Path traversal.

muCommander through 1.6.2 Path Traversal via Archive Extraction to FTP/SFTP

• muCommander
• Path traversal

ai-fusion-video through 1.2.0 Path Traversal in Media Upload subDir Parameter

• Stonewuu ai-fusion-video
• Path traversal

Path traversal in Fortinet FortiSIEM

• Fortinet FortiSIEM
• Path traversal

Local Privilege Escalation

• Citrix UniconOS
• Path traversal

Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager storeFile

• risesoft-y9 Digital-Infrastructure
• Path traversal

Digital-Infrastructure 9.6.5 through 9.6.11 Path Traversal via fileManager retrieveFileStream

• risesoft-y9 Digital-Infrastructure
• Path traversal

Path traversal in Ivanti Xtraction

• Ivanti Xtraction
• Path traversal

External control of a file path in Ivanti Xtraction

• Ivanti Xtraction
• Path traversal

Path traversal in Ivanti Xtraction

• Ivanti Xtraction
• Path traversal

Metabase: Arbitrary File Read/Write via Unsafe H2 Built-in Functions

• metabase
• Path traversal

Hyperscale Path Traversal

• Commvault Cloud
• Path traversal

Serena before 2.0.0 Symlink Following in File Tools Allows Access Outside Project Root

• oraios serena
• Path traversal

YouTransfer Template Rendering template path traversal

• YouTransfer
• Path traversal

Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster get_list_file

• wazuh-manager
• Path traversal

Wazuh 4.1.1 before 4.14.8 Path Traversal via Cluster Upload Functions

• wazuh-manager
• Path traversal

Wazuh from 4.1.1 before 4.14.8 Path Traversal in CDB List Cluster Handlers

• wazuh-manager
• Path traversal

Wazuh 4.1.1 before 4.14.8 Path Traversal File Deletion via Rule/Decoder Delete Helpers

• wazuh-manager
• Path traversal

Path traversal in NVIDIA AIStore framework

• NVIDIA AIStore framework
• Path traversal

Path traversal in NVIDIA AIStore framework

• NVIDIA AIStore framework
• Path traversal

Path traversal in NVIDIA AIStore framework

• NVIDIA AIStore framework
• Path traversal

SeldonIO MLServer environment_tarball env.py _extract_env path traversal

• SeldonIO MLServer
• Path traversal

DeepPavlov Model Download untar path traversal

• DeepPavlov
• Path traversal

MosaicML Composer Checkpoint Extraction checkpoint.py tarball.extractall path traversal

• MosaicML Composer
• Path traversal

jbardin scp.py SCP Receive _recv_pushd path traversal

• jbardin scp.py
• Path traversal

Path traversal in Siemens .NET Client Library for SIMATIC S7 Webserver API

• Siemens .NET Client Library for SIMATIC S7 Webserver API
• Path traversal

Path traversal in Siemens Industrial Edge Device Kit - arm64 V1.10 and others

• Siemens Industrial Edge Device Kit - arm64 V1.10
• Siemens Industrial Edge Device Kit - arm64 V1.11
• Path traversal

Path traversal in Siemens Industrial Edge Cloud Device (IECD) and others

• Siemens Industrial Edge Cloud Device (IECD)
• Siemens Industrial Edge Device Kit - arm64 V1.10
• Path traversal

Polaris Office App Document Intake com.infraware.service.m.n.a path traversal

• Polaris Office App
• Path traversal

Directory Traversal vulnerability in Quanxun Huiju Network Technology (Beijing) Co., Ltd IK-Q3000 Enterprise-grade Wi-Fi 6 wireless router Enterprise Edition: <= iKuai8_3.7.23_Enterprise Build 202606…

• Path traversal

EricLBuehler Mistral.rs handlers.rs calibration_apply path traversal

• EricLBuehler Mistral.rs
• Path traversal

Security Vulnerability identified in IBM TRIRIGA - Zip Slip

• IBM TRIRIGA Application Platform
• Path traversal

IBM Planning Analytics Local is affected by security vulnerabilities

• IBM Planning Analytics
• Path traversal

IBM Planning Analytics Local is affected by security vulnerabilities

• IBM Planning Analytics
• Path traversal

DataStage on Cloud Pak for Data Path Traversal

• IBM DataStage on Cloud Pak for Data
• Path traversal

DataStage on Cloud Pak for Data Path Traversal

• IBM DataStage on Cloud Pak for Data
• Path traversal

Frappe Framework before v16.30.0 Arbitrary File Read via Outgoing Email HTML

• frappe
• Path traversal

Hugo from v0.162.0 before v0.167.0 Symlink File Disclosure via Nested Mount Ancestor

• hugo
• Path traversal

Hugo v0.84.0 before v0.167.0 Path Traversal via js.Build ESBuild Resolver

• hugo
• Path traversal

Hugo before v0.167.0 Path Traversal via css.Sass Import Fallback

• hugo
• Path traversal

IBM Maximo Application Suite Information Disclosure

• IBM Maximo Application Suite
• Path traversal

Vercel deepsec before 1.1.17 Arbitrary File Write via Symlink in Sandbox Tarball Extraction

• Vercel deepsec
• Path traversal

Servor 1.0.0 through 4.0.2 Unauthenticated Path Traversal via URL-Encoded Dot Segments

• lukejacksonn servor
• Path traversal

ConvertX: Path Traversal vulnerability leading to Arbitrary File Write

• C4illin ConvertX
• Path traversal

Path traversal in Gleam via unvalidated package application names

• Gleam
• Path traversal

Path traversal in Progress MarkLogic Server Query Console

• Progress Software Corporation MarkLogic Server
• Path traversal

LibreNMS before 26.9.0 Path Traversal via NFSen channel Parameter

• librenms
• Path traversal

SiYuan v3.7.0 before v3.8.6 Arbitrary File Read via Plugin ResponseFile.Path

• siyuan
• Path traversal

ImageMagick before 7.1.2-32 TOCTOU Symlink Race Path Policy Bypass via magick script

• ImageMagick
• Path traversal

FreeRDP before 3.32.0 Path Traversal via Clipboard cFileName

• FreeRDP
• Path traversal

Path traversal and privilege management flaws in Progress MarkLogic Server InfoStudio

• Progress Software Corporation MarkLogic Server
• Path traversal
• Privilege escalation

Path traversal in rebar3 via unvalidated dependency app names

• erlang rebar3
• Path traversal

Path traversal in Hex via unvalidated dependency app names

• hex
• Path traversal

ImageMagick before 7.1.2-33 Policy Bypass via Symlink in IsRightsAuthorizedByName

• ImageMagick
• Path traversal

Arbitrary file write through remote file identifiers in Progress ShareFile Storage Zones Controller FileCopyService

• Progress ShareFile Storage Zones Controller
• Path traversal

Path Traversal in SendSupportBundle allows File Deletion Outside the Intended Directory

• OTRS
• OTRS GmbH (former OTRS AG) ((OTRS)) Community Edition
• Path traversal

Path traversal in Samsung Mobile Smart Switch

• Samsung Mobile Smart Switch
• Path traversal

Path traversal in Samsung Mobile Samsung Flow

• Samsung Mobile Samsung Flow
• Path traversal

Metasploit Framework ios_image_gather Path Traversal Leading to Arbitrary File Write and Code Execution

• Rapid7 Metasploit Framework
• Path traversal

westboy CicadasCMS Template Management input TemplateController.input path traversal

• westboy CicadasCMS
• Path traversal

westboy CicadasCMS Backend Template Editor save TemplateController.save path traversal

• westboy CicadasCMS
• Path traversal