CVE-2026-28157 | High | 7.5 | 2026-08-13 | Subscriber Path Traversal in Do Lasso <= 358 versions. |
CVE-2026-69109 | High | 7.5 | 2026-08-11 | A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerabi… |
CVE-2026-13716 | Critical | 9.1 | 2026-08-11 | Path traversal in server import and admin file upload in Crafty Controller. Allows a remote, authenticated attacker to upload files to arbitrary paths permitte… |
CVE-2026-59115 | Critical | 9.9 | 2026-08-07 | '.../...//' in Microsoft Entra Provisioning Service (SyncFabric) allows an authorized attacker to elevate privileges over a network. |
CVE-2026-66695 | Medium | 6.5 | 2026-08-06 | Unauthenticated Path Traversal in W3 Total Cache <= 2.10.2 versions. |
CVE-2025-59181 | | | 2026-07-27 | Ericsson Packet Core Controller (PCC) versions prior to 1.39 contain a directory traversal vulnerability in Configuration Management that could allow an attack… |
CVE-2025-60835 | High | 7.8 | 2026-07-22 | An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal. |
CVE-2026-49779 | Medium | 6.5 | 2026-07-02 | Path Traversal: '.../...//' vulnerability in Addify Tax Exempt for WooCommerce allows Path Traversal.
This issue affects Tax Exempt for WooCommerce: from n/a… |
CVE-2026-52707 | High | 8.1 | 2026-06-17 | Unauthenticated Local File Inclusion in Kastell <= 2.0 versions. |
CVE-2026-52703 | Critical | 9.6 | 2026-06-15 | Unauthenticated Path Traversal in FastDup <= 2.7.2 versions. |
CVE-2026-49112 | High | 7.5 | 2026-06-15 | Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions. |
CVE-2026-42661 | High | 8.8 | 2026-06-15 | Custom role Path Traversal in WP Customer Area <= 8.3.4 versions. |
CVE-2026-40128 | Critical | 9.0 | 2026-06-09 | SAP NetWeaver Application Server Java (Web Container) allows an unauthenticated attacker to craft a malicious HTTP logon request that manipulates file inclusio… |
CVE-2026-24315 | Medium | 4.2 | 2026-06-09 | SAP Fiori Launchpad allows attackers to craft malicious URLs that triggers arbitrary service calls on the Fiori domain, this when opened by the user could comp… |
CVE-2026-45661 | Critical | 9.9 | 2026-05-29 | Dokploy is a free, self-hostable Platform as a Service (PaaS). In 0.26.5 and earlier, a critical path traversal vulnerability exists in Dokploy v0.26.5 that al… |
CVE-2026-44933 | High | 7.8 | 2026-05-20 | `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using… |
CVE-2026-45495 | High | 8.8 | 2026-05-18 | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability |
CVE-2026-7302 | Critical | 9.1 | 2026-05-18 | SGLangs multimodal generation runtime is vulnerable to an unauthenticated path traversal vulnerability, allowing an attacker to write arbitrary files anywhere… |
CVE-2026-42930 | High | 8.7 | 2026-05-13 | When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP syste… |
CVE-2026-24464 | Medium | 6.8 | 2026-05-13 | When running in Appliance mode, a directory traversal vulnerability exists in an undisclosed iControl REST endpoint that may allow an authenticated attacker wi… |
CVE-2026-25705 | High | 8.4 | 2026-05-13 | A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicio… |
CVE-2026-0804 | Medium | 6.7 | 2026-05-12 | An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulner… |
CVE-2026-42274 | | | 2026-05-08 | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall performs rule matching on the raw (non-… |
CVE-2026-20034 | High | 8.8 | 2026-05-06 | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an a… |
CVE-2026-0205 | Medium | 6.8 | 2026-04-29 | A post-authentication Path Traversal vulnerability in SonicOS allows an attacker to interact with usually restricted services. |
CVE-2026-6074 | Critical | 9.8 | 2026-04-23 | Intrado 911 Emergency Gateway (EGW) 5.x, 6.x, and 7.x contain a path traversal vulnerability in the download_debuglog_file.php endpoint used for Debug Logs dow… |
CVE-2026-28265 | Medium | 4.4 | 2026-04-01 | PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerabili… |
CVE-2026-25397 | High | 7.5 | 2026-03-25 | Path Traversal: '.../...//' vulnerability in Snowray Software File Uploader for WooCommerce file-uploader-for-woocommerce allows Path Traversal.This issue affe… |
