CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

30 matches found

ATTACKERKB•added 2026/07/13 12:0 a.m.•4 views

CVE-2026-26396

OpenBMB XAgent v1.0.0 and before is vulnerable to path traversal in the file function in XAgent/XAgentServer/application/routers/workspace.py. The input parameter “filename” is user-controllable and is concatenated into the file path to be read without proper validation, leading to a directory...

7.5CVSS6AI score0.00746EPSS

SaveExploits0References2

OSV•added 2026/06/24 3:3 p.m.•6 views

CVE-2026-55488 motionEye's Absolute Path Traversal in Media File Handlers Allows Arbitrary File Read

motionEye mEye is an online interface for a piece of software called "motion," which is a video surveillance program with motion detection. Versions prior to 0.44.0 contain an absolute path traversal vulnerability in multiple media file handlers that allows an attacker to read arbitrary files fro...

8.7CVSS6AI score0.00529EPSS

SaveExploits1References3

ATTACKERKB•added 2026/05/05 7:22 p.m.•13 views

CVE-2026-34084

PhpSpreadsheet is a library for reading and writing spreadsheet files. In versions 1.30.2 and earlier, 2.0.0 through 2.1.14, 2.2.0 through 2.4.3, 3.3.0 through 3.10.3, and 4.0.0 through 5.5.0, when the filename argument to IOFactory::load is user-controlled, an attacker can supply a PHP stream...

9.2CVSS6.4AI score0.00712EPSS

SaveExploits1References2Affected Software1

OSV•added 2026/05/05 7:22 p.m.•6 views

CVE-2026-34084 PhpSpreadsheet SSRF and RCE via PHP stream wrappers in IOFactory::load

9.2CVSS7.7AI score0.00712EPSS

SaveExploits1References3

OSV•added 2026/04/29 8:22 p.m.•8 views

GHSA-Q4Q6-R8WH-5CGH PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled

The usage of isfile, used to verify if the $filename is indeed an actual file, by all? Reader implementations inside the helper function File::assertFile is php-wrapper aware, for any php wrappers implementing stat. The 3 wrappers ftp://, phar:// and ssh2.sftp://, all satisfy this requirement - 2...

9.2CVSS5.8AI score0.00712EPSS

SaveExploits1References4

Github Security Blog•added 2026/04/29 8:22 p.m.•10 views

PhpSpreadsheet has SSRF/RCE in IOFactory::load when $filename is user controlled

9.8CVSS5.7AI score0.00712EPSS

SaveExploits1References4Affected Software1

CNNVD•added 2026/01/27 12:0 a.m.•15 views

ConvertX path traversal vulnerability

ConvertX is a file format conversion tool developed by the ConvertX company. Versions of ConvertX prior to 0.17.0 contained a path traversal vulnerability. This vulnerability stemmed from the POST /delete endpoint using user-controlled filename values to construct file system paths and performing...

8.1CVSS5.8AI score0.00408EPSS

SaveExploits1References3