Polaris Office App path traversal vulnerability

The Polaris Office App version 9.9.19 has a path traversal vulnerability. This vulnerability stems from the incorrect handling of the displayname parameter in the Document Intake component’s function com.infraware.service.m.n.a, which may allow local attackers to perform path traversal attacks...

Fortinet FortiSIEM path traversal vulnerability

Fortinet FortiSIEM versions 7.5.0, 7.4.0 to 7.4.2, 7.3.0 to 7.3.5, 7.2.0 to 7.2.7, 7.1.0 to 7.1.9, and 7.0.0 to 7.0.4 have a path traversal vulnerability. This vulnerability stems from improper restrictions on path names for restricted directories during path traversal. It may allow attackers to...

Siemens .NET Client Library for SIMATIC S7 Webserver API path traversal vulnerability

The Siemens .NET Client Library for SIMATIC S7 Webserver API versions prior to 3.3.61 has a path traversal vulnerability. This vulnerability stems from the failure to properly validate the file names received from the remote server during ticket downloads. As a result, path traversal is possible,...

Seldon MLServer path traversal vulnerability

Seldon MLServer versions 1.6.1 and earlier have a path traversal vulnerability. This vulnerability stems from improper handling of the extractenv function in the environmenttarball Handler component. It may lead to path traversal attacks, and attackers can launch these attacks remotely...

Quasar Framework path traversal vulnerability

Quasar Framework versions 2.22.0 to 2.23.3 had a path traversal vulnerability. This vulnerability stemmed from the dir and filename parameters in the SSG page definitions returned by getSsgPages in @quasar/app-vite. These parameters were concatenated with build.distDir without proper validation o...

Stone Wu Path Traversal Vulnerability

Stone Wu’s Rongguang versions 1.2.0 and earlier have a path traversal vulnerability. This vulnerability stems from the subDir parameter in the POST /api/storage/upload request, which allows for path traversal. The LocalStorageStrategy.storeBytes function does not normalize the sequence of parent...

Yosheng Software Digital-Infrastructure Path Traversal Vulnerability

The Yousheng Software Digital-Infrastructure version 9.6.5 to 9.6.11 contains a path traversal vulnerability. This vulnerability stems from the fileManager storeFile endpoint’s path traversal flaw. Unauthenticated attackers can create or overwrite service-writable files by sending specially craft...

Digital-Infrastructure path traversal vulnerability in Yisheng Software

Versions 9.6.5 through 9.6.11 of the Digital-Infrastructure software contain a path traversal vulnerability. This vulnerability stems from path traversal in the fileManager Y9FileController.retrieveFileStream handler. Unauthenticated attackers can exploit this by providing a parent directory path...

Siemens Industrial Edge Cloud Device (IECD) path traversal vulnerability

The Siemens Industrial Edge Cloud Device IECD has a path traversal vulnerability. This vulnerability stems from inadequate restrictions on authenticated users accessing internal APIs and paths, potentially allowing authenticated remote attackers to access sensitive internal information and thus...

James Bardin: A Python SCP module with path traversal vulnerabilities

James Bardin’s Pure Python SCP module versions 0.16.1 and earlier have a path traversal vulnerability. This vulnerability stems from issues with the recvfile/recvpushd functions in the SCP Receive Handler component, which allow for path traversal attacks by remote attackers...

Databricks Mosaic Research Composer path traversal vulnerability

Databricks Mosaic Research Composer version 0.32.1 has a path traversal vulnerability. This vulnerability arises from the tarball.extractall function in the Composer/utils/checkpoint.py file, which allows for path traversal when operating on the Checkpoint Extraction component. Attackers can...

Siemens Industrial Edge Device Kit – arm64 Path Traversal Vulnerability

Siemens Industrial Edge Device Kit – There is a path traversal vulnerability in the arm64 version. This vulnerability stems from insufficient restrictions on access to internal APIs and paths by authenticated users. As a result, authenticated remote attackers may gain access to sensitive internal...

CVE-2026-85953 Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate user-controlled file paths and user-context values. Exploitation could result in unauthorized access to server files or execution...

EUVD-2026-97515

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate user-controlled file paths and user-context values. Exploitation could result in unauthorized access to server files or execution...

CVE-2026-85953

Progress MarkLogic Server versions 12.x before 12.1.0 and 11.x before 11.3.7 are vulnerable to path traversal and privilege management flaws within privileged legacy InfoStudio modules. The root cause is the insufficient validation of user-controlled file paths and user-context values. Successful...

CVE-2026-85953 Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio

Progress MarkLogic Server 12.x releases before 12.1.0 and 11.x releases before 11.3.7 contain privileged legacy InfoStudio modules that do not sufficiently validate user-controlled file paths and user-context values. Exploitation could result in unauthorized access to server files or execution...

CVE-2026-102595

Impact For some HTTP request paths, Synapse will ignore extraneous path segments and therefore serve a resource at an unexpected path. This could allow evasion of external rate-limiting that may be in place. The Client-Server API "/matrix/client", Federation API "/matrix/federation", Synapse Admi...

CVE-2026-103060 Path traversal in rebar3 via unvalidated dependency app names

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in erlang rebar3 allows a malicious package publisher to delete a directory outside the project's build directory and extract package files into it when a developer fetches dependencies. A package release's...

CVE-2026-103060

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in erlang rebar3 allows a malicious package publisher to delete a directory outside the project's build directory and extract package files into it when a developer fetches dependencies. A package release's...

CVE-2026-103060

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in erlang rebar3 allows a malicious package publisher to delete a directory outside the project's build directory and extract package files into it when a developer fetches dependencies. A package release's...