CWE-22

PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.

The Multi Uploader for Gravity Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient f

SOUND4 IMPACT/FIRST/PULSE/Eco <=2.x contains an unauthenticated remote code execution vulnerability in the firmware uplo

Dumb Drop is a file upload application. Users with permission to upload to the service are able to exploit a path traver

Directory traversal vulnerability in recv_file method allows arbitrary files to be written to the master cache directory

BBOT's gitdumper module could be abused to execute commands through a malicious git repository.

BBOT's unarchive module could be abused by supplying malicious archives files and when extracted can then perform an arb

The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbit

Allows arbitrary filesystem writes outside the extraction directory during extraction with filter="data". You are affe

Marvell QConvergeConsole QLogicDownloadImpl Directory Traversal Arbitrary File Deletion and Information Disclosure Vulne

Marvell QConvergeConsole compressConfigFiles Directory Traversal Information Disclosure and Denial-of-Service Vulnerabil

A path traversal vulnerability in unauthenticated upload functionality allows a malicious actor to upload binaries and s

Versions of the package mammoth from 0.3.25 and before 1.11.0; versions of the package mammoth from 0.3.25 and before 1.

Atheos is a self-hosted browser-based cloud IDE. Prior to v600, the $path and $target parameters are not properly valida

Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.

Multiple directory traversal vulnerabilities exist in the nas.cgi add_dir() functionality of Wavlink AC3000 M33A8.V5030.

An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager

The vulnerability can be leveraged by an attacker to execute arbitrary code as an unprivileged user and/or modify the co

Applio is a voice conversion tool. Versions 3.2.8-bugfix and prior are vulnerable to arbitrary file removal in core.py.

An arbitrary file deletion vulnerability exists in danny-avila/librechat version v0.7.5-rc2, specifically within the /ap

A path traversal vulnerability exists in stitionai/devika, specifically in the project creation functionality. In the af

A vulnerability in the `download_model` function of the onnx/onnx framework, before and including version 1.16.1, allows

A vulnerability in the `upload_app` function of parisneo/lollms-webui V12 (Strawberry) allows an attacker to delete any

A vulnerability in the `LockManager.release_locks` function in aimhubio/aim (commit bb76afe) allows for arbitrary file d

An issue in OS4ED openSIS v8.0 through v9.1 allows attackers to execute a directory traversal by sending a crafted POST

Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. In versions prior to 2.11.24, 3.3.6, and 3.4.0-

The Database Toolset plugin is vulnerable to arbitrary file deletion due to insufficient file path validation in a funct

foxcms v1.2.5 was discovered to contain an arbitrary file deletion vulnerability via the delRestoreSerie method.

Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 aff

Kirby is an open-source content management system. A vulnerability in versions prior to 3.9.8.3, 3.10.1.2, and 4.7.1 aff

Traefik (pronounced traffic) is an HTTP reverse proxy and load balancer. Prior to versions 2.11.25 and 3.4.1, there is a

An issue in the /script-api/scripts/ endpoint of OpenC3 COSMOS before 6.1.0 allows attackers to execute a directory trav

The Image Resizer On The Fly plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path

Marvell QConvergeConsole deleteAppFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability all

Marvell QConvergeConsole deleteEventLogFile Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerabilit

Chall-Manager is a platform-agnostic system able to start Challenges on Demand of a player. When decoding a scenario (i.

The HT Contact Form Widget For Elementor Page Builder & Gutenberg Blocks & Form Builder plugin for WordPress is vulnerab

The Madara - Core plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation

The Attachment Manager plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path valid

Claude Code is an agentic coding tool. In versions below 0.2.111, a path validation flaw using prefix matching instead o

aiven-db-migrate is an Aiven database migration tool. Prior to 1.0.7, there is a privilege escalation vulnerability that

n8n-workflows Main Commit ee25413 allows attackers to execute a directory traversal via the download_workflow function w

Accela Automation Platform 22.2.3.0.230103 contains multiple vulnerabilities in the Test Script feature. An authenticate

A path traversal security issue exists within FactoryTalk View Machine Edition, allowing unauthenticated attackers on th

A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to a

Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmi

Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file

alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality

A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDel

ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability that c