CWE-23

A zip slip vulnerability in the Admin import functionality of CTFd v3.8.1-18-gdb5a18c4 allows attackers to write arbitra

Tautulli is a Python based monitoring and tracking tool for Plex Media Server. Prior to version 2.17.0, the /newsletter/

Open Neural Network Exchange (ONNX) is an open standard for machine learning interoperability. Prior to version 1.21.0,

The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for WordPress is vulnerable to arbitrary file del

A path traversal vulnerability exists in WOSDefaultHttpModule.dll when processing a URL path starting with /woshome

Nozomi Networks Labs identified a CWE-23: Relative Path Traversal in the Console WebUI in Waterfall WF-500 TX and RX Hos

DreamMaker developed by Interinfo has an Arbitrary File Read vulnerability, allowing unauthenticated local attackers to

SiYuan is an open-source personal knowledge management system. Prior to 3.7.0, the patch for CVE-2026-41894 ("Path Trave

Zephyr's HTTP server (subsys/net/lib/http) provides a static-filesystem resource type (HTTP_RESOURCE_TYPE_STATIC_FS, ava

Calico's Application Layer Policy (disabled by default), which enforces HTTP rules through Dikastes, fails to perform UR

Path Traversal in Download File Feature in com.talpa.hibrowser 2.23.1.1 on Android allows arbitrary file write via direc

A path traversal vulnerability exists in parisneo/lollms version 2.1.0, specifically in the SPA catch-all route implemen

Handlebars.java provides logic-less and semantic Mustache templates with Java. Prior to 4.5.3, com.github.jknack.handleb

Relative Path Traversal vulnerability in Apache InLong. Arbitrary file read from the Agent host filesystem. This issue

4MOSAn developed by 4MOSAn Security Technology Co., Ltd. has an Arbitrary File Read vulnerability. Unauthenticated remot

Relative path traversal vulnerability in Apache Camel Google Storage component. This issue affects Apache Camel: from

A weakness has been identified in getsimpletool mcpo-simple-server up to 0.2.0. Affected is the function delete_shared_p

A path traversal attack when using a "configName" parameter in qSnapper before version 1.3.3 allowed a local attacker to

Relative Path Traversal (CWE-23) in Kibana can lead to the unauthorized deletion of Kibana resources via Relative Path T

FUXA is a web-based Process Visualization (SCADA/HMI/Dashboard) software. Prior to 1.2.11, there is a flaw in the path s

EspoCRM is an open source customer relationship management application. Prior to version 9.3.4, the admin template manag

Concrete CMS 9.5.0 and below fails to sanitize path traversal sequences in the ptComposerFormLayoutSetControlCustomTempl

LibreBooking's email template editor save action passes the submitted template name directly into the destination file p

pyLoad is a free and open-source download manager written in Python. From version 0.5.0b3.dev13 to 0.5.0b3.dev96, the ed

ColorOS Assistant has an unauthenticated start-download channel, leading to file path traversal.

Detect-It-Easy prior to 3.21 contains a path traversal vulnerability that allows attackers to write arbitrary files to t

Improper input validation in Visual Studio Code allows an unauthorized attacker to bypass a security feature locally.

Relative path traversal in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a networ

Langroid is a framework for building large-language-model-powered applications. Prior to version 0.64.0, Langroid's `Rea

Path traversal in Zoom VDI Client and Plugins may allow an authenticated user to conduct information disclosure via loca

A relative path traversal issue in the zip extraction functionality in AWS diagram-as-code (awsdac) in versions 0.10 thr

Relative path traversal in Microsoft Edge for Android allows an unauthorized attacker to disclose information locally.

Relative path traversal in DNS Server allows an authorized attacker to execute code over an adjacent network.

File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a spec

A relative path traversal vulnerability in Fortinet FortiWeb 8.0.0 through 8.0.2, FortiWeb 7.6.0 through 7.6.6, FortiWeb

A directory traversal vulnerability in the Apex One (on-premise) server could allow a pre-authenticated local attacker t

pnpm is a package manager. Prior to version 10.28.1, a path traversal vulnerability in pnpm's binary fetcher allows mali

pnpm is a package manager. Prior to version 10.28.1, a path traversal vulnerability in pnpm's bin linking allows malicio

A relative path traversal vulnerability has been reported to affect Qsync Central. If a remote attacker gains a user acc

Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitr

Multiple vulnerabilities in Cisco Unity Connection could allow an authenticated, remote attacker to download arbitr

Relative Path Traversal vulnerability in Apache Ignite REST API. Authenticated REST API users can read any file on the

Relative path traversal in Visual Studio Code allows an unauthorized attacker to perform tampering over a network.

Mockoon provides way to design and run mock APIs. Prior to 9.7.0, a FILE response whose filePath embeds request data is

Snipe-IT is an IT asset/license management system. Prior to 8.5.0, ActionlogController::displaySig concatenates the rout

Directory Traversal vulnerability in FileThingie v.2.5.7 allows a remote attacker to obtain sensitive information via a

Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` promises scoped fil

VIN-DS783E-E6 developed by Vacron has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to e

Dell OpenManage Server Administrator, versions prior to 11.1.0.2, contains a Relative Path Traversal vulnerability. A lo

Relative path traversal in Microsoft Office SharePoint allows an authorized attacker to disclose information over a netw