CVE-2025-6233

Mattermost versions 10.8.x = 10.8.1, 10.7.x = 10.7.3, 10.5.x = 10.5.7, 9.11.x = 9.11.16 fail to sanitize input paths of file attachments in the bulk import JSONL file, which allows a system admin to read arbitrary system files via path traversal...

CVE-2024-11978: Absolute Path Traversal

DreamMaker from Interinfo has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files...

CVE-2024-11309: Relative Path Traversal

The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files...

PT-2024-8165

Name of the Vulnerable Software and Affected Versions: D-Link DSL6740C affected versions not specified Description: The issue concerns a Path Traversal Vulnerability, allowing unauthenticated remote attackers to read arbitrary system files. Attackers can exploit this vulnerability to obtain the M...

PT-2024-39981

Name of the Vulnerable Software and Affected Versions Enterprise Cloud Database from Ragic affected versions not specified Description The Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this...

CVE-2023-41356: Improper Limitation of a Pathname to a Restricted Directory

NCSIST ManageEngine Mobile Device ManagerMDM APP's special function has a path traversal vulnerability. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication and read arbitrary system files...

PT-2019-3763

Name of the Vulnerable Software and Affected Versions ЕКRASMS-SP affected versions not specified Description The issue is related to the implementation of the interaction protocol between the "АРМ Релейщика" software and the "Сервер связи" software of the ЕКRASMS-SP complex. It is caused by the...