Path traversal.

phpMyAdmin MoTranslator Loader.php getTranslator path traversal

• phpMyAdmin MoTranslator
• Path traversal

Improper Limitation of a Pathname to a Restricted Directory in Kibana Leading to Unauthorized Resource Deletion

• Elastic Kibana
• Path traversal

Docker Sandboxes sbx cp follows workspace symlinks outside the authorized host directory

• Docker Sandboxes
• Path traversal

mongofiles may write outside the working directory through a symlink

• MongoDB Database Tools
• Path traversal

mongofiles may disclose GridFS content to standard output through a stored filename

• MongoDB Database Tools
• Path traversal

Local Privilege Escalation via OpenVPN Configuration and Proxy Settings in Securepoint SSL VPN Client v2 for Windows

• Securepoint SSL VPN Client v2
• Path traversal
• Command injection

nnn through 5.3 Symlink-Following Write via NNN_FIFO Handling

• jarun nnn
• Path traversal

ruTorrent before 5.3.20 Path Traversal via datadir Plugin Symlink Following

• Novik ruTorrent
• Path traversal

Koodo Reader through 2.4.6 Path Traversal via OPDS Cover and Download Handlers

• koodo-reader
• Path traversal

SQLBot through 1.10.3 Path Traversal via datasource importToDb Endpoint

• dataease SQLBot
• Path traversal

Dockhand before 1.0.54 Path Traversal via Stack Environment Routes

• Finsys dockhand
• Path traversal

Path traversal in vivo BlueLM Copilot

• vivo BlueLM Copilot
• Path traversal

Improper limitation of paths in py-aspect-model-loader

• Eclipse Foundation Eclipse Semantic Modeling Framework (ESMF)
• Path traversal

FluentCart A New Era of eCommerce <= 1.6.2 - Authenticated (Custom+) Arbitrary File Deletion via 'file_path' Parameter

• wpmanageninja FluentCart A New Era of eCommerce – Faster, Lighter, and Simpler
• Path traversal

Contact Form Extender for Divi Builder <= 1.0.6 - Unauthenticated Arbitrary File Deletion via Path Traversal

• satindersingh Contact Form Extender for Divi – Submissions DB & Extra Fields
• Path traversal

Academy LMS <= 4.0.1 - Authenticated (Contributor+) Arbitrary HTML File Read via 'id' Parameter in /wp/v2/templates REST Route

• kodezen Academy LMS – AI Course Builder, Quizzes, Certificates & eLearning
• Path traversal

BuddyPress XProfile Image Field <= 3.1.0 - Unauthenticated Arbitrary File Deletion via Signup Image Field Activation Handler

• kalengi BuddyPress XProfile Custom Image Field
• Path traversal

A Zip Slip vulnerability in the /upload endpoint of codeskyblue gohttpserver through v1.3.0 allows attackers to write arbitrary files via uploading a crafted Zip archive.

• Path traversal

An issue in im3x Scriptables through v2-dev branch allows attackers to inject arbitrary OS commands via uploading a file with a crafted filename to the /sync endpoint.

• Path traversal
• Command injection

Improper limitation of a pathname to a restricted directory in the deployment status component of the AWS Serverless MCP Server

• aws-serverless-mcp-server
• Path traversal

Symlink following in WebPros cPanel

• WebPros cPanel
• Path traversal

Path traversal in Google Android

• Google Android
• Path traversal

Path traversal in Google Android

• Google Android
• Path traversal

psqlODBC log files are created with default permissions at a predictable path and follow symbolic links

• PostgreSQL psqlODBC
• Path traversal
• Broken access control

Arbitrary file read via Alertmanager receiver configuration in Grafana Mimir

• Grafana Enterprise Metrics (GEM)
• Grafana Mimir
• Path traversal

Control Web Panel (CWP) < 1.16 File Write and Command Injection via phpini_editor

• Control Web Panel
• Path traversal
• Command injection

GoFound through 1.4.1 Path Traversal via database parameter in /api/db/drop

• sea-team GoFound
• Path traversal

Path traversal in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Path traversal

Path traversal in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Path traversal

Path traversal in Dell OpenManage Enterprise

• Dell OpenManage Enterprise
• Path traversal

@fastify/reply-from vulnerable to path traversal via backslash dot-segment prefix escape

