Path traversal.

Microsoft PowerShell Remote Code Execution Vulnerability

• Microsoft PowerShell 7.4
• Microsoft PowerShell 7.5
• Path traversal

.NET Framework Elevation of Privilege Vulnerability

• Microsoft .NET Framework 3.5
• Microsoft .NET Framework 3.5 AND 4.6.2/4.7/4.7.1/4.7.2
• Path traversal

Windows User Profile Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 21H2
• Microsoft Windows 10 Version 22H2
• Path traversal

Windows DHCP Server Elevation of Privilege Vulnerability

• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 (Server Core installation)
• Path traversal

Windows DHCP Server Elevation of Privilege Vulnerability

• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 (Server Core installation)
• Path traversal

Windows DHCP Server Elevation of Privilege Vulnerability

• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 (Server Core installation)
• Path traversal

Windows DHCP Server Elevation of Privilege Vulnerability

• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 (Server Core installation)
• Path traversal

Windows Accessibility Infrastructure (ATBroker.exe) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Path traversal

Windows Container Isolation FS Filter Driver (unionfs.sys) Tampering Vulnerability

• Microsoft Windows 11 version 26H1
• Path traversal

Windows Management Services Denial of Service Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• Path traversal

Windows DHCP Server Elevation of Privilege Vulnerability

• Microsoft Windows Server 2012
• Microsoft Windows Server 2012 (Server Core installation)
• Path traversal

Microsoft SharePoint Server Information Disclosure Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• Path traversal

Microsoft Teams Remote Code Execution Vulnerability

• Microsoft Teams for Android
• Path traversal

CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

• Adobe Content Credentials Rust SDK
• Adobe Content Credentials Command-Line Tool
• Path traversal

CAI Content Credentials | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE-22)

• Adobe Content Credentials Rust SDK
• Adobe Content Credentials Command-Line Tool
• Path traversal

Path traversal in gaudi-container-runtime

• gaudi-container-runtime
• Path traversal

Zoom VDI - Path Traversal

• Zoom Communications Zoom VDI
• Path traversal

Sub2API: Path traversal in the Responses subpath routes lets an authenticated tenant relay requests to arbitrary upstream endpoints using pooled account credentials

• Wei-Shaw sub2api
• Path traversal
• CWE-441

Duplicate Advisory: Craft CMS: Incorrect path validation could potentially lead to path traversal

• Path traversal

>=4.0.0-RC1 · no fixed version yet

Velociraptor directory traversal via the NewNotebook API

• Rapid7 Velociraptor
• Path traversal

External control of a file path in Ivanti Endpoint Manager

• Ivanti Endpoint Manager
• Path traversal

Path traversal in Siemens License Server (SLS)

• Siemens License Server (SLS)
• Path traversal

Intelliants Subrion CMS - Path Traversal

• Intelliants Subrion CMS
• Path traversal

AsyncFuncAI deepwiki-open - Path Traversal

• AsyncFuncAI deepwiki-open
• Path traversal

Path traversal in the Offline archives functionality of the local web interface in Arc before v2.7.0

• Nozomi Networks Arc
• Path traversal

Mrtg: mrtg daemon symlink-following chown allows local privilege escalation via pid file path manipulation

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Path traversal

Path Traversal

• Zohocorp ManageEngine M365 Manager Plus
• Zohocorp ManageEngine M365 Security Plus
• Path traversal

Path Traversal: '.../...//' in Crafty Controller

• Arcadia Technology, LLC Crafty Controller
• Path traversal

Multiple vulnerabilities in SAP Business AI Platform (Approuter)

• SAP_SE SAP Business AI Platform (Approuter)
• Path traversal

Directory Traversal vulnerability in SAP Manufacturing Integration and Intelligence

• SAP_SE SAP Manufacturing Integration and Intelligence
• Path traversal

Arbitrary File Read via Improper Symlink Handling in USB HTTPS Access Path in multiple TP-Link Aginet Devices

• TP-Link Systems Inc. HB810(US2) V1.0/1.6/2.0/2.6
• TP-Link Systems Inc. HB810(EU1) V2.0
• Path traversal

