Path traversal.

EyeLock nano NXT 3.05.1193 Path Traversal via logdownload.php

• EyeLock nano NXT
• Path traversal

Cherry Plugin for WordPress < 1.2.7 Path Traversal via download-content.php

• Cherry Team Cherry Plugin
• Path traversal

Memphis Documents Library WordPress Plugin < 3.1.6 Path Traversal via mdocs-img-preview

• Ian Howatson Memphis Documents Library
• Path traversal

Aspose PDF Exporter WordPress Plugin < 2.0 Path Traversal via aspose_pdf_exporter_download.php

• Aspose PDF Exporter
• Path traversal

Aspose Importer & Exporter WordPress Plugin < 3.0 Path Traversal via aspose_import_export_download.php

• Aspose Importer & Exporter
• Path traversal

Aspose Doc Exporter WordPress Plugin < 2.0 Path Traversal via aspose_doc_exporter_download.php

• Aspose Doc Exporter
• Path traversal

ChurcHope WordPress Theme < 2.2 Path Traversal via downloadlink.php

• ChurcHope
• Path traversal

NativeChurch WordPress Theme < 1.6.2 Arbitrary File Download via download.php

• imithemes NativeChurch
• Path traversal

TinyMCE Thumbnail Gallery WordPress Plugin < 1.1.0 Path Traversal via download-image.php

• James Charlesworth TinyMCE Thumbnail Gallery
• Path traversal

Path traversal in Totolink

• Totolink
• Path traversal

-J no-clobber guarantee bypassed with 103 early hints

• curl
• Path traversal

ApostropheCMS import-export tar guard misses './..' because it is a literal '../' substring test

• Path traversal

<3.7.0 · fixed in 3.7.0

ApostropheCMS: Path traversal in uploadfs

• Path traversal

<1.28.0 · fixed in 1.28.0

Argo CD: A Jsonnet import can read files from the repo-server

• argoproj argo-cd
• Path traversal

Arbitrary file read and write in Google ADK TypeScript (@google/adk) FileArtifactService via path traversal in userId and sessionId

• ADK TypeScript (@google/adk)
• Path traversal

aaPanel Download Endpoint v2.py send_file path traversal

• aaPanel
• Path traversal

Froxlor before 2.3.15 Symlink Following Privilege Escalation via Traffic Cron

• froxlor
• Path traversal

FlexGet before 3.20.7 Path Traversal (Zip Slip) via decompress plugin

• FlexGet
• Path traversal

Flatpak vulnerable to path traversal via unvalidated "arch" parameter in DeployAppstream

• flatpak
• Path traversal

DrayTek Vigor2960 swmconfigupload mainfunction.cgi cgiEscape path traversal

• DrayTek Vigor2960
• Path traversal

DrayTek Vigor2960 mainfunction.cgi setSWMProfile path traversal

• DrayTek Vigor2960
• Path traversal

DrayTek Vigor2960 Apmupload mainfunction.cgi path traversal

• DrayTek Vigor2960
• Path traversal

uTox through 0.18.1 Path Traversal via Auto-Accepted File Transfers

• uTox
• Path traversal

Path traversal in Advantech ADAM-3600

• Advantech ADAM-3600
• Path traversal

Path traversal in Advantech ADAM-3600

• Advantech ADAM-3600
• Path traversal

Path traversal in Apple macOS

• Apple macOS
• Path traversal

MLflow FileStore trace IDs allow path traversal and arbitrary file writes

• Path traversal

<3.17.2 · fixed in 3.17.2

H3C Magic NX15 upload importprofile path traversal

• H3C Magic NX15
• Path traversal

kiwilan php-archive Extraction ArchiveZip.php extract path traversal

• kiwilan php-archive
• Path traversal

grandnode grandnode2 Excel Import ProductImportDataObject.PrepareProductPictures path traversal

