Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium4.9ZDI-26-582: Cisco Identity Services Engine PatchUpdateListener Directory Traversal Information Disclosure VulnerabilityEPSS 6.5%Apr 15, 2026
- High7.1Zarf is an Airgap Native Packager Manager for Kubernetes.Apr 15, 2026
- Medium6.5The Eleganzo theme for WordPress is vulnerable to arbitrary directory deletion due to insufficient path validation in the akd_required_plugin_callback function in all…EPSS 0.3%Apr 15, 2026
- Critical9.6NuGet Gallery is a package repository that powers nuget.org.Apr 14, 2026
- High8.8Jellyfin is an open source self hosted media server.Apr 14, 2026
- High7.7ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that co…Apr 14, 2026
- High8.6ColdFusion versions 2023.18, 2025.6 and earlier are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that co…Apr 14, 2026
- Medium6.9CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause critical files overwritten with text data w…Apr 14, 2026
- Medium6.7A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through…Apr 14, 2026
- Medium6.5An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSOAR PaaS 7.6.0 through 7.6.3, FortiSOAR PaaS 7.5 all…EPSS 0.4%Apr 14, 2026
- Medium6.5An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiAnalyzer 7.6.0 through 7.6.4, FortiAnalyzer 7.4.0 thro…EPSS 0.4%Apr 14, 2026
- Medium6.5Fortinet Multiple Products Path Traversal VulnerabilityKEVEPSS 54.0%Apr 14, 2026
- Medium4.3Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache PDFBox Examples.Apr 14, 2026
- High7.2The BackWPup plugin for WordPress is vulnerable to Local File Inclusion via the parameter of the REST endpoint in all versions up to, and including, 5.6.6 due to a non…Apr 14, 2026
- Critical9.8A malicious actor with access to the UniFi Play network could exploit a Path Traversal vulnerability found in the device firmware to write files on the system that cou…EPSS 0.8%Apr 13, 2026
- High8.3Improper path validation vulnerability in the Gleam compiler's handling of git dependencies allows arbitrary file system modification during dependency download.Apr 11, 2026
- Medium6.5OpenClaw Canvas Path Traversal Information Disclosure Vulnerability.Apr 11, 2026
- High7.7Quarkus OpenAPI Generator is Quarkus' extensions for generation of Rest Clients and server stubs generation.Apr 10, 2026
- High8.2Saltcorn is an extensible, open source, no-code database application builder.Apr 10, 2026
- High8.3Chamilo LMS is a learning management system.Apr 10, 2026
- Critical9.4PraisonAI is a multi-agent teams system.Apr 10, 2026
- Medium5.3Rembg is a tool to remove images background.Apr 10, 2026
- High7.1OpenClaw before 2026.3.24 contains a path traversal vulnerability in sandbox enforcement allowing sandboxed agents to read arbitrary files from other agents' workspace…Apr 10, 2026
- Critical9.8FalkorDB Browser 1.9.3 contains an unauthenticated path traversal vulnerability in the file upload API that allows remote attackers to write arbitrary files and achiev…Apr 10, 2026
- Medium5.5A vulnerability was determined in Tenda i6 1.0.0.7(2204).Apr 10, 2026