Path traversal.

Decap CMS < 3.11.0 Path Traversal via Sibling Directory Prefix Matching

• decaporg decap-cms
• Path traversal

Uber Kraken through 0.1.29 Path Traversal via tag parameter

• uber kraken
• Path traversal

BC Security Empire before 6.7.1 Path Traversal File Upload RCE

• BC-SECURITY Empire
• Path traversal

Cisco Identity Services Engine Arbitrary File Deletion Vulnerability

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• Path traversal

Cisco Identity Services Engine Arbitrary File Write Vulnerability

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• Path traversal

Cisco Identity Services Engine Arbitrary File Read Vulnerability

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• Path traversal

Cisco Identity Services Engine Information Disclosure Vulnerability

• Cisco Identity Services Engine Software
• Cisco ISE Passive Identity Connector
• Path traversal

Cisco ISE Arbitrary File Access Vulnerability

• Cisco Identity Services Engine Software
• Path traversal

Cisco Nexus Dashboard Software Security Hardening Release September 2026 - Improper Limitation of a Pathname

• Cisco Nexus Dashboard
• Path traversal

HP Advance – Potential Elevation of Privilege, Remote Code Execution & Arbitrary File Write

• HP Inc HP AC Print & Scan
• HP Inc HP Output Central
• Path traversal

Apache NiFi Registry: Improper Limitation of Pathname in Persisted Extension Bundles

• Apache Software Foundation Apache NiFi Registry
• Path traversal

Scirius through 3.8.0 Arbitrary File Write via PCAP Upload

• StamusNetworks scirius
• Path traversal

Symlink following in Dell Update Package Framework

• Dell Update Package Framework
• Path traversal

Symlink following in Dell Update Package Framework

• Dell Update Package Framework
• Path traversal

Stanza: Zip Slip Path Traversal in Model/Resource Extraction

• stanfordnlp stanza
• Path traversal

Path traversal in Jenkins Project Jenkins Robot Framework Plugin

• Jenkins Project Jenkins Robot Framework Plugin
• Path traversal

Path traversal in Jenkins Project Jenkins Pipeline: Groovy Libraries Plugin

• Jenkins Project Jenkins Pipeline: Groovy Libraries Plugin
• Path traversal

@zereight/mcp-gitlab: Unauthenticated arbitrary file read via `upload_markdown` enables PAT exfiltration and full account takeover

• Path traversal

<2.1.27 · fixed in 2.1.27

External control of a file path in Advantech EKI-1242IEIMS and others

• Advantech EKI-1242IEIMS
• Advantech EKI-1242EIMS
• Path traversal

Path Traversal in /index.php/view_uploaded_iodd_file

• Pepperl+Fuchs ICE2-8IOL1-G65L-V1D
• Pepperl+Fuchs ICE2-8IOL-G65L-V1D
• Path traversal

Path traversal in Octopus Deploy Octopus Server

• Octopus Deploy Octopus Server
• Path traversal

WP Import Export Lite < 3.9.33 - Authenticated Sensitive File Disclosure via Existing File Import Path Traversal

• WP Import Export Lite
• Path traversal

WP Import Export Lite < 3.9.33 - Authenticated Arbitrary Directory Deletion via Template Path Traversal

• WP Import Export Lite
• Path traversal

Path traversal in Oracle Corporation Oracle GraalVM for JDK, Oracle GraalVM

• Oracle Corporation Oracle GraalVM for JDK, Oracle GraalVM
• Path traversal

Symlink following in Webpros SolusVM

• Webpros SolusVM
• Path traversal

Tencent Mass Service Engine in Cluster (MSEC) path traversal

• Tencent Mass Service Engine in Cluster (MSEC)
• Path traversal

Newell Brands DYMO Connect Desktop improper file path validation

• Newell Brands DYMO Connect Desktop
• Path traversal

Http4s: ResourceService and Webjar Service path escape via percent-encoded separators

• Path traversal

<0.23.35 · fixed in 0.23.35

Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J2Store 1.0.0-3.3.2, 4.0.0-4.0.22, 4.1.0-4.1.7

• j2commerce.com J2Store extension for Joomla
• Path traversal

Podman: buildah: skopeo: containers/storage: malicious tar whiteout header allows replacement of extraction destination directory

• Red Hat Ansible Automation Platform 2
• Red Hat Enterprise Linux 10
• Path traversal

Podman: buildah: buildah/copier: directory escape via crafted tar symlinks when used outside buildah by non-root callers

• Red Hat Hardened Images
• Red Hat Ansible Automation Platform 2
• Path traversal

crawl4ai before 0.9.3 Arbitrary File Write via PDFContentScrapingStrategy

• unclecode crawl4ai
• Path traversal

Flowise before 3.1.4 Remote Code Execution via SQL Database Chain

• Flowise
• Path traversal

Path traversal vulnerability in WordPress theme design-scuole-wordpress-theme

• Developers Italia design-scuole-wordpress-theme
• Path traversal

Docker Sandboxes guest can write arbitrary macOS host files via a symlink in the virtio-fs stored-path fallback

• Docker Sandboxes
• Path traversal

Weights & Biases wandb before 0.29.0 Path Traversal via File Download

• wandb
• Path traversal

Flextype CMS through 1.0.0-alpha.3 Path Traversal via Entries REST API

• flextype
• Path traversal

The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable to Path Traversal via the 'cam' parameter in show-movies.pml.

• Path traversal

DevSpace through 6.3.21 Path Traversal via tar extraction

• devspace
• Path traversal

Path traversal in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• Path traversal

Path traversal in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• Path traversal

Path traversal in Apple macOS

• Apple macOS
• Path traversal

Path traversal in Apple macOS

• Apple macOS
• Path traversal

Path traversal in Apple macOS

• Apple macOS
• Path traversal

Path traversal in Apple macOS

• Apple macOS
• Path traversal

Symlink following in Apple macOS

• Apple macOS
• Path traversal

Path traversal in Apple macOS

• Apple macOS
• Path traversal

Path traversal in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple watchOS
• Path traversal

Path traversal in Apple macOS

• Apple macOS
• Path traversal

Path traversal in Apple iOS and iPadOS

• Apple iOS and iPadOS
• Path traversal

Path traversal in Apple macOS

• Apple macOS
• Path traversal

Path traversal in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple visionOS
• Path traversal

Path traversal in Apple macOS

• Apple macOS
• Path traversal

Path traversal in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• Path traversal

IBM® Data Server driver for JDBC and SQLJ could allow a remote attacker to perform an arbitrary file write due to improper validation of file paths

• IBM Db2
• Path traversal

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• IBM DataStage on Cloud Pak for Data
• Path traversal

DataStage on Cloud Pak for Data has several vulnerabilities due to open source software

• IBM DataStage on Cloud Pak for Data
• Path traversal

tarfile extraction filters allow file modification and content disclosure via hard link to symlink

• Python Software Foundation CPython
• Path traversal

PyMuPDF 1.28.2 Path Traversal via extract_objects() Font Branch

• PyMuPDF
• Path traversal

IBM i is Affected By Multiple Vulnerabilities in Navigator for i and Digital Certificate Manager for i.

• i
• Path traversal