• grandnode2
• Path traversal

TickTick Android 8.2.2.0 Path Traversal via ShareReceiveActivity

• TickTick Limited TickTick for Android
• Path traversal

Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

• Path traversal

>=0.7.2, <0.9.70 · fixed in 0.9.70

IBM MQ Path Traversal

• IBM MQ Operator
• IBM MQ Advanced container images
• Path traversal

FOSSBilling: Unauthenticated attacker can probe existence of arbitrary files via guest/system/template_exists

• FOSSBilling
• Path traversal
• Information disclosure

CLI Bridge: High-severity sandbox escape via dangling symlink

• anshupriyan cli-bridge
• Path traversal

docling-core 2.5.0 before 2.103.0 Local File Disclosure via Plain Path ImageRef

• docling-project docling-core
• Path traversal

NoteGen through 0.38.3 Local File Disclosure via Chat Image Analysis

• codexu NoteGen
• Path traversal

Mopidy before 4.0.5 Path Traversal via File Backend library.lookup

• Mopidy
• Path traversal

Yank Note before 3.93.1 Path Traversal via /api/help Endpoint

• purocean Yank Note
• Path traversal

Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 7
• Path traversal

diem-project diem dmCodeEditor actions.class.php join path traversal

• diem
• Path traversal

Apache Camel: camel-azure-files resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing en…

• Apache Software Foundation Apache Camel
• Path traversal

Apache Camel: camel-smb resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry cont…

• Apache Software Foundation Apache Camel
• Path traversal

Apache Camel: camel-mina-sftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entr…

• Apache Software Foundation Apache Camel
• Path traversal

Apache Camel: camel-ftp resolved the remote path of a polled file from the name reported in the server directory listing without constraining it to the directory being polled, so a listing entry cont…

• Apache Software Foundation Apache Camel
• Path traversal

Apache Camel: Camel-Docling Unvalidated Message Body Input Source Enables Server-Side Request Forgery and Local File Disclosure

• Apache Software Foundation Apache Camel
• Path traversal
• Information disclosure

Apache Kylin: delete metadata backup path-confinement bypass

• Apache Software Foundation Apache Kylin
• Path traversal

WordPress MapSVG plugin <= 8.16.1 - Arbitrary File Deletion vulnerability

• PT Norther Lights Production MapSVG
• Path traversal

Xinference through 4.0.1 Path Traversal via model_name in Custom Model Registration

• xorbitsai inference
• Path traversal

Vita3K before build 4187 Path Traversal via VPK Package Installation

• Vita3K
• Path traversal

Omnigent 0.3.0 before 0.14.0 Path Traversal via Sub-Agent os_env.cwd

• omnigent
• Path traversal

WhoDB 0.104.0 before 0.135.0 Arbitrary File Read/Write via DuckDB Query Editor

• clidey whodb
• Path traversal

weForms <= 1.6.28 - Unauthenticated Limited Media File Deletion via 'wpuf_files' Parameter

• boldgrid weForms – Easy Drag & Drop Contact Form Builder For WordPress
• Path traversal

Contact Form 7 Signature Addon <= 4.2.2 - Unauthenticated Arbitrary File Read via Path Traversal in Email Attachments

• Contact Form 7 Signature Addon
• Path traversal

Post Export Import with Media <= 1.17.2 - Authenticated (Administrator+) Path Traversal via 'theme_slug' Parameter

• wpazleen Post Export Import with Media
• Path traversal

Path traversal in Tektronix 3 Series MDO

• Tektronix 3 Series MDO
• Path traversal

Path traversal in Tektronix 3 Series MDO

• Tektronix 3 Series MDO
• Path traversal

Nautilus: nautilus: arbitrary file deletion via trash symlink

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 6
• Path traversal

ClickMigrate has Path Traversal in "revision -m" argument

• Path traversal

<1.0.3 · fixed in 1.0.3

Helical Insight through 7.0.0 Path Traversal via /getExternalResource

• helicalinsight
• Path traversal