Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows...
CVE-2025-71427
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and
#cwe-22
共收录 2611 条相关情报。
← 返回所有主题Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by supplying abs...
CVE-2025-71427
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and
Office-PowerPoint-MCP-Server through 2.0.7 Path Traversal via save_presentation and manage_image
CVE-2025-71427
Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 ...
CVE-2026-55393
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLo
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability...
CVE-2026-104286
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLook) allows remote unauthenticated attackers to read confi...
CVE-2026-55393
Unvalidated pathnames in the web interface in Teledyne FLIR Aware2 versions through 6.9.0.2 (PackBot) and 1.7.9 (FirstLo
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versions 3.3.22 and prior, an authenticated user with page-edit...
CVE-2026-71426
GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the community edition of that CMS. In versio
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FortiMail 7.6.0 through 7.6.6, FortiMa...
CVE-2026-104286
An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version 1.0.8.6, a flawed central path sanitizer lets an authent...
CVE-2026-55231
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version
Vvveb: Path traversal in Vvveb via sanitizeFileName() bypass enables arbitrary file read and delete through backup tools
CVE-2026-55231
Vvveb is a powerful and easy to use CMS with page builder to build websites, blogs or ecommerce stores. Prior to version
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution...
CVE-2026-103884
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enab
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enabled, the server fails to properly validate the file paths...
CVE-2026-103884
A flaw was found in the X.509 client certificate authenticator of Keycloak. When CRL Distribution Point checking is enab
The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated administrators to delete arbitrary directories by importing a...
CVE-2026-101889
The Prime Mover plugin for WordPress before 2.2.1 contains a path traversal vulnerability that allows authenticated admi
The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authenticated administrators to write arbitrary files outside the ...
CVE-2026-101888
The Prime Mover plugin for WordPress before 2.2.1 contains a Zip Slip path traversal vulnerability that allows authentic
Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to version 1.11.0, `gh teacher download` clones each student's ass...
CVE-2026-94620
Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to versio
Classroom 50 vulnerable to arbitrary file overwrite on the teacher's machine via symlink in a student repo (gh teacher download)
CVE-2026-94620
Classroom 50 is a free and open-source tool for managing and grading programming assignments via GitHub. Prior to versio
vm2: External module allowlist uses a raw prefix test, so a prefix-sharing sibling package is treated as allowlisted
CVE-2026-92945
## Summary `isPathAllowedForModule` decides whether a resolved path belongs to an allowlisted external module using a r
Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.
CVE-2026-95588
Unauthenticated Arbitrary File Deletion in AcyMailing SMTP Newsletter <= 11.0.5 versions.
Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability that allows remote attackers to read arbitrary files by ma...
CVE-2024-58388
Sharp (and Toshiba Tec rebranded) multifunction printers contain an unauthenticated local file inclusion vulnerability t
A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on the worker side of the ansible-runner transmit/worker prot...
CVE-2026-103754
A flaw was found in ansible-runner. The unstream_dir() function, which receives and extracts a streamed zip archive on t