CVE-2026-32415 | Medium | 5.0 | 2026-03-13 | Path Traversal: '.../...//' vulnerability in Bogdan Bendziukov Squeeze squeeze allows Path Traversal.This issue affects Squeeze: from n/a through <= 1.7.7. |
CVE-2026-26124 | Medium | 6.7 | 2026-03-05 | '.../...//' in Azure Compute Gallery allows an authorized attacker to elevate privileges locally. |
CVE-2025-69325 | Medium | 5.3 | 2026-02-20 | Path Traversal: '.../...//' vulnerability in primersoftware Primer MyData for Woocommerce primer-mydata allows Path Traversal.This issue affects Primer MyData… |
CVE-2025-59793 | Critical | 9.9 | 2026-02-17 | Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able to upload files. H… |
CVE-2026-1763 | Medium | 4.6 | 2026-02-10 | Vulnerability in GE Vernova Enervista UR Setup on Windows.This issue affects Enervista: 8.6 and previous versions. |
CVE-2025-58381 | Low | 2.3 | 2026-02-03 | A
vulnerability in Brocade Fabric OS before 9.2.1c2 could allow an
authenticated attacker with admin privileges using the shell commands
“source, ping6, sle… |
CVE-2025-58380 | Low | 2.3 | 2026-02-03 | A vulnerability in Brocade Fabric OS before 9.2.1 could allow an authenticated attacker with admin privileges using the shell command “grep” to modify the path… |
CVE-2025-59099 | | | 2026-01-26 | The Access Manager is using the open source web server CompactWebServer written in C#. This web server is affected by a path traversal vulnerability, which all… |
CVE-2025-67914 | High | 7.7 | 2026-01-08 | Path Traversal: '.../...//' vulnerability in beeteam368 VidMov vidmov allows Path Traversal.This issue affects VidMov: from n/a through <= 2.3.8. |
CVE-2025-46256 | Medium | 6.4 | 2026-01-07 | Path Traversal: '.../...//' vulnerability in SigmaPlugin Advanced Database Cleaner PRO allows Path Traversal.This issue affects Advanced Database Cleaner PRO… |
CVE-2025-68428 | High | 7.5 | 2026-01-05 | jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allow… |
CVE-2025-28973 | Medium | 6.5 | 2025-12-31 | Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress pro-watermark allows Path Traversal.This issue affects Pro Bulk Wa… |
CVE-2025-64676 | High | 7.2 | 2025-12-18 | '.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network. |
CVE-2025-64253 | Medium | 4.9 | 2025-12-16 | Path Traversal: '.../...//' vulnerability in WordPress.org Health Check & Troubleshooting health-check allows Path Traversal.This issue affects Health Check &… |
CVE-2025-66004 | Medium | 5.7 | 2025-12-10 | A Path Traversal vulnerability in usbmuxd allows local users to escalate to the service user.This issue affects usbmuxd: before 3ded00c9985a5108cfc7591a309f9a2… |
CVE-2025-41736 | High | 8.8 | 2025-11-18 | A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a… |
CVE-2025-5454 | Medium | 6.4 | 2025-11-11 | An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulner… |
CVE-2025-58972 | High | 7.2 | 2025-11-06 | Path Traversal: '.../...//' vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manag… |
CVE-2025-48090 | High | 8.1 | 2025-11-06 | Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka -… |
CVE-2025-39467 | High | 8.1 | 2025-11-06 | Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a throug… |
CVE-2025-22288 | Medium | 4.1 | 2025-11-06 | Path Traversal: '.../...//' vulnerability in WPMU DEV - Your All-in-One WordPress Platform Smush Image Compression and Optimization wp-smushit allows Path Trav… |
CVE-2025-53880 | | | 2025-10-30 | A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the… |
CVE-2025-27222 | High | 8.6 | 2025-10-27 | TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files. However, the application doesn't properly sanitiz… |
CVE-2025-41723 | Critical | 9.8 | 2025-10-22 | The importFile SOAP method is vulnerable to a directory traversal attack. An unauthenticated remote attacker bypass the path restriction and upload files to ar… |
CVE-2025-8051 | Medium | 6.5 | 2025-10-20 | Path Traversal vulnerability in opentext Flipper allows Absolute Path Traversal.
The vulnerability could allow a user to access files hosted on the server.
