A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the file /cgi-bin/mainfunction.cgi of the component Apmupload. P...

CVE-2026-113392

A vulnerability was found in DrayTek Vigor2960 1.5.1.6 Revision 8218. This vulnerability affects unknown code of the fil

历史摘要 · 未重新核验 · NVD

uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending absolute or ../ file names to victims with auto-accept en...

CVE-2026-113352

uTox through 0.18.1 contains a path traversal vulnerability that allows Tox friends to write arbitrary files by sending

历史摘要 · 未重新核验 · NVD

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

CVE-2026-43852

A vulnerability could allow an authenticated attacker to write files to arbitrary locations on the system.

历史摘要 · 未重新核验 · NVD

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

CVE-2026-43851

A path traversal vulnerability could allow an authenticated attacker to read arbitrary files on the system.

历史摘要 · 未重新核验 · NVD

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be able to access protected user data.

CVE-2026-86928

A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Gate 27. An app may be

来源摘录 · NVD

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function...

CVE-2026-112372

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/uplo

历史摘要 · 未重新核验 · GitHub Advisory

MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking...

CVE-2026-53995

MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthen

历史摘要 · 未重新核验 · GitHub Advisory

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes pat...

CVE-2026-112372

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/uplo

历史摘要 · 未重新核验 · NVD

MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthenticated attackers to control filesystem paths by submitti...

CVE-2026-53995

MLflow 3.17.1 and earlier contains a path traversal vulnerability in the FileStore tracking backend that allows unauthen

历史摘要 · 未重新核验 · NVD

A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the file src/Readers/ArchiveZip.php of the component Extract...

CVE-2026-112302

A weakness has been identified in kiwilan php-archive up to 2.3.02. This affects the function ArchiveZip::extract of the

历史摘要 · 未重新核验 · NVD

Graphify Fortran extractor: incomplete cpp #include hardening allows arbitrary host-file read/exfiltration when indexing an untrusted repo

## Summary The Fortran extractor's C-preprocessor step (`graphify/extractors/fortran.py`, `_cpp_preprocess`) applies an

历史摘要 · 未重新核验 · GitHub Advisory

Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are directly exposed to public network, which is not common. In-h...

CVE-2026-108762

Path-confinement bypass during metadata backup deletion in Apache Kylin. Impact most to the kylin services that are dire

来源摘录 · NVD

The weForms – Easy Drag & Drop Contact Form Builder For WordPress plugin for WordPress is...

CVE-2026-110253

The weForms – Easy Drag & Drop Contact Form Builder For WordPress plugin for WordPress is vulnerable to limited media fi

历史摘要 · 未重新核验 · GitHub Advisory

ClickMigrate has Path Traversal in "revision -m" argument

CVE-2026-68549

### Impact A path traversal vulnerability in the `revision` command allowed a crafted migration name supplied via the `-

历史摘要 · 未重新核验 · GitHub Advisory

A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role...

CVE-2026-84823

A flaw was found in WildFly. A user with the `Monitor` role, which is the lowest standard Role-Based Access Control (RBA

历史摘要 · 未重新核验 · GitHub Advisory

copyparty FTP: upload outside defined volumes (limited path traversal)

CVE-2026-104102

The FTP and FTPS server -- if enabled -- would allow uploading to any folder that the copyparty process had permission t

历史摘要 · 未重新核验 · GitHub Advisory

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, copy_banner() in scheduler/ipp.c uses the attacker-controll...

CVE-2026-61702

OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. Prior to 2.4.20, co

来源摘录 · NVD

Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an...

CVE-2026-0312

Path traversal vulnerabilities in Palo Alto Networks Checkov by Prisma® Cloud enable an unauthenticated local user to wr

历史摘要 · 未重新核验 · GitHub Advisory

BBOT's Symlink guard bypass in unarchive module allows planting symlinks during extraction

CVE-2026-14966

BBOT's `unarchive` module rejects archives containing symlink entries before extraction, but for zip and 7z archives it

历史摘要 · 未重新核验 · GitHub Advisory

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted...

CVE-2026-103820

CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

历史摘要 · 未重新核验 · GitHub Advisory