Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High7.2ThreatSonar Anti-Ransomware developed by TeamT5 has an Arbitrary File Deletion vulnerability.Apr 20, 2026
- Low2.1A flaw has been found in ComfyUI up to 0.13.0.Apr 20, 2026
- Low2.1A vulnerability was detected in ComfyUI up to 0.13.0.Apr 20, 2026
- Medium5.5A vulnerability was determined in kodcloud KodExplorer up to 4.52.Apr 19, 2026
- High7.8gdown is a Google Drive public file/folder downloader.Apr 18, 2026
- Critical9.1The Gramps Web API is a Python REST API for the genealogical research software Gramps.Apr 17, 2026
- Critical9.9Firebird is an open-source relational database management system.Apr 17, 2026
- High7.5The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary File Read in versions up to and inc…Apr 17, 2026
- High7.1ByteDance DeerFlow before commit 2176b2b contains a path traversal and arbitrary file write vulnerability in bootstrap-mode custom-agent creation where the agent name…Apr 17, 2026
- High8.8The WP Customer Area plugin for WordPress is vulnerable to arbitrary file read and deletion due to insufficient file path validation in the 'ajax_attach_file' function…Apr 17, 2026
- Low2.1A vulnerability was found in prasathmani TinyFileManager up to 2.6.Apr 17, 2026
- Low2.1A flaw has been found in Qihui jtbc5 CMS 5.0.3.6.Apr 17, 2026
- High7.5The Unlimited Elements for Elementor plugin for WordPress is vulnerable to Arbitrary File Read via the Repeater JSON/CSV URL parameter in versions up to, and including, 2.0.6.Apr 17, 2026
- Medium5.1A path traversal vulnerability exists in CubeCart prior to 6.6.0, which may allow a user with an administrative privilege to access higher-level directories that shoul…Apr 17, 2026
- Medium4.9The JetBackup – Backup, Restore & Migrate plugin for WordPress is vulnerable to Path Traversal leading to Arbitrary Directory Deletion in versions up to and including 3.1.19.8.Apr 17, 2026
- High7.8In OCaml opam before 2.5.1, a .install field containing a destination filepath can use ../ to reach a parent directory.Apr 16, 2026
- Medium5.3@fastify/static versions 8.0.0 through 9.1.0 allow path traversal when directory listing is enabled via the list option.Apr 16, 2026
- High8.8The Career Section plugin for WordPress is vulnerable to Cross-Site Request Forgery leading to Path Traversal and Arbitrary File Deletion in all versions up to, and including, 1.6.EPSS 0.4%Apr 16, 2026
- High7.1OpenHarness prior to commit dd1d235 contains a path traversal vulnerability that allows remote gateway users with chat access to read arbitrary files by supplying path…Apr 16, 2026
- Medium5.3The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single URL decode, by double encoding, an attacker can read files at the…EPSS 0.4%Apr 15, 2026
- Medium5.0Weblate is a web based localization tool.Apr 15, 2026
- High7.7Weblate is a web based localization tool.Apr 15, 2026
- Medium6.8Weblate is a web based localization tool.Apr 15, 2026
- High7.5An issue in the file handling logic of the component download.php of SAC-NFe v2.0.02 allows attackers to execute a directory traversal and read arbitrary files from th…Apr 15, 2026
- Critical9.9A vulnerability in Cisco Identity Services Engine (ISE) could allow an authenticated, remote attacker to execute arbitrary commands on the underlying operating system…EPSS 6.0%Apr 15, 2026