Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- High8.8Improper limitation of a pathname to a restricted directory ('path traversal') in Microsoft Office SharePoint allows an authorized attacker to execute code over a network.EPSS 0.8%Oct 13, 2026
- Critical9.8A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may allow attacker to execute unauthorized c…EPSS 0.4%Oct 13, 2026
- High8.7Risesoft Digital-Infrastructure 9.6.5 through 9.6.11 contains a path traversal vulnerability in the fileManager Y9FileController.retrieveFileStream handler that allows…EPSS 0.4%Oct 13, 2026
- High7.7A Path Traversal vulnerability in the template export functionality of Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to read arbitrary files.EPSS 0.7%Oct 13, 2026
- Medium5.0A Path Traversal vulnerability in Ivanti Xtraction before version 2026.4 allows a remote authenticated attacker to create, modify, arbitrary directories the host file system.EPSS 0.5%Oct 13, 2026
- Medium5.1Vulnerability in Citrix UniconOS leading to Arbitrary file read and write This issue affects UniconOS: before 2607.2 CR and before 2603 LTSR CU2.EPSS 0.3%Oct 13, 2026
- High7.1HyperScale contained a path traversal issue affecting information disclosure.EPSS 0.4%Oct 13, 2026
- Medium5.5CAI Content Credential is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in an arbitrary…EPSS 0.2%Oct 13, 2026
- Critical9.3ColdFusion RDS is affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could lead to arbitrary file system read.EPSS 0.3%Oct 13, 2026
- Medium5.5IBM WebSphere Application Server - Liberty 17.0.0.3 through 26.0.0.9 could allow a local attacker to traverse directories on the system.EPSS 0.1%Oct 13, 2026
- Medium6.9Wazuh from 4.1.1 before 4.14.8 contains a path traversal vulnerability in the get_list_file helper that allows malicious cluster workers to read arbitrary files via un…EPSS 0.3%Oct 13, 2026
- Medium6.9A vulnerability was detected in YouTransfer up to 0.0.7/1.0.6/1.1.0.EPSS 0.7%Oct 13, 2026
- Medium5.5A vulnerability was found in EricLBuehler Mistral.rs up to 0.9.3.EPSS 0.6%Oct 13, 2026
- Critical9.9IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to execute arbitrary code due to improper validation of pathname during a path traversal.EPSS 0.5%Oct 12, 2026
- Critical9.6IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.EPSS 0.4%Oct 12, 2026
- Low2.1FreeRDP before 3.32.0 contains a path traversal vulnerability in convert_filedescriptors_to_file_list() in winpr/libwinpr/clipboard/synthetic_file.c, which concatenate…EPSS 0.2%Oct 12, 2026
- High8.8The Metasploit Framework post module post/apple_ios/gather/ios_image_gather is affected by a relative path traversal vulnerability (CWE-22).EPSS 0.4%Oct 12, 2026
- Medium5.1Path traversal in Smart Switch prior to version 3.7.73 allows physical attackers to access files with Smart Switch privilege.EPSS 0.2%Oct 12, 2026
- High7.2pH7Builder (pH7 Social Dating CMS) before 18.5.0 contains a path traversal vulnerability in the picture module deletePhoto() action that allows authenticated members t…EPSS 0.4%Oct 11, 2026
- Medium5.3Lippu Docx Reader Office Viewer App path traversalEPSS 0.3%Oct 11, 2026
- Medium5.3argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API en…EPSS 0.3%Oct 10, 2026
- Medium5.3Contao: Path traversal in the images controllerEPSS 0.3%Oct 9, 2026
- High7.1plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files v…EPSS 0.3%Oct 9, 2026
- Medium6.5IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.EPSS 0.4%Oct 8, 2026
- Critical9.1IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.EPSS 0.4%Oct 8, 2026