Path traversal.

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.__init__.

• Path traversal

agent-zero 1.7, 1.8, 1.9, and 1.10 is vulnerable to Directory Traversal in python/helpers/file_browser.py:FileBrowser.save_file_b64.

• Path traversal

modelscope Agentscope v1.0.0-v1.0.8 is vulnerable to Path Traversal in insert_text_file.

• Path traversal

modelscope Agentscope v1.0.18-v1.0.0 is vulnerable to Path Traversal in write_text_file.

• Path traversal

@xhmikosr/decompress: Path traversal via symlink chain

• Path traversal

<=4.2.1 · no fixed version yet

Fireware OS Path Traversal in WebUI Management Agent Allows Arbitrary Local File Read

• WatchGuard Fireware OS
• Path traversal

Fireware OS Improper Authorization in Access Portal Reverse Proxy

• WatchGuard Fireware OS
• Path traversal
• Broken access control

Fireware OS Missing Authorization in wgagent Management API Allows Denial of Service - Variant A

• WatchGuard Fireware OS
• Path traversal
• Memory corruption

EasyTimeline should not serve image maps as application/xml

• The Wikimedia Foundation Mediawiki - EasyTimeline extension
• Path traversal
• Other injection

VLC media player before 3.0.24 Path Traversal via skins2

• videolan vlc
• Path traversal

Path Traversal in VMDK Extractor in OSV-SCALIBR

• Google OSV-SCALIBR
• Path traversal

Authenticated Local Path Traversal Vulnerability Leads to Denial-of-Service in HPE Networking Instant On

• Hewlett Packard Enterprise (HPE) Instant ON
• Path traversal

DataStage on Cloud Pak for Data has several vulnerabilities

• IBM DataStage on Cloud Pak for Data
• Path traversal

IBM Guardium Data Protection is affected by multiple vulnerabilities.

• IBM Guardium Data Protection
• Path traversal

Path Traversal via Symlink Following in allowedLocalRoots in MCP Toolbox for Databases

• Google MCP Toolbox for Databases
• Path traversal

Race condition in tempfile.TemporaryDirectory cleanup allows deleting files outside the temporary directory

• Python Software Foundation CPython
• Path traversal

Marmite through 0.4.2 Path Traversal via Development Server

• rochacbruno marmite
• Path traversal

Joomla Extension - balbooa.com - Unauthenticated path traversal exfiltrates local files through auto-reply attachments in Balbooa Forms < 2.4.3.4

• balbooa.com Balbooa Forms extension for Joomla
• Path traversal

Joomla Extension - balbooa.com - File meta data tampering in Balbooa Forms < 2.4.3.4

• balbooa.com Balbooa Forms extension for Joomla
• Path traversal

webpack-dev-middleware vulnerable to Path Traversal via non-slash-terminated publicPath

• Path traversal
• Memory corruption

<7.4.6 || >=8.0.0, <8.3.0 · fixed in 7.4.6, 8.3.0

Joomla! Core - [20260905] - Core - Arbitrary directory deletion via cache purge action in Joomla 4.0.0-5.4.8, 6.0.0-6.1.3

• Joomla! Project Joomla! CMS
• Path traversal

Local Privilege Escalation via Improper Link Resolution in Cloud Session Recording

• TeamViewer Full Client
• TeamViewer Host
• Path traversal

Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) in TeamViewer Desktop Clients

• TeamViewer Full Client
• TeamViewer Host
• Path traversal

Unauthenticated arbitrary file write leading to RCE in gmfeed PrestaShop module

• MyPresta Google Merchant Center Feed
• Path traversal

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Wireshark

• Wireshark
• Path traversal

Path traversal in Hitachi Energy RTU500 series CMU firmware

• Hitachi Energy RTU500 series CMU firmware
• Path traversal

Flowring Agentflow 4.0 - Improper Limitation of a Pathname to a Restricted Directory（Path Traversal）

• Flowring Technology Corp Agentflow 4.0
• Path traversal

Apache Karaf: Path Traversal in Config Service Allows Manager-to-Admin Privilege Escalation

• Apache Software Foundation Apache Karaf
• Path traversal

mark3labs mcp-filesystem-server v0.11.1 is vulnerable to Directory Traversal due to an improper link resolution in validatePath (filesystemserver/handler/helper.go).