… |
CVE-2025-42937 | Critical | 9.8 | 2025-10-14 | SAP Print Service (SAPSprint) performs insufficient validation of path information provided by users. An unauthenticated attacker could traverse to the parent… |
CVE-2025-43907 | Medium | 6.5 | 2025-10-07 | Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release versions 7.7.1.0 through 8.3.0.15, LTS2025 release version 8.3.1.0… |
CVE-2025-20313 | Medium | 6.7 | 2025-09-24 | Multiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker with level-15 privileges or an unauthenticated attacker with… |
CVE-2025-43886 | Medium | 4.4 | 2025-09-10 | Dell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: '.../...//' vulnerability. A high privileged attacker with loc… |
CVE-2025-48317 | High | 7.5 | 2025-09-05 | Path Traversal: '.../...//' vulnerability in Stefan Keller WooCommerce Payment Gateway for Saferpay woocommerce-payment-gateway-for-saferpay allows Path Traver… |
CVE-2025-4956 | Medium | 4.3 | 2025-08-30 | Path Traversal: '.../...//' vulnerability in AA-Team Pro Bulk Watermark Plugin for WordPress allows Path Traversal.This issue affects Pro Bulk Watermark Plugin… |
CVE-2025-48081 | Medium | 5.3 | 2025-08-27 | Path Traversal: '.../...//' vulnerability in Printeers Printeers Print & Ship allows Path Traversal.This issue affects Printeers Print & Ship: from n/a through… |
CVE-2025-53561 | Medium | 6.5 | 2025-08-20 | Path Traversal: '.../...//' vulnerability in miniOrange Prevent files / folders access prevent-file-access allows Path Traversal.This issue affects Prevent fil… |
CVE-2025-52712 | Medium | 4.2 | 2025-08-14 | Path Traversal: '.../...//' vulnerability in BoldGrid Post and Page Builder by BoldGrid post-and-page-builder allows Path Traversal.This issue affects Post and… |
CVE-2025-8088 | High | 8.8 | 2025-08-08 | A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This… |
CVE-2024-52885 | Medium | 5.0 | 2025-08-06 | The Mobile Access Portal's File Share application is vulnerable to a directory traversal attack, allowing an authenticated, malicious end-user (authorized to a… |
CVE-2025-53417 | | | 2025-08-05 | DIAView (v4.2.0 and prior) - Directory Traversal Information Disclosure Vulnerability |
CVE-2025-20320 | Medium | 6.3 | 2025-07-07 | In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.107, 9.3.2408.117, and 9.2.2406.121, a lo… |
CVE-2025-52805 | High | 7.5 | 2025-07-04 | Path Traversal: '.../...//' vulnerability in VaultDweller Leyka leyka allows PHP Local File Inclusion.This issue affects Leyka: from n/a through <= 3.32.1. |
CVE-2025-52811 | High | 8.1 | 2025-06-27 | Path Traversal: '.../...//' vulnerability in Creanncy Davenport - Versatile Blog and Magazine WordPress Theme davenport allows PHP Local File Inclusion.This is… |
CVE-2025-52810 | High | 8.1 | 2025-06-27 | Path Traversal vulnerability in TMRW-studio Katerio - Magazine allows PHP Local File Inclusion. This issue affects Katerio - Magazine: from n/a through 1.5.1. |
CVE-2025-49451 | High | 7.5 | 2025-06-17 | Path Traversal: '.../...//' vulnerability in yannisraft Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery aeroscroll-gallery al… |
CVE-2025-47176 | High | 7.8 | 2025-06-10 | '.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally. |
CVE-2025-30515 | Critical | 9.8 | 2025-06-09 | CyberData 011209 Intercom
could allow an authenticated attacker to upload arbitrary files to multiple locations within the system. |
CVE-2025-49297 | High | 8.1 | 2025-06-09 | Path Traversal: '.../...//' vulnerability in Mikado-Themes Grill and Chow grillandchow allows PHP Local File Inclusion.This issue affects Grill and Chow: from… |
CVE-2025-49296 | High | 8.1 | 2025-06-09 | Path Traversal: '.../...//' vulnerability in Mikado-Themes GrandPrix grandprix allows PHP Local File Inclusion.This issue affects GrandPrix: from n/a through <… |
CVE-2025-49295 | High | 8.1 | 2025-06-09 | Path Traversal: '.../...//' vulnerability in Mikado-Themes MediClinic mediclinic allows PHP Local File Inclusion.This issue affects MediClinic: from n/a throug… |
CVE-2025-39475 | High | 8.1 | 2025-06-09 | Path Traversal: '.../...//' vulnerability in Frenify Arlo arlo allows PHP Local File Inclusion.This issue affects Arlo: from n/a through <= 6.0.3. |