Accelerate path traversal and denial of service via sharded checkpoint weight_map entries

• Path traversal

<=1.14.0 · no fixed version yet

Libvirt: swtpm privilege escalation via symlink following

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Path traversal

Tabby: Windows SFTP path traversal allows a malicious server to write files outside the selected download directory

• Eugeny tabby
• Path traversal

Sucuri WordPress Plugin 2.7.3 Path Traversal via integrity.lib.php

• sucuri-wordpress-plugin
• Path traversal

unearth 0.18.2 Path Traversal via Unnormalized Paths and Symlink Escape

• frostming unearth
• Path traversal

CyberPanel 2.4.3 Arbitrary File Read via File Manager ZIP Upload

• usmannasir cyberpanel
• Path traversal

Authenticated Arbitrary File Write Vulnerability in multiple devices

• TP-Link Systems Inc. TL-MR6400 v5.3
• TP-Link Systems Inc. Archer MR600 v2
• Path traversal

tar-rs 0.4.11 - 0.4.46 Symlink Escape via append_dir_all()

• composefs tar-rs
• Path traversal

unauthenticated path traversal in Metacat 2.x

• NCEAS metacat
• Path traversal
• Broken access control

systemd-oomd: unprivileged users can terminate arbitrary processes

• systemd-oomd
• Path traversal

o1lab xmysql - Unauthenticated Path Traversal via name Query Parameter

• o1lab xmysql
• Path traversal

mustafaakin cast-localvideo - Unauthenticated Path Traversal via dir Parameter

• mustafaakin cast-localvideo
• Path traversal

cube-root directory-serve - Unauthenticated Path Traversal Arbitrary File Deletion

• cube-root directory-serve
• Path traversal

deepwiki-open - Unauthenticated Path Traversal Leading to Arbitrary File Write and Delete

• AsyncFuncAI deepwiki-open
• Path traversal

Path Traversal in GNU cpio

• GNU cpio
• Path traversal

Path traversal in Samsung Mobile Samsung Health

• Samsung Mobile Samsung Health
• Path traversal

Eventin < 4.1.20 - Editor+ Local File Inclusion via speaker_template Setting

• Eventin
• Path traversal

Handwriting-OCR handwriting-ocr-mcp-server upload_document index.ts fs.readFileSync path traversal

• handwriting-ocr-mcp-server
• Path traversal

Nikolaibibo claude-comfyui-mcp comfy_upload_image utils.ts copyFileSync path traversal

• Nikolaibibo claude-comfyui-mcp
• Path traversal

bartekke8it56w2 new-mcp geminithinking index.ts fs.readFileSync path traversal

• bartekke8it56w2 new-mcp
• Path traversal

PV-Bhat gemsuite-mcp gemini_search unified-gemini.ts path traversal

• PV-Bhat gemsuite-mcp
• Path traversal

NocteDefensor LudusMCP insert_creds_range_config insertCredsRangeConfig.ts path traversal

• NocteDefensor LudusMCP
• Path traversal

Ichigo3766 image-gen-mcp upscale_images index.ts path traversal

• Ichigo3766 image-gen-mcp
• Path traversal

DedeCMS Installation Wizard index.php _4_Setup file inclusion

• DedeCMS
• Path traversal

automateyournetwork MCPyATS generate_mermaid_markdown index.ts processGenerateRequest path traversal

• automateyournetwork MCPyATS
• Path traversal

WP Maps Pro < 6.1.3 - Unauthenticated Local File Inclusion

• WP MAPS PRO
• Path traversal

WP Photo Album Plus < 9.2.07.002 - Unauthenticated Export ZIP File Deletion via delexportzips

• WP Photo Album Plus
• Path traversal

Pimzino spec-workflow-mcp approvals.ts ApprovalStorage.createApproval path traversal

• Pimzino spec-workflow-mcp
• Path traversal

Jane-xiaoer skill-vision-control config.ts getSkillVersionsDir path traversal

• Jane-xiaoer skill-vision-control
• Path traversal