IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledge_bases`). This occurs because user-supplied knowledge ba...

CVE-2026-7869

IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`POST /api/v1/knowledg

历史摘要 · 未重新核验 · NVD

IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path traversal sequences and bypass containment checks. This en...

CVE-2026-7658

IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attackers to inject path t

历史摘要 · 未重新核验 · NVD

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other users' uploaded documents, the JWT signing secret, the SQL...

CVE-2026-7646

IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesystem, including other u

历史摘要 · 未重新核验 · NVD

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android....

CVE-2026-18853

A security vulnerability has been detected in ZomboDroid Meme Generator App 4.6830 on Android. This issue affects the fu

历史摘要 · 未重新核验 · GitHub Advisory

Ghost: Theme Upload Path Traversal

CVE-2026-70593

### Impact A vulnerability in custom themes allowed a staff user to write files outside of the uploads directory. This

历史摘要 · 未重新核验 · GitHub Advisory

Ghost: Database Backup Path Traversal

CVE-2026-70592

### Impact An Administrator-level user could remotely overwrite certain files on the filesystem leading to integrity an

历史摘要 · 未重新核验 · GitHub Advisory

An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when...

CVE-2026-56845

An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configur

历史摘要 · 未重新核验 · GitHub Advisory

A path traversal flaw was found in WildFly's domain mode implementation. The...

CVE-2026-17614

A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile() and getCo

历史摘要 · 未重新核验 · GitHub Advisory

A path traversal flaw was found in WildFly's domain mode implementation. The LocalFileRepository.getFile() and getConfigurationFile() methods in wildfly-core/deployment-re...

CVE-2026-17614

CVE-2026-17614 是 WildFly 域模式实现中的一个路径遍历漏洞。问题出在 wildfly-core/deployment-repository 模块的 LocalFileRepository.getFile() 和 get

历史摘要 · 未重新核验 · NVD

An unauthenticated path traversal (LFI) vulnerability exists under /custom-sounds/ when CustomSounds storage is configured to FileSystem. By including ../ sequences in the reque...

CVE-2026-56845

CVE-2026-56845 是一个未认证的路径遍历（本地文件包含，LFI）漏洞，存在于 CustomSounds 存储配置为 FileSystem 时的 /custom-sounds/ 路径下。攻击者通过在请求路径中注入 ../ 序列，可

历史摘要 · 未重新核验 · NVD

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown...

CVE-2026-18646

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the...

CVE-2026-18648

A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDat

历史摘要 · 未重新核验 · GitHub Advisory

A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function...

CVE-2026-18645

A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function add_content of the file /sys

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the...

CVE-2026-18644

A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the function unlink of the file /

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDataColumn/FileDirectory.getFileFromUri of the component rea...

CVE-2026-18648

A vulnerability was detected in Blix Email Blue Mail Calendar App 2.2.305. Impacted is the function FileDirectory.getDat

历史摘要 · 未重新核验 · NVD

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system/htmly.php of the component Author Name Handler. Executin...

CVE-2026-18646

A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code of the file /system

历史摘要 · 未重新核验 · NVD

A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function add_content of the file /system/admin/admin.php of the component Admin Content Endpoi...

CVE-2026-18645

A security flaw has been discovered in danpros HTMLy up to 3.1.1. This affects the function add_content of the file /sys

历史摘要 · 未重新核验 · NVD

A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the function unlink of the file /system/htmly.php of the component Delete Username Endpoin...

CVE-2026-18644

A vulnerability was identified in danpros HTMLy up to 3.1.1. Affected by this issue is the function unlink of the file /

历史摘要 · 未重新核验 · NVD

GitPython: Unguarded git option forwarding in IndexFile.checkout() and TagReference.create() enables arbitrary file overwrite and arbitrary file read

**Target:** gitpython-developers/GitPython **Tested:** HEAD `07e80555` (2026-07-25), latest release 3.1.55, `git version

历史摘要 · 未重新核验 · GitHub Advisory

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract Syntax Tree. Prior to 8.5.19, if from is unset, an attack...

CVE-2026-69153

PostCSS takes a CSS file and provides an API to analyze and modify its rules by transforming the rules into an Abstract

历史摘要 · 未重新核验 · NVD