Search Vulnerabilities

NTLMv2 hash disclosure via UNC path handling on Windows

PhpWeasyPrint vulnerable to arbitrary file deletion at shutdown via public $temporaryFiles

In JetBrains GoLand before 2026

Royal Addons for Elementor – Addons and Templates Kit for Elementor 1.7.1058 - 1.7.1059 - Authenticated (Contributor+) Arbitrary File Read via Data...

GeoServer has an arbitrary file write vulnerability in its Master Password Dump Page

Evolution-data-server: evolution data server: arbitrary file deletion via inconsistent uri handling

ServerCo getssl ACME shell script path injection

Improper branch-code validation in Wertheim SafeController Software allows file path manipulation

Config::IniFiles versions before 3.001000 for Perl allow OS command injection and file overwrite via a 2-arg open() of the -file argument in _make_...

GD versions before 2.86 for Perl allow OS command injection and file overwrite via a 2-arg open() of filename arguments in _make_filehandle

Roxy-WI: Authenticated arbitrary file write on every managed load balancer (and downstream RCE) via WAF rule save `config_file_name`

Azure Stack Edge Remote Code Execution Vulnerability

Migration, Backup, Staging – WPvivid Backup & Migration <= 0.9.128 - Authenticated (Admin+) Arbitrary Directory Deletion

haxcms-php Local File Inclusion via saveOutline API Location Parameter v2.0

Authenticated Remote Code Execution via File Overwrite

Tautulli Vulnerable to Authenticated Path Traversal in Cache Deletion API

Cisco Finesse File Inclusion Vulnerability

Arbitrary file delete vulnerability in method ugw-restoreinfo

Arbitrary file delete vulnerability in method ugw-restore

Arbitrary file delete vulnerability in method ugw-logstop