Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management IP or SNIP with management access is enabled

CVE-2026-10816

Arbitrary File Read (Unauthenticated) in NetScaler ADC and NetScaler Gateway if the access to NSIP, Cluster Management I

历史摘要 · 未重新核验 · NVD

Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file content to be read and transmitted to Snowflake services. An at...

CVE-2026-13748

Improper restriction of file path resolution in Snowflake CLI versions prior to 3.19 allowed arbitrary local file conten

历史摘要 · 未重新核验 · NVD

The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary...

CVE-2026-8095

The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions

历史摘要 · 未重新核验 · GitHub Advisory

The Frontend File Manager Plugin plugin for WordPress is vulnerable to Authenticated Arbitrary File Deletion in versions up to and including 23.6. This is due to a case-sensitiv...

CVE-2026-8095

CVE-2026-8095 影响 WordPress 的 Frontend File Manager Plugin 插件（版本 ≤23.6）。漏洞位于 wpfm_file_meta_update AJAX 处理函数中，由于对参数 wpfm_

历史摘要 · 未重新核验 · NVD

pnpm: `patch-remove` could delete project-selected files outside the patches directory

## Summary The `patch-remove` deletion-scope issue tracked as GHSA-72r4-9c5j-mj57 / CAND-PNPM-030 has been addressed in

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: Hoisted install imports lockfile alias outside node_modules

## Summary The hoisted dependency alias issue tracked as GHSA-fr4h-3cph-29xv / CAND-PNPM-059 has been addressed in both

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: `stage download` writes outside its destination directory via manifest name/version traversal

CVE-2026-55700

## Summary The staged-tarball filename traversal reported as GHSA-v23m-ccfg-pq9h / CAND-PNPM-038 is fixed on `main` by

历史摘要 · 未重新核验 · GitHub Advisory

pnpm: Reserved bin name deletes PNPM_HOME during global remove

CVE-2026-55699

Maintainer Action Plan ## Maintainer Action Plan This report is ready to review with the shared patch branch. Start w

历史摘要 · 未重新核验 · GitHub Advisory

PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles

CVE-2026-49358

### Summary `AbstractGenerator::$temporaryFiles` is a public array, and `removeTemporaryFiles()` — invoked from `__dest

历史摘要 · 未重新核验 · GitHub Advisory

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.94.0, the HTML backend has unsafe URI a...

CVE-2026-47214

Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecos

历史摘要 · 未重新核验 · NVD

Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access...

CVE-2025-71334

Flowise before 3.0.6 (affected versions 2.2.8 and earlier) contains an arbitrary file access vulnerability due to missin

历史摘要 · 未重新核验 · GitHub Advisory

Flowise contains a path traversal vulnerability in the /api/v1/document-store/loader/process...

CVE-2025-71338

Flowise contains a path traversal vulnerability in the /api/v1/document-store/loader/process endpoint that allows unauth

历史摘要 · 未重新核验 · GitHub Advisory

Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api...

CVE-2025-71333

Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoin

历史摘要 · 未重新核验 · GitHub Advisory

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the...

CVE-2025-71324

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-fil

历史摘要 · 未重新核验 · GitHub Advisory

Flowise contains a path traversal vulnerability in the /api/v1/document-store/loader/process endpoint that allows unauthenticated attackers to write arbitrary files to the files...

CVE-2025-71338

Flowise contains a path traversal vulnerability in the /api/v1/document-store/loader/process endpoint that allows unauth

历史摘要 · 未重新核验 · NVD

Flowise before 3.0.6 contains an arbitrary file access vulnerability due to missing validation that the chatflowId and chatId parameters are UUIDs or numbers in file handling op...

CVE-2025-71334

Flowise before 3.0.6 contains an arbitrary file access vulnerability due to missing validation that the chatflowId and c

来源摘录 · NVD

Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoint when storageType is set to local. Attackers can exploit...

CVE-2025-71333

Flowise through 2.2.4 contains an unauthenticated arbitrary file upload vulnerability in the /api/v1/attachments endpoin

历史摘要 · 未重新核验 · NVD

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-file and /api/v1/openai-assistants-file/download endpoints. ...

CVE-2025-71324

Flowise before 3.0.6 contains an arbitrary file read vulnerability in the chatId parameter of the /api/v1/get-upload-fil

历史摘要 · 未重新核验 · NVD

pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm stage download` derived a local filename from registry-controlled package name and version fields. A crafted manifest ...

CVE-2026-55700

pnpm is a package manager. From 11.3.0 until 11.5.3, `pnpm stage download` derived a local filename from registry-contro

历史摘要 · 未重新核验 · NVD

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, Manifest bin object keys such as "", ".", and ".." passed pnpm's bin-name guard. When a malicious package was installed g...

CVE-2026-55699

pnpm is a package manager. Prior to 10.34.2 and 11.5.3, Manifest bin object keys such as "", ".", and ".." passed pnpm's

历史摘要 · 未重新核验 · NVD