agentprime: CWE-27

moment vulnerable to Path Traversal via crafted non-string locale name

Tue, 29 Sep 2026 23:46:02 GMT

moment >=2.29.2, <2.31.0, fixed in 2.31.0. CVSS 5.9 (Medium). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2026-76344: Path Traversal through the Search Dispatch REST API in Splunk Enterprise

Wed, 19 Aug 2026 21:34:41 GMT

CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-62391: Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases

Fri, 31 Jul 2026 09:58:15 GMT

CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-24457: Path traversal in Eclipse Foundation Eclipse OpenMQ and others

Thu, 05 Mar 2026 16:27:30 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2026-20018: Cisco Firepower Management Center Software and Firepower Threat Defense Path Traversal Vulnerability

Wed, 04 Mar 2026 17:39:46 GMT

CVSS 5.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

Apache Kyuubi Server vulnerable to Path Traversal

Mon, 05 Jan 2026 09:30:19 GMT

org.apache.kyuubi:kyuubi-server_2.12 >=1.6.0, <1.10.3, fixed in 1.10.3. CVSS 8.8 (High). Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2025-58292: Denial of service (DoS) vulnerability in the office service.

Sat, 11 Oct 2025 08:52:23 GMT

CVSS 3.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-10438: Path Traversal in Yordam BT's Yordam Katalog

Thu, 25 Sep 2025 09:18:44 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-58761: Tautulli vulnerable to Unauthenticated Path Traversal in `real_pms_image_proxy`

Tue, 09 Sep 2025 19:59:17 GMT

CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2025-52237: An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.

Tue, 05 Aug 2025 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-43658: Using the action or .sh script, arbitrary files and directories can be deleted using directory traversal.

Thu, 09 Jan 2025 07:56:47 GMT

CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-20090: Cisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability

Fri, 15 Nov 2024 15:19:09 GMT

CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-51747: Arbitrary File Read and Delete in kanboard

Mon, 11 Nov 2024 19:22:27 GMT

CVSS 9.1 (Critical). Critical: CVSS score 9.1: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-7458: elunez eladmin Database Management/Deployment Management upload path traversal

Sun, 04 Aug 2024 22:00:07 GMT

CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-24809: Traccar vulnerable to Path Traversal: 'dir/../../filename' and Unrestricted Upload of File with Dangerous Type

Wed, 10 Apr 2024 14:48:13 GMT

CVSS 8.5 (High). Critical: CVSS score 8.5 (7.0 or more) and EPSS 0.54 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-20348: A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbitrary files.

Wed, 03 Apr 2024 16:25:38 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-27764: An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the AuthInterceptor component.

Tue, 05 Mar 2024 00:00:00 GMT

CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-25828: cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/template_admin.php.

Thu, 22 Feb 2024 00:00:00 GMT

CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2024-21896: Node: The permission model protects itself against path traversal attacks by calling…

Tue, 20 Feb 2024 01:31:08 GMT

CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-52076: Remote Code Execution Vulnerability in Atril's EPUB ebook parsing

Thu, 25 Jan 2024 15:30:12 GMT

CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE

Wed, 24 Jan 2024 18:31:02 GMT

org.jenkins-ci.main:jenkins-core >=1.606, <2.426.3 || >=2.427, <2.440.1 || >=2.441, <2.442, fixed in 2.426.3, 2.440.1, 2.442. CVSS 9.8 (Critical). Critical: In CISA’s KEV catalogue since 19 Aug 2024: it is known to be exploited. CVSS score 9.8: 9.0 or more. CVSS score 9.8 (7.0 or more) and EPSS 1.00 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2023-50254: Deepin Reader RCE vulnerability due to a design flaw

Fri, 22 Dec 2023 16:49:48 GMT

CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-34125: SonicWall GMS: Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to…

Thu, 13 Jul 2023 00:21:21 GMT

Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-20131: Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

Wed, 05 Apr 2023 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-20130: Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

Wed, 05 Apr 2023 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-20129: Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

Wed, 05 Apr 2023 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-20127: Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

Wed, 05 Apr 2023 00:00:00 GMT

CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.

CVE-2023-27588: Unauthenticated path traversal vulnerability in Hasura GraphQL Engine

Tue, 14 Mar 2023 17:23:10 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.

Path Traversal: 'dir/../../filename' in moment.locale

Mon, 04 Apr 2022 21:25:48 GMT

moment <2.29.2, fixed in 2.29.2. CVSS 7.5 (High). Critical: CVSS score 7.5 (7.0 or more) and EPSS 0.14 (0.1 or more): a high score and a real chance of exploitation in the next 30 days. Published by the GitHub Advisory Database. Not analysed by agentprime yet.

CVE-2021-35027: A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information.

Wed, 29 Sep 2021 10:32:04 GMT

CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.