Search Vulnerabilities

SpellChecker DictionaryLanguage Path Traversal Vulnerability in Telerik UI for ASP.NET AJAX

RabbitMQ: UNC SSRF affecting the management UI on Windows

ARMember <= 4.0.27 - Directory Traversal via X-FILENAME

Microsoft Edge for Android Information Disclosure Vulnerability

Slopsmith has path traversal in archive extractors that allows arbitrary file write → potential RCE

Silverpeas through 6.4.6 mishandles the "Personal space" feature that is selected when no componentId is set

Interinfo｜DreamMaker - Path Traversal

ai-goofish-monitor Unauthenticated Arbitrary File Read via GET /api/prompts/

A vulnerability allowing an authenticated user with the Backup Administrator role to write arbitrary files on Linux-based Veeam Backup & Replicatio...

Avada Builder <= 3.15.2 - Authenticated (Subscriber+) Arbitrary File Read via 'custom_svg' Shortcode Parameter

.NET Core Tampering Vulnerability

pyLoad: Path Traversal via Package Folder Name in set_package_data

PaperCut NG/MF: Path Traversal in Shared Account Synchronization

An issue was discovered in Nix before 2.34.7

Deepractice PromptX Document File index.ts read_pdf absolute path traversal

SecureDrop Client has path injection in read_gzip_header_filename()

AIOHTTP: UNC SSRF/NTLMv2 Credential Theft/Local File Read in static resource handler on Windows

JetFormBuilder <= 3.5.6.2 - Unauthenticated Arbitrary File Read via Media Field

Arbitrary File Read via Absolute Path Input in nltk.util.filestring()

An Absolute Path Traversal vulnerability exists in Navtor NavBox