Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.
CVE-2026-39734
Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions.
#cwe-35
共收录 38 条相关情报。
← 返回所有主题A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM (all versions) after winning a race condition by sustaini...
CVE-2026-118633
A path traversal vulnerability allows a remote unauthenticated attacker to execute arbitrary code as root in Sophos UTM
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive intern...
CVE-2026-44415
Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an
A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, Industrial Edge Device Kit - arm64 V1.11, Industrial Edge D...
CVE-2026-44414
A vulnerability has been identified in Industrial Edge Cloud Device (IECD), Industrial Edge Device Kit - arm64 V1.10, In
Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff users to access local files outside the intended data st...
CVE-2026-105683
Ghost is a Node.js content management system. From 6.14.0 until 6.27.0, an input validation issue may have allowed staff
Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service. Insufficient input validation of user-supplied file paths...
CVE-2026-103290
Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service.
Ghost 6.14.0 before 6.27.0 Path Traversal via ImageSize
CVE-2026-103290
Ghost versions 6.14.0 through versions prior to 6.27.0 contain a path traversal vulnerability in the ImageSize service.
Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker to access, create, modify, or delete files. This issue a...
CVE-2026-82824
Hitachi Coding Software Suite contains a vulnerability related to Path Traversal vulnerability that allows an attacker t
An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing the SSH server's private keys to be read.
CVE-2026-27557
An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file
import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.
CVE-2026-85310
import_contacts Path Traversal in Groundhogg <= 4.7.1 versions.
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local information disclosure if a malicious actor has already obtai...
CVE-2026-20513
In Audio HAL, there is a possible information disclosure due to improper input validation. This could lead to local info
Subscriber Path Traversal in Do Lasso <= 358 versions.
CVE-2026-28157
Subscriber Path Traversal in Do Lasso <= 358 versions.
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack o...
CVE-2026-69109
A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is v
Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitted to the Crafty Co...
CVE-2026-13716
Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to u
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to...
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges ove
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network.
CVE-2026-59115
'.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges ove
Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions.
CVE-2026-66695
Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions.
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attacker to change direc...
CVE-2025-59181
Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuratio
Unauthenticated Local File Inclusion in Kastell <= 2.0 versions.
CVE-2026-52707
Unauthenticated Local File Inclusion in Kastell <= 2.0 versions.
Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.
CVE-2026-52703
Unauthenticated Path Traversal in FastDup <= 2.7.2 versions.