slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows attackers to write image files outside the output directory via manife...

CVE-2026-108603

slide-maker through 5.8.0 contains a path traversal vulnerability in generate_images_openai.py that allows attackers to

历史摘要 · 未重新核验 · NVD

Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile that allows arbitrary file write via unvalidated tarfile.e...

CVE-2026-108597

Cohere Python SDK 5.11.0 through 7.2.0 contains a path traversal (tar slip) vulnerability in _s3_models_dir_to_tarfile t

历史摘要 · 未重新核验 · NVD

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for WordPress, BuddyPress and bbPress buddypress-media allows...

CVE-2026-105892

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in rtCamp Inc. rtMedia for

历史摘要 · 未重新核验 · NVD

argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API endpoints vi...

CVE-2026-108585

argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool tha

历史摘要 · 未重新核验 · NVD

argocd-mcp through 0.9.0 Path Traversal via delete_application Tool

CVE-2026-108585

argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool tha

历史摘要 · 未重新核验 · OSV.dev

The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the 'svg_image' parameter of the /wp-json/elicus/v1/dipl-modu...

CVE-2026-91136

The Divi Plus plugin for WordPress is vulnerable to Arbitrary File Read in versions up to, and including, 2.4.0 via the

历史摘要 · 未重新核验 · NVD

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation i...

CVE-2026-104722

The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin for WordPress is vulnerable to arbitrary

历史摘要 · 未重新核验 · NVD

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.74.3 via the get_instance_css function. This make...

CVE-2026-97348

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and inclu

历史摘要 · 未重新核验 · NVD

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the rename_fi...

CVE-2026-104801

The PPOM – Product Addons & Custom Fields for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion

历史摘要 · 未重新核验 · NVD

SiteOrigin Widgets Bundle <= 1.74.3 - Authenticated (Contributor+) Arbitrary File Read via LESS Injection via [siteorigin_widget] Shortcode 'value' JSON Instance (design.colors ...

CVE-2026-97348

The SiteOrigin Widgets Bundle plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and inclu

历史摘要 · 未重新核验 · OSV.dev

The W3 Total Cache WordPress plugin before 2.10.6 does not confine a media-import file copy to the document root, nor enforce an effective file-type restriction on it, allowing ...

CVE-2026-107321

The W3 Total Cache WordPress plugin before 2.10.6 does not confine a media-import file copy to the document root, nor en

历史摘要 · 未重新核验 · NVD

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.17.1 via the 'file_path' parameter parameter....

CVE-2026-104763

The Post Export Import with Media plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and i

历史摘要 · 未重新核验 · NVD

Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark restore accepts a client-supplied state_id and joins it int...

CVE-2026-108258

Shiny for Python is a framework for building interactive web applications in Python. From 1.4.0 until 1.6.4, bookmark re

历史摘要 · 未重新核验 · NVD

Shiny for Python has path traversal in bookmark restore

CVE-2026-108258

### Impact Shiny for Python's bookmark-restore path accepted a client-supplied `_state_id_` query-string value and join

历史摘要 · 未重新核验 · GitHub Advisory

Contao: Path traversal in the images controller

CVE-2026-107844

`ImagesController` joins the user controlled `{path}` onto the configured image target directory with `Path::join()`, wh

历史摘要 · 未重新核验 · GitHub Advisory

Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled {path} parameter to the configured image target directory wi...

CVE-2026-107844

Contao is an Open Source CMS. From version 5.0.0 until 5.3.50 and 5.7.12, ImagesController joins the user-controlled {pa

历史摘要 · 未重新核验 · NVD

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard...

CVE-2026-108158

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows

历史摘要 · 未重新核验 · GitHub Advisory

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files via crafted...

CVE-2026-108158

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows

历史摘要 · 未重新核验 · NVD

pyLoad: Tar extraction creates device nodes and FIFOs (member types not filtered; tarfile extractall without filter=)

### Summary `UnTar._safe_extractall` — the hardening added for GHSA-mvwx-582f-56r7 — validates member **names** and sym

历史摘要 · 未重新核验 · GitHub Advisory

plugNmeet Server through 2.5.2 Path Traversal via /api/whiteboard/convert

CVE-2026-108158

plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows

历史摘要 · 未重新核验 · OSV.dev