Path traversal.

Path Traversal leading to Remote Code Execution in Ollama

• Ollama
• Path traversal
• CWE-913

Joomla Extension - balbooa.com - Path Traversal in image preview Gridbox < 2.20.4.0

• balbooa.com Gridbox extension for Joomla
• Path traversal

Improper Link Resolution Before File Access ('Link Following') in hMailServer

• Progressive Robot Ltd hMailServer
• Path traversal

Flatpak-builder: local file exfiltration via `file

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Path traversal

Path traversal in Brocade Active Support Connectivity Gateway

• Brocade Active Support Connectivity Gateway
• Path traversal

Path traversal in Brocade Active Support Connectivity Gateway

• Brocade Active Support Connectivity Gateway
• Path traversal

BackWPup < 5.7.7 - Admin+ Path Traversal to RCE via Restore PclZip Fallback

• BackWPup
• Path traversal

Path traversal in Brocade SANnav

• Brocade SANnav
• Path traversal

External control of a file path in Brocade Fabric OS

• Brocade Fabric OS
• Path traversal

Path traversal in Brocade Fabric OS

• Brocade Fabric OS
• Path traversal

Vault ACL Policy Cache Vulnerable to Cross-Namespace Policy Resolution

• HashiCorp Vault Enterprise
• Path traversal

Vault Vulnerable to Arbitrary Code Execution via Plugin Catalog Entries Restored From Raft Snapshots

• HashiCorp Vault
• HashiCorp Vault Enterprise
• Path traversal

Docling has arbitrary file read/write (and command execution when shell-escape is enabled) when rendering untrusted TikZ with the opt-in Tectonic engine

• Path traversal
• CWE-1188

>=2.94.0, <2.132.0 · fixed in 2.132.0

Docling: Crafted DoclingDocument JSON embeds local image files into converted output

• Path traversal
• Information disclosure

>=2.16.0, <2.131.0 · fixed in 2.131.0

Payload: Incomplete validation during the upload file lifecycle

• Path traversal

<3.90.0 || >=4.0.0-canary.0, <4.0.0-canary.34 · fixed in 3.90.0, 4.0.0-canary.34

Ghost: Path Traversal via Locale Setting

• Path traversal

>=1.20.0, <6.64.0 · fixed in 6.64.0

Ghost: Remote Code Execution via Theme Translation Files

• Path traversal
• Code injection

>=6.10.3, <6.64.0 · fixed in 6.64.0

Backstage: Improper input validation in Confluence to Markdown scaffolder module

• Path traversal

<0.3.25 · fixed in 0.3.25

Backstage: Improper repository path validation in a Scaffolder backend module

• Path traversal

<0.3.25 · fixed in 0.3.25

Backstage has iImproper filesystem validation in Bitbucket pull-request scaffolder actions

• Path traversal

<0.3.10 · fixed in 0.3.10

Backstage: Improper authorization enforcement for TechDocs static content

• Path traversal
• Broken access control

<2.2.4 · fixed in 2.2.4

Backstage: Improper input validation in TechDocs static content requests

• Path traversal

<2.2.4 · fixed in 2.2.4

Backstage: Cloud storage catalog locations may cross configured storage boundaries

• Path traversal

<0.17.8 · fixed in 0.17.8

Backstage: Improper input validation in proxy-backend

• Path traversal
• CWE-20

<0.6.17 · fixed in 0.6.17

Backstage: Improper input validation in cloud storage URL readers

• Path traversal

<0.17.8 · fixed in 0.17.8

Backstage: Inconsistent enforcement of allowed location types during catalog processing

• Path traversal
• Broken access control

<3.9.1 · fixed in 3.9.1

Backstage: Improper task state validation in Scaffolder backend

• Path traversal
• Race condition

<4.1.0 · fixed in 4.1.0

Backstage has potential file exposure through local TechDocs publisher

• Path traversal

<1.15.4 · fixed in 1.15.4

Backstage has improper input validation in TechDocs Markdown extension configuration

• Path traversal
• Server-side request forgery (SSRF)

<1.15.4 · fixed in 1.15.4

Ghost: Path Traversal Vulnerability in Ghost ImageSize Service

• Path traversal

>=6.14.0, <6.27.0 · fixed in 6.27.0

Quasar Framework: App Vite SSG page output paths can escape the configured distribution directory

• Path traversal

>=3.1.0, <3.3.0 · fixed in 3.3.0

Quasar Framework: App Vite build cleanup can recursively remove unsafe configured output directories

• Path traversal

>=1.0.0, <3.3.0 · fixed in 3.3.0

Quasar Framework: Path Traversal / Arbitrary File Write via crafted Icon Genie profile

• Path traversal

<6.1.1 · fixed in 6.1.1

Cisco Jabber for Android Path Traversal via Shared Content URI

• Cisco Jabber for Android
• Path traversal

Cisco Smart Software Manager On-Prem Unauthenticated API Vulnerability

• Cisco License On-Prem
• Path traversal

Path traversal in SonicWall SMA1000

• SonicWall SMA1000
• Path traversal

Path traversal in visidata

• visidata
• Path traversal

Path traversal in visidata

• visidata
• Path traversal

Arbitrary File Write via Write-Time Symlink Following (TOCTOU) in Claude Code

• @anthropic-ai/claude-code
• Path traversal
• Race condition

Path Traversal in BugTracker.NET

• BugTracker.NET
• Path traversal

Path traversal in Veeam Backup and Replication

• Veeam Backup and Replication
• Path traversal

Apache Impala: Path traversal executes JARs outside trusted paths

• Apache Software Foundation Apache Impala
• Path traversal

Path Traversal in Satel Iberia SenNet Datalogger Serie 200

• Satel Iberia SenNet Datalogger Serie 200
• Path traversal

Pulp-rpm: distribution tree publish creates directories from .treeinfo ids

• Red Hat Satellite 6
• Red Hat Update Infrastructure 4 for Cloud Providers
• Path traversal

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Path traversal

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Path traversal

Langflow OSS is affected by multiple vulnerabilities

• IBM Langflow OSS
• Path traversal

Backstage: TechDocs arbitrary file read via mkdocs snippets

• backstage
• plugin-techdocs-node
• Path traversal
• CWE-61

Path traversal in OpenBSD OpenSSH

• OpenBSD OpenSSH
• Path traversal

Security Advisory 0189

• Arista Networks CloudVision Portal
• Path traversal

Security Advisory 0189

• Arista Networks CloudVision Portal
• Path traversal

Security Advisory 0188

• Arista Networks CloudVision Portal
• Arista Networks CloudVision Sensor
• Path traversal

Cri-o: cri-o: bind_mount_prefix intermediate-symlink prefix bypass

• Red Hat OpenShift Container Platform 4
• Path traversal

Local Arbitrary File Write Leading to Local Privilege Escalation in ClearPass Policy Manager OnGuard Agent

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Path traversal

Unauthenticated Path Traversal in ClearPass Policy Manager API Endpoint Leads to Authorization Bypass

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Path traversal

Authenticated Path Traversal Vulnerability Leads to Unauthorized File Access and Modification in ClearPass Policy Manager

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Path traversal

Authenticated Path Traversal Vulnerability Leads to Remote Code Execution in ClearPass Policy Manager

• Hewlett Packard Enterprise (HPE) ClearPass Policy Manager (CPPM)
• Path traversal

Path traversal in Dell System Update

• Dell System Update
• Path traversal

Path traversal in Dell System Update

• Dell System Update
• Path traversal

External control of a file path in JetBrains TeamCity

• JetBrains TeamCity
• Path traversal