An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables users to read sensitive information and delete arbitrary f...

CVE-2026-0259

An arbitrary File Read and Delete Vulnerability in Palo Alto Networks WildFire® WF-500 and WF-500-B appliances enables u

历史摘要 · 未重新核验 · NVD

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by trusting attacker-controlled snapshot paths restored fro...

CVE-2026-43891

changedetection.io is a free open source web page change detection tool. Prior to 0.55.1, the vulnerability is caused by

历史摘要 · 未重新核验 · NVD

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.

CVE-2026-41107

External control of file name or path in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose inf

历史摘要 · 未重新核验 · NVD

External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to elevate privileges locally.

CVE-2026-41088

External control of file name or path in Windows Ancillary Function Driver for WinSock allows an authorized attacker to

历史摘要 · 未重新核验 · NVD

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to disclose information over a network.

CVE-2026-40421

External control of file name or path in Microsoft Office Word allows an unauthorized attacker to disclose information o

历史摘要 · 未重新核验 · NVD

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

CVE-2026-40370

External control of file name or path in SQL Server allows an authorized attacker to execute code over a network.

历史摘要 · 未重新核验 · NVD

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally.

CVE-2026-32204

External control of file name or path in Azure Monitor Agent allows an authorized attacker to elevate privileges locally

历史摘要 · 未重新核验 · NVD

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a filesystem path from the agent and uploaded whatever byt...

CVE-2026-43989

JunoClaw is an agentic AI platform built on Juno Network. Prior to 0.x.y-security-1, the upload_wasm MCP tool accepted a

历史摘要 · 未重新核验 · NVD

Dalfox Server Mode has an Unauthenticated Arbitrary File Create/Append via `output` Option

CVE-2026-45089

## Summary When dalfox is run in REST API server mode, the `output`, `output-all`, and `debug` fields in `model.Options

历史摘要 · 未重新核验 · GitHub Advisory

Dalfox Server Mode has an Unauthenticated Arbitrary File Read with Out-of-Band Exfiltration via `custom-payload-file`

CVE-2026-45088

## Summary When dalfox is run in REST API server mode, the `custom-payload-file` field in `model.Options` is JSON-tagge

历史摘要 · 未重新核验 · GitHub Advisory

Tookie is a advanced OSINT information gathering tool. Prior to 4.1fix, modules/modules.py's write_txt, write_csv, write_json, and (commented-but-shipping) scan_file helpers ope...

CVE-2026-42866

Tookie is a advanced OSINT information gathering tool. Prior to 4.1fix, modules/modules.py's write_txt, write_csv, write

历史摘要 · 未重新核验 · NVD

The form plugin for Grav adds the ability to create and use forms. Prior to 9.1.0 , there is an unauthenticated page-content overwrite via file upload (GHSA-w4rc-p66m-x6qq). Pub...

CVE-2026-42845

The form plugin for Grav adds the ability to create and use forms. Prior to 9.1.0 , there is an unauthenticated page-con

历史摘要 · 未重新核验 · NVD

i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem. Prior to version 2.6.4, i18next-fs-backend substitutes ...

CVE-2026-41693

i18next-fs-backend is a backend layer for i18next using in Node.js and for Deno to load translations from the filesystem

历史摘要 · 未重新核验 · NVD

SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the identifier parameter of /api.app/attachment/preview that allo...

CVE-2026-44127

SEPPmail Secure Email Gateway before version 15.0.4 contains an unauthenticated path traversal vulnerability in the iden

历史摘要 · 未重新核验 · NVD

Microsoft APM CLI's plugin.json component paths escape plugin root and copy arbitrary host files during install

CVE-2026-44641

### Summary Microsoft APM normalizes marketplace plugins by copying plugin components referenced in `plugin.json` into `

历史摘要 · 未重新核验 · GitHub Advisory

Gotenberg allows Chromium URL conversion routes to read arbitrary files under /tmp via file:// scheme

CVE-2026-42597

## Summary The `/forms/chromium/convert/url` and `/forms/chromium/screenshot/url` routes accept `url=file:///tmp/...` f

历史摘要 · 未重新核验 · GitHub Advisory

Goteberg has arbitrary PDF read via stampExpression and watermarkExpression in merge, split, and convert routes

CVE-2026-42593

## Summary Six conversion routes (`pdfengines/merge`, `pdfengines/split`, `libreoffice/convert`, `chromium/convert/url`

历史摘要 · 未重新核验 · GitHub Advisory

changedetection.io has an Arbitrary Local File Read via a crafted backup restore

CVE-2026-43891

### Details The vulnerability is caused by trusting attacker-controlled snapshot paths restored from backup files. The

历史摘要 · 未重新核验 · GitHub Advisory

@evomap/evolver: Path Traversal in `evolver fetch` default-branch `safeId` allows Hub-controlled overwrite of project files (RCE)

## Summary The `evolver fetch` subcommand in `index.js` writes Hub-supplied `bundled_files[]` into a directory derived

历史摘要 · 未重新核验 · GitHub Advisory

A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. This impacts the function...

CVE-2026-7633

A vulnerability was identified in Totolink N300RH 6.1c.1353_B20190305. This impacts the function setUploadSetting of the

历史摘要 · 未重新核验 · GitHub Advisory