55115 matches found
CVE-2026-19054
CVE-2026-19054 affects Lspace-io lspace-server (Repositories File API) with a path traversal in the repository.ts file between fileExists/readFile/writeFile/deleteFile. The vulnerability is triggered by manipulating the argument filePath and is limited to local access. No version details or publi...
CVE-2026-19054 Lspace-io lspace-server Repositories File API repository.ts deleteFile path traversal
A vulnerability was detected in Lspace-io lspace-server up to 79f02fe5aa8970b210a6a05cf097155f8d9ffd71. This issue affects the function fileExists/readFile/writeFile/deleteFile of the file src/core/repository.ts of the component Repositories File API. Performing a manipulation of the argument...
CVE-2026-66695
Unauthenticated Path Traversal in W3 Total Cache = 2.10.2 versions...
CVE-2026-53976
OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query parameter alongside an absolute path, bypassi...
CVE-2026-19046 NocteDefensor LudusMCP ludus_environment_guides_search ludusEnvironmentGuidesSearch.ts path traversal
A security vulnerability has been detected in NocteDefensor LudusMCP up to 1.0.24. The impacted element is an unknown function of the file src/tools/ludusEnvironmentGuidesSearch.ts of the component ludusenvironmentguidessearch. Such manipulation of the argument guidename leads to path traversal...
CVE-2026-19046
CVE-2026-19046 affects NocteDefensor LudusMCP (up to 1.0.24). The vulnerable element is an unknown function in src/tools/ludusEnvironmentGuidesSearch.ts of the ludus_environment_guides_search component. According to the description, manipulating the guide_name argument enables path traversal, wit...
EUVD-2026-54079
A security vulnerability has been detected in NocteDefensor LudusMCP up to 1.0.24. The impacted element is an unknown function of the file src/tools/ludusEnvironmentGuidesSearch.ts of the component ludusenvironmentguidessearch. Such manipulation of the argument guidename leads to path traversal...
CVE-2026-66695 WordPress W3 Total Cache plugin <= 2.10.2 - Path Traversal vulnerability
Unauthenticated Path Traversal in W3 Total Cache = 2.10.2 versions...
CVE-2026-66695
The CVE-2026-66695 entry describes an Unauthenticated Path Traversal in the WordPress W3 Total Cache plugin, affecting versions <= 2.10.2. The vulnerability is active across plugin components implementing file/path access, with CVSS 3.1 base metrics indicating NETWORK attack vector, no user in...
EUVD-2026-53902
Unauthenticated Path Traversal in W3 Total Cache = 2.10.2 versions...
EUVD-2026-53936
OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query parameter alongside an absolute path, bypassi...
CVE-2026-53976 OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter
OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query parameter alongside an absolute path, bypassi...
CVE-2026-53976 OpenChamber 1.11.7 Path Traversal File Read via allowOutsideWorkspace Parameter
OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw that allows unauthenticated remote attackers to read arbitrary files by supplying the allowOutsideWorkspace=true query parameter alongside an absolute path, bypassi...
CVE-2026-53976
OpenChamber 1.11.7 suffers a path traversal vulnerability in the file-serving endpoints /api/fs/read, /api/fs/stat, and /api/fs/raw. An unauthenticated remote attacker can supply the allowOutsideWorkspace=true query parameter with an absolute path, bypassing the workspace boundary check in resolv...
Application Insights Profiler Elevation of Privilege Vulnerability
Improper limitation of a pathname to a restricted directory 'path traversal' in Application Insights Profiler allows an authorized attacker to elevate privileges over a network...
CVE-2026-19038
A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshotelement Tool. Such manipulation of the argument outputname leads to path traversal. The attack can be execute...
EUVD-2026-53873
A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshotelement Tool. Such manipulation of the argument outputname leads to path traversal. The attack can be execute...
CVE-2026-19038
CVE-2026-19038 affects MonomythDevelopment la-forge-mcp 1.0.0, specifically the screenshotElement function in src/index.ts of the screenshot_element Tool. The issue arises from manipulation of the argument output_name, enabling path traversal. The vulnerability is exploitable remotely via a netwo...
CVE-2026-19038 MonomythDevelopment la-forge-mcp screenshot_element Tool index.ts screenshotElement path traversal
A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshotelement Tool. Such manipulation of the argument outputname leads to path traversal. The attack can be execute...
CVE-2026-19038 MonomythDevelopment la-forge-mcp screenshot_element Tool index.ts screenshotElement path traversal
A security vulnerability has been detected in MonomythDevelopment la-forge-mcp 1.0.0. This issue affects the function screenshotElement of the file src/index.ts of the component screenshotelement Tool. Such manipulation of the argument outputname leads to path traversal. The attack can be execute...