Traversal in Jenkins

Jenkins CLI Arbitrary File Read CVE-2024-23897 Vulhubhtt...

Security Bulletin: IBM i is Affected By Relative Path Traversal Vulnerability in OpenSSH [CVE-2026-59995]

Summary IBM i is vulnerable to not properly constraining the location of downloaded files when "sftp server:/path" is used CVE-2026-59995 in OpenSSH as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-59995 DESCRIPTION: sftp in OpenSSH before 10.4 does not...

CVE-2026-84275

IBM Guardium Data Protection 12.2 is vulnerable to a path traversal flaw within the GIM file-upload functionality . This vulnerability allows an unauthenticated attacker to perform a traversal attack to write arbitrary files to the Collector . No specific remediation information or exploit detail...