• Path traversal

Dozzle before 11.1.2 Path Traversal via Log ZIP Download

• amir20 dozzle
• Path traversal

ZoneMinder 1.37.x Path Traversal via files view

• zoneminder
• Path traversal

Eleveo Quality Management Questionnaire Audio Upload Scorecard.jsp path traversal

• Eleveo Quality Management
• Path traversal

DeepSeek deepseek-harness Bundle Patch profile.ts loadProfile path traversal

• deepseek-harness
• Path traversal

Authenticated Remote Code Execution via Path Traversal in FreePBX Backup Module

• FreePBX security-reporting
• Path traversal
• Code injection

FreePBX: Authenticated Remote Code Execution via File Upload and Convert in Soundlang Module

• FreePBX security-reporting
• Path traversal
• Unrestricted file upload

PMWeb downloader.aspx path traversal

• PMWeb
• Path traversal

Tencent AI-Infra-Guard File Access dir_actions.py startsWith path traversal

• Tencent AI-Infra-Guard
• Path traversal

Path Traversal in Innotim Software's Logsign SIEM

• Innotim Software, Telecommunications and Consultancy Trade Ltd. Co. Logsign SIEM
• Path traversal

Path traversal in Fleet Helm valuesFiles allows disclosure of files outside the bundle directory

• SUSE Rancher
• Path traversal

LXD client recursive file pull allows directory escape via malicious VM agent

• Canonical LXD
• Path traversal

Arbitrary file write on LXD host via symlink in migration stream

• Canonical LXD
• Path traversal

Path traversal in LXD btrfs storage driver allows arbitrary file deletion and write on host as root

• Canonical LXD
• Path traversal

Path traversal via Btrfs optimized-backup subvolumes[].path enables root file/dir manipulation in LXD

• Canonical LXD
• Path traversal

CLI Path Traversal via Content-Disposition in LXD Image Export/Copy

• Canonical LXD
• Path traversal

Path Traversal During Project Archive Import

• ABB Protection and control IED manager (PCM600)
• Path traversal

dbgate Files Endpoint runners.js files path traversal

• dbgate
• Path traversal

Path Traversal in Dayforce ESS Excelity

• Dayforce ESS Excelity
• Path traversal

dbgate Export databaseConnections.js exportModelSql path traversal

• dbgate
• Path traversal

dbgate Create Connection Endpoint zipJsonLinesData.js zipJsonLinesData path traversal

• dbgate
• Path traversal

dbgate save-uploaded-file Endpoint files.js saveUploadedFile path traversal

• dbgate
• Path traversal

dbgate Archive Link Creation archive.js createLink path traversal

• dbgate
• Path traversal

Kubernetes kubectl cp path traversal on Windows allows arbitrary file writes

• Kubernetes
• Path traversal

FLB-Music FLB-Music-Player createParsedTrack.ts path.join path traversal

• FLB-Music-Player
• Path traversal

Path Traversal in Bimser Solution Software's eBA Plus

• Bimser Solution Software Trade Inc. eBA Plus Document and Workflow Management System
• Path traversal

Flatpak: flatpak: arbitrary read-access to files in the system-helper context via oci symlink following

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Path traversal

Flatpak: flatpak: extension metadata path traversal file existence oracle

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Path traversal

Flatpak: flatpak: path traversal issue in oci archive extraction via hardlinks

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Path traversal

pacquet before 12.0.0-alpha.5 Path Traversal via lockfile alias

• pnpm
• Path traversal

Joomla Extension - svenbluege.de - Path Traversal in Clear Cache task in Event Gallery extension < 6.5.0

• svenbluege.de Event Gallery for Joomla
• Path traversal

WebFacing Email Accounts for cPanel 5.3 - 5.3.6 - Unauthenticated LFI via assets/index.php

• WebFacing™
• Path traversal