CVE-2025-27445 | Medium | 5.4 | 2025-06-05 | A path traversal vulnerability in RSFirewall component 2.9.7 - 3.1.5 for Joomla was discovered. This vulnerability allows authenticated users to read arbitrary… |
CVE-2025-5598 | | | 2025-06-04 | Path Traversal vulnerability in WF Steuerungstechnik GmbH airleader MASTER allows Retrieve Embedded Sensitive Data.This issue affects airleader MASTER: 3.0046. |
CVE-2025-46441 | Medium | 5.3 | 2025-05-19 | Path Traversal: '.../...//' vulnerability in ctltwp Section Widget section-widget allows Path Traversal.This issue affects Section Widget: from n/a through <=… |
CVE-2025-27010 | High | 8.1 | 2025-05-19 | Path Traversal: '.../...//' vulnerability in bslthemes Tastyc tastyc allows PHP Local File Inclusion.This issue affects Tastyc: from n/a through < 2.5.2. |
CVE-2025-39492 | High | 7.5 | 2025-05-16 | Path Traversal vulnerability in WHMPress WHMpress allows Relative Path Traversal. This issue affects WHMpress: from 6.2 through revision. |
CVE-2025-39491 | High | 8.1 | 2025-05-16 | Path Traversal vulnerability in WHMPress WHMpress allows Path Traversal. This issue affects WHMpress: from 6.2 through revision. |
CVE-2025-40573 | Medium | 4.4 | 2025-05-13 | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0 HF0). Affected devices are vulnerable to path traversal attac… |
CVE-2025-47649 | High | 8.8 | 2025-05-07 | Path Traversal: '.../...//' vulnerability in StackWC Open Close WooCommerce Store woc-open-close allows PHP Local File Inclusion.This issue affects Open Close… |
CVE-2025-47636 | High | 7.5 | 2025-05-07 | Path Traversal: '.../...//' vulnerability in Fernando Briano List category posts list-category-posts allows PHP Local File Inclusion.This issue affects List ca… |
CVE-2025-32950 | Medium | 6.5 | 2025-04-22 | Jmix is a set of libraries and tools to speed up Spring Boot data-centric application development. In versions 1.0.0 to 1.6.1 and 2.0.0 to 2.3.4, attackers cou… |
CVE-2025-39470 | High | 8.1 | 2025-04-18 | Path Traversal: '.../...//' vulnerability in ThimPress Ivy School ivy-school allows PHP Local File Inclusion.This issue affects Ivy School: from n/a through <=… |
CVE-2025-24908 | Medium | 6.8 | 2025-04-16 | Overview
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '… |
CVE-2025-24907 | Medium | 6.8 | 2025-04-16 | Overview
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '… |
CVE-2025-39598 | Medium | 4.9 | 2025-04-16 | Path Traversal: '.../...//' vulnerability in Quý Lê 91 Administrator Z administrator-z allows Path Traversal.This issue affects Administrator Z: from n/a throu… |
CVE-2025-30966 | Medium | 5.4 | 2025-04-15 | Path Traversal vulnerability in NotFound WPJobBoard allows Path Traversal. This issue affects WPJobBoard: from n/a through n/a. |
CVE-2025-32585 | High | 7.5 | 2025-04-11 | Path Traversal: '.../...//' vulnerability in Trusty Plugins Shop Products Filter trusty-woo-products-filter allows PHP Local File Inclusion.This issue affects… |
CVE-2025-30014 | High | 7.7 | 2025-04-08 | SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to… |
CVE-2025-30834 | High | 7.5 | 2025-04-01 | Path Traversal: '.../...//' vulnerability in Bit Apps Bit Assist bit-assist allows Path Traversal.This issue affects Bit Assist: from n/a through <= 1.5.4. |
CVE-2024-54362 | High | 8.1 | 2025-03-28 | Path Traversal: '.../...//' vulnerability in boggibill GetShop ecommerce getshop-ecommerce allows Path Traversal.This issue affects GetShop ecommerce: from n/a… |
CVE-2025-26940 | Medium | 6.3 | 2025-03-15 | Path Traversal vulnerability in NotFound Pie Register Premium. This issue affects Pie Register Premium: from n/a through 3.8.3.2. |
CVE-2025-27274 | Medium | 4.9 | 2025-03-03 | Path Traversal: '.../...//' vulnerability in axelkeller GPX Viewer gpx-viewer allows Path Traversal.This issue affects GPX Viewer: from n/a through <= 2.2.11. |
CVE-2025-25122 | High | 8.1 | 2025-03-03 | Path Traversal: '.../...//' vulnerability in hashshop WizShop wizshop allows Path Traversal.This issue affects WizShop: from n/a through <= 3.0.2. |
CVE-2025-26935 | High | 7.5 | 2025-02-25 | Path Traversal: '.../...//' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a… |
CVE-2025-26876 | Medium | 6.8 | 2025-02-25 | Path Traversal: '.../...//' vulnerability in CodeManas Search with Typesense search-with-typesense allows Path Traversal.This issue affects Search with Typesen… |