Search Vulnerabilities

Arbitrary Path Execution via CPS URI in proCertum SmartSign

Grav API Plugin before 1.0.10 Path Traversal via move

Local Privilege Escalation in servereye client (sensorhub)

Rattler vulnerable to entry-point path traversal in noarch:python install (arbitrary file write)

Path traversal in Progress ShareFile Storage Zones Controller (SZC)

Apache MINA SSHD: Path traversal in SCP file reception

Network-AI: Poisoned environment backup manifest allows arbitrary recursive deletion during backup pruning

CI4MS Fileeditor allows deletion and rename of critical application files due to missing extension allowlist on destructive operations

oras-go: file store write outside workingDir via symlink traversal

Authenticated Local File Inclusion (LFI) in Switchvox SMB Web Portal

Docling Core has insufficient validation of image reference URIs

Manyfold: Authenticated Path Traversal via File Rename

nvm path traversal via a malicious mirror's LTS codename writes outside the alias directory

Metabase: Remote Code Execution via Snowflake JDBC Driver Arbitrary File Write

Grav before 9.1.8 Arbitrary File Write via Twig-Processed Filename

Improper Restriction of Communication Channel to Intended Endpoints and External Control of File Name or Path in Aura Wallpaper Service allow a loc...

Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability

Microsoft SharePoint Server Spoofing Vulnerability

Microsoft SQL Server Elevation of Privilege Vulnerability

Multiple SQL/DDL Injection and Arbitrary File Read Vulnerabilities in snowflake-sqlalchemy