147770 matches found
PT-2026-109313
Name of the Vulnerable Software and Affected Versions Shiny for Python versions 1.4.0 through 1.6.3 Description The bookmark restore process accepts a client-supplied state id query-string value and joins it into the server-side bookmark directory without proper validation. An unauthenticated...
PT-2026-108975
Name of the Vulnerable Software and Affected Versions LobsterAI versions 2026.5.27 through 2026.9.23 Description An external control of file path issue exists in the skills:delete IPC handler. The system trusts the openclawSourceDir value defined in a skill's meta.json file during the...
PT-2026-108977
Name of the Vulnerable Software and Affected Versions plugNmeet Server versions prior to 2.5.3 Description A path traversal issue exists in the whiteboard conversion endpoint. This allows any meeting participant to read server files by providing crafted filePath values using ../ sequences. This...
CVE-2026-75351
OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...
EUVD-2026-95970
OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...
CVE-2026-107935: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...
PT-2026-108835
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from n/a through 4.2.1...
CVE-2026-75352
The OpENer v2.3/commit 76b95cf software is affected by an integer underflow vulnerability within the server-side EtherNet/IP ForwardOpen connection-path parser . A remote attacker can exploit this flaw by sending specially crafted network requests, which can cause the service to crash and result ...
CVE-2026-94666: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in ZealousWeb Generate PDF using Contact Form 7 generate-pdf-using-contact-form-7 allows Path Traversal.This issue affects Generate PDF using Contact Form 7: from n/a through 4.2.1...
CVE-2026-107935: Improper Limitation of a Pathname to a Restricted Directory
A path traversal vulnerability was found in gvproxy, the network forwarder provided by the gvisor-tap-vsock package. The unauthenticated /services/forwarder/expose endpoint does not validate the caller-supplied socket path, allowing an attacker to delete arbitrary files on the host system...
CVE-2026-107844: Improper Limitation of a Pathname to a Restricted Directory
Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled path parameter to the configured image target directory with Path::join but does not use Path::isBasePath to verify that the canonical path remains inside that directory. An...
CVE-2026-75351: Out-of-bounds Read
OpENer v2.3/commit 76b95cf, contains an out-of-bounds read in the server-side EtherNet/IP ForwardOpen connection-path parser. This allows a remote attacker to cause a denial of service...
CVE-2026-103412: Improper Limitation of a Pathname to a Restricted Directory
Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...
CVE-2026-104081: Improper Limitation of a Pathname to a Restricted Directory
KodExplorer before 4.55 contains a path traversal vulnerability in the unzipprename function within app/function/helper.function.php, where a single non-recursive strreplace sanitization pass can be bypassed using crafted filenames like "....//", combined with PclZip's extract call in...
CVE-2026-108156: External Control of File Name or Path
LobsterAI 2026.5.27 through 2026.9.23 contains an external control of file path vulnerability in the skills:delete IPC handler that trusts the openclawSourceDir value from a skill's meta.json during uninstall. Attackers who convince a user to install a crafted skill can make uninstallation...
PT-2026-109303
Name of the Vulnerable Software and Affected Versions Contao versions prior to 5.3.50 Contao versions prior to 5.7.12 Description An issue exists where the ImagesController joins the user-controlled path parameter to the configured image target directory using Path::join without utilizing...
PT-2026-108893
Improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Apache Camel Karavan. A project file name supplied through the project file API was used verbatim as a path segment when the project was written to the working copy for a Git commit, so a name containing...
PT-2026-108833
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.This issue affects PDF for Contact Form 7: from n/a through 7.1.0...
PT-2026-109151
Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths may allow authenticated staff users to access local files outside the intended data storage directories on the server...
CVE-2026-94664: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in add-ons.org PDF for Contact Form 7 pdf-for-contact-form-7 allows Path Traversal.This issue affects PDF for Contact Form 7: from n/a through 7.1.0...