The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compressed files. Third-party applications can launch this Acti...

CVE-2026-40000

The Activity zte.com.cn.filer/zte.com.cn.filer.FilePreViewActivity within ZTE File Manager is designed to preview compre

历史摘要 · 未重新核验 · NVD

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths for save and download actions lead to path traversal vul...

CVE-2026-65765

Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.1 - Improper limitation of paths

历史摘要 · 未重新核验 · NVD

The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 3.7.7 via the 'thwcfe_legacy_file...

CVE-2026-14955

The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to Directory Traversal in all version

历史摘要 · 未重新核验 · NVD

OpenList: Authenticated users can rename files outside their base path via batch rename `src_name` traversal

### Summary The `/api/fs/batch_rename` handler validates and authorizes only the requested source directory. It rejects

历史摘要 · 未重新核验 · GitHub Advisory

open-webui terminal proxy path traversal guard bypass via 9x encoded traversal

CVE-2026-59221

AI assistance was used to help inspect the code and prepare this report. ## Summary The fix for GHSA-r2wg-2mcr-66rv is

历史摘要 · 未重新核验 · GitHub Advisory

Cloudreve: Path Traversal in WOPI PUT_RELATIVE Allows Arbitrary File Creation in Owner Account

CVE-2026-55495

## Summary Cloudreve's WOPI `PUT_RELATIVE` handler treats `X-WOPI-SuggestedTarget` as a path, not a filename. It split

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile:...

CVE-2026-16767

A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extractTo of the file sr

历史摘要 · 未重新核验 · GitHub Advisory

Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file...

CVE-2026-65694

Microweber CMS through 2.0.20 contains a path traversal vulnerability in the static file controller that allows unauthen

历史摘要 · 未重新核验 · GitHub Advisory

A security issue was discovered in the Kubernetes Java client library where a compromised pod may...

CVE-2026-15687

A security issue was discovered in the Kubernetes Java client library where a compromised pod may be able to create new

历史摘要 · 未重新核验 · GitHub Advisory

h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API...

CVE-2026-65700

h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API that allows unauthentica

历史摘要 · 未重新核验 · GitHub Advisory

SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal...

CVE-2026-65701

SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability in the full-song inf

历史摘要 · 未重新核验 · GitHub Advisory

Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore...

CVE-2026-65702

Vanna through 2.0.2 contains a path traversal vulnerability in the FileSystemConversationStore persistence integration t

历史摘要 · 未重新核验 · GitHub Advisory

Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the...

CVE-2026-65920

Diffusers through 0.39.0, fixed in commit cee298c, contains a path traversal vulnerability in the _get_checkpoint_shard_

历史摘要 · 未重新核验 · GitHub Advisory

Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api...

CVE-2026-65919

Meshery before 1.0.57 contains an unauthenticated arbitrary file read vulnerability in the /api/system/fileView and /api

历史摘要 · 未重新核验 · GitHub Advisory

Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools...

CVE-2026-65698

Void through 1.3.4 contains a path traversal vulnerability in the AI agent file-reading tools that allows network-adjace

历史摘要 · 未重新核验 · GitHub Advisory

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document...

CVE-2026-65695

Office-Word-MCP-Server through 1.1.11 contains a path traversal vulnerability in its document tools that allows attacker

历史摘要 · 未重新核验 · GitHub Advisory

PostCSS: Arbitrary file read and information disclosure via attacker-controlled sourceMappingURL in CSS comments

CVE-2026-45623

## Summary PostCSS's `PreviousMap` parses the `/*# sourceMappingURL=PATH */` comment from any CSS string passed to `pro

历史摘要 · 未重新核验 · GitHub Advisory

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its database download feature that allows unauthenticated attacker...

CVE-2026-65689

Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulnerability in its datab

来源摘录 · NVD

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function...

CVE-2026-16653

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http_sendfile2 of the

历史摘要 · 未重新核验 · GitHub Advisory

A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function http_sendfile2 of the file lib/facil/http/http.c of the component Public Folder...

CVE-2026-16653

CVE-2026-16653 是一个影响 boazsegev facil.io 库（版本 0.7.58 及之前）的路径遍历漏洞。facil.io 是一个轻量级的 C 语言网络框架，常用于构建高性能 Web 应用。该漏洞存在于 http_se

历史摘要 · 未重新核验 · NVD