• @fastify/reply-from
• Path traversal

@fastify/http-proxy vulnerable to prefix escape via decoded route parameters

• @fastify/http-proxy
• Path traversal
• CWE-436

@fastify/http-proxy vulnerable to prefix escape via percent-encoded backslash dot-segments

• @fastify/http-proxy
• Path traversal

deepset-ai farm Model Package Loader language_model.py WordEmbedding_LM.load path traversal

• deepset-ai farm
• Path traversal

deepset-ai farm Tokenizer Loader tokenization.py EmbeddingTokenizer.from_pretrained path traversal

• deepset-ai farm
• Path traversal

Webpro-nl Knip Workspace IssueFixer.ts writeFile path traversal

• Webpro-nl Knip
• Path traversal

Aklivity Zilla http-filesystem Binding FileSystemServerFactory Path.resolve path traversal

• Aklivity Zilla
• Path traversal

http4k before 6.62.0.0-ee Path Traversal via ThymeleafTemplates Template Resolution

• http4k
• Path traversal

LobeHub Chat 1.84.26 before 2.1.49 Path Traversal RCE via writeTempFile

• lobehub chat
• Path traversal

Network-AI before 5.15.5 Path Traversal via InputSanitizer.sanitizePath

• Jovancoding Network-AI
• Path traversal

Network-AI 5.13.4 before 5.15.5 Path Traversal via AgentVCR Cassette Name

• Jovancoding Network-AI
• Path traversal

Network-AI 5.13.4 before 5.15.5 Path Traversal via FileJobStore Job ID

• Jovancoding Network-AI
• Path traversal

Termix-SSH Termix transferToHost path traversal

• Termix
• Path traversal

WordPress JetFormBuilder plugin <= 3.6.7.1 - Attachment Deletion Via Media-Field Preset vulnerability

• Crocoblock JetFormBuilder
• Path traversal

Beta9 host filesystem exposure via volume path traversal

• beam-cloud Beta9 gateway
• beam-cloud Beta9 worker
• Path traversal
• Information disclosure

Beta9 container escape via unvalidated sandbox file paths

• beam-cloud Beta9 worker
• Path traversal

Oray Pugongying X5 Pro openwrt_release config_restore_ex path traversal

• Oray Pugongying X5 Pro
• Path traversal

FFmpeg 5.0 through 9.0.2 Path Traversal via IMF Demuxer ASSETMAP Path

• FFmpeg
• Path traversal

DeepInfer through 0.1.0 Path Traversal via /profile output_dir Parameter

• deepseek-ai DeepInfer
• Path traversal

WebDyne versions from 3.007 before 3.022 for Perl execute .psp files outside the document root via path traversal in the PSGI API route fallback

• Path traversal

epiphany: TAR-based .xpi with hard links can overwrite user files during WebExtension install

• GNOME Epiphany
• Path traversal

Acadlix LMS <= 1.1.9 - Unauthenticated Arbitrary File Deletion via 'delete_file_data.file_path' Parameter

• Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress
• Path traversal

Photo Reviews for WooCommerce <= 1.2.31 - Unauthenticated File Deletion via 'wcpr_image_upload_id' Parameter

• villatheme Revopic – Photo Reviews for WooCommerce
• Path traversal

BuddyForms 2.8.8 - 2.10.0 - Unauthenticated Guest Attachment Deletion

• BuddyForms
• Path traversal

Bulk Media Register < 2.01 - Author+ Arbitrary File Move via Path Traversal

• Bulk Media Register
• Path traversal

Nuxt dev server arbitrary file read through client error reports

• Path traversal

>=4.6.0, <4.6.3 · fixed in 4.6.3

MariaDB Connector/J: LOAD DATA LOCAL INFILE file check could be satisfied by text inside quoted identifiers, letting a malicious server read client files

• Path traversal
• CWE-20

>=3.0.0, <3.3.7 || >=3.4.0, <3.4.5 || >=3.5.0, <3.5.11 · fixed in 3.3.7, 3.4.5, 3.5.11

Signal K resources API path traversal can disclose the JWT signing secret and enable remote code execution

• Path traversal

>=1.0.0, <1.5.3 · fixed in 1.5.3

AdminNeo SQLite Database-List Drop Arbitrary File Deletion

• Path traversal

<5.5.1 · fixed in 5.5.1

sevenz-rust2: unchecked 7z entry paths permit traversal and absolute-path file overwrites

• hasenbanck sevenz-rust2
• Path traversal