Web Distributed Authoring and Versioning (WEBDAV) Remote Code Execution Vulnerability

Improper resolution of path equivalence in WebDAV allows an authorized attacker to execute code over a network...

Windows Internet (wininet.dll) Tampering Vulnerability

Relative path traversal in Windows Internet wininet.dll allows an authorized attacker to perform tampering locally...

Windows Shell Elevation of Privilege Vulnerability

Relative path traversal in Windows Shell allows an authorized attacker to elevate privileges locally...

Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability

Absolute path traversal in Windows Encrypting File System EFS allows an authorized attacker to elevate privileges over a network...

Windows Update Elevation of Privilege Vulnerability

Untrusted search path in Windows Update allows an authorized attacker to elevate privileges locally...

Windows Update Service Elevation of Privilege Vulnerability

Untrusted search path in Windows Update Service allows an authorized attacker to elevate privileges locally...

Visual Studio Code Security Feature Bypass Vulnerability

Improper resolution of path equivalence in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally...

.NET Framework Security Feature Bypass Vulnerability

Untrusted search path in .NET Framework allows an authorized attacker to bypass a security feature locally...

Microsoft Dynamics 365 Business Central Elevation of Privilege Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Dynamics Business Central allows an authorized attacker to elevate privileges over a network...

Visual Studio Code Remote Code Execution Vulnerability

Improper limitation of a pathname to a restricted directory 'path traversal' in Visual Studio Code allows an unauthorized attacker to execute code over a network...

Windows AppX Deployment Service Security Feature Bypass Vulnerability

Improper protection of alternate path in Windows AppX Deployment Service allows an authorized attacker to bypass a security feature locally...

Windows libarchive Tampering Vulnerability

Relative path traversal in Windows Libarchive allows an unauthorized attacker to perform tampering over a network...

CVE-2026-109519

The software YouTransfer (versions up to 0.0.7/1.0.6/1.1.0 ) is vulnerable to a path traversal vulnerability within the Template Rendering component. The flaw exists in an unknown function associated with the /settings/template file, allowing for remote manipulation. While the vendor has not prov...

CVE-2026-109519 YouTransfer Template Rendering template path traversal

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The...

EUVD-2026-98685

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The...

CVE-2026-109519 YouTransfer Template Rendering template path traversal

A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0. Affected is an unknown function of the file /settings/template of the component Template Rendering. The manipulation results in path traversal. The attack may be launched remotely. The exploit is now public and may be used. The...

CVE-2026-93347 Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the getlistfile helper that allows malicious cluster workers to read arbitrary files via unvalidated filename values. Attackers holding the cluster key can send DistributedAPI requests with traversal filenames to read...

CVE-2026-93347

Wazuh versions 4.1.1 before 4.14.8 are vulnerable to a path traversal vulnerability in the get_list_file helper. This flaw occurs because the system fails to validate filename values, allowing malicious cluster workers to read arbitrary files. An attacker possessing the cluster key can send Distr...

EUVD-2026-98682

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the getlistfile helper that allows malicious cluster workers to read arbitrary files via unvalidated filename values. Attackers holding the cluster key can send DistributedAPI requests with traversal filenames to read...

CVE-2026-93347 Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file

Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the getlistfile helper that allows malicious cluster workers to read arbitrary files via unvalidated filename values. Attackers holding the cluster key can send DistributedAPI requests with traversal filenames to read...