Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- High7.1Green CMS 2.x contains a path traversal vulnerability that allows authenticated attackers to download arbitrary files and directories by injecting directory traversal sequences.EPSS 1.1%Mar 21, 2026
- High7.2OpenClaw versions prior to 2026.2.26 contain a path traversal vulnerability in workspace boundary validation that allows attackers to write files outside the workspace…EPSS 0.5%Mar 21, 2026
- Medium4.9The EmailKit – Email Customizer for WooCommerce & WP plugin for WordPress is vulnerable to arbitrary file read via path traversal in all versions up to, and including, 1.6.3.Mar 21, 2026
- Low2.7The Keep Backup Daily plugin for WordPress is vulnerable to Limited Path Traversal in all versions up to, and including, 2.1.1 via the AJAX action.EPSS 0.4%Mar 21, 2026
- Medium4.3WWBN AVideo is an open source video platform.EPSS 0.4%Mar 21, 2026
- High7.5SiYuan is a personal knowledge management system.EPSS 3.1%Mar 20, 2026
- High8.1NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language Processing.EPSS 0.7%Mar 20, 2026
- Medium6.8SiYuan is a personal knowledge management system.EPSS 0.5%Mar 20, 2026
- High8.7Halloy is an IRC application written in Rust.EPSS 0.5%Mar 20, 2026
- Medium4.3Statamic is a Laravel and Git powered content management system (CMS).EPSS 0.4%Mar 20, 2026
- High7.5Allure 2 is the version 2.x branch of Allure Report, a multi-language test reporting tool.EPSS 0.5%Mar 20, 2026
- High7.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVEPSS 2.4%Mar 20, 2026
- High7.2An issue in the component /Controllers/RestController.php of DreamFactory Core v1.0.3 allows attackers to execute a directory traversal via an unsanitized URI path.EPSS 0.9%Mar 20, 2026
- Medium5.3Cryptomator encrypts data being stored on cloud infrastructure.EPSS 0.4%Mar 20, 2026
- Medium4.3File Thingie 2.5.7 is vulnerable to Directory Traversal.EPSS 0.7%Mar 20, 2026
- Medium6.5The ilGhera Carta Docente for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.0 via the 'cert' parameter of…EPSS 0.5%Mar 20, 2026
- Medium6.5Stirling-PDF is a locally hosted web application that performs various operations on PDF files.EPSS 0.5%Mar 20, 2026
- Critical9.8Mesop is a Python-based UI framework that allows users to build web applications.EPSS 0.7%Mar 20, 2026
- Medium6.5SiYuan is a personal knowledge management system.EPSS 0.6%Mar 20, 2026
- High8.1pyLoad is a free and open-source download manager written in Python.EPSS 0.5%Mar 20, 2026
- High7.8pydicom is a pure Python package for working with DICOM files.EPSS 0.2%Mar 20, 2026
- High8.8The CTFer.io Monitoring component is in charge of the collection, process and storage of various signals (i.e.EPSS 0.7%Mar 20, 2026
- Medium6.5File Browser is a file managing interface for uploading, deleting, previewing, renaming, and editing files within a specified directory.EPSS 0.5%Mar 20, 2026
- Medium5.9Use of Java scripting engine enabled (e.g.EPSS 0.4%Mar 20, 2026
- Medium6.8SiYuan is a personal knowledge management system.EPSS 0.5%Mar 19, 2026