Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.3argocd-mcp (Argo CD MCP Server) through 0.9.0 contains a path traversal vulnerability in the delete_application tool that allows MCP clients to reach unintended API en…EPSS 0.3%Oct 10, 2026
- Medium5.3Contao: Path traversal in the images controllerEPSS 0.3%Oct 9, 2026
- High7.1plugNmeet Server through 2.5.2 contains a path traversal vulnerability in the whiteboard conversion endpoint that allows any meeting participant to read server files v…EPSS 0.3%Oct 9, 2026
- Medium6.5IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to cause a denial of service due to a path traversal vulnerability.EPSS 0.4%Oct 8, 2026
- Critical9.1IBM Guardium Data Protection 12.2.2, and 12.1 could allow a remote attacker to delete arbitrary files due to improper limitation of a pathname to a restricted directory.EPSS 0.4%Oct 8, 2026
- Critical9.8IBM Guardium Data Protection 12.0, 12.1, and 12.2 could allow a remote attacker to execute arbitrary code due to path traversal.EPSS 0.6%Oct 8, 2026
- High7.7When Brocade ASCG before 3.5.0 processes support bundle archives ingested from remote compromised endpoints, the application fails to sanitize path traversal sequences…EPSS 0.3%Oct 8, 2026
- High8.6A path traversal vulnerability exists in the HTTP service component of Brocade ASCG versions before 3.5.0.EPSS 0.2%Oct 8, 2026
- Medium6.9A path traversal vulnerability affects the The Zone Alias Import flow feature in Brocade SANnav before 3.0.0a.EPSS 0.2%Oct 8, 2026
- Medium5.7An arbitrary file and directory deletion vulnerability exists in the REST API management interface handling USB storage operations on Brocade Fabric OS versions before 10.0.1.EPSS 0.2%Oct 8, 2026
- High8.1Payload is a free and open source headless content management system.EPSS 0.4%Oct 6, 2026
- Unknownuv: Path traversal on Windows through wheel extractionOct 5, 2026
- High7.6Office-PowerPoint-MCP-Server through 2.0.7 contains a path traversal vulnerability that allows MCP callers to write and read files outside the working directory by sup…EPSS 0.3%Oct 1, 2026
- Critical9.3The object name of a dynamically created BACnet File Object is interpreted as a file path without sufficient validation.EPSS 0.6%Oct 1, 2026
- Critical9.8Fortinet FortiMail Path Traversal VulnerabilityKEVEPSS 2.2%Oct 1, 2026
- High8.8The BM Content Builder plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the ux_cb_remove_layout_ajax() and ux_…EPSS 0.6%Sep 22, 2026
- Medium6.5The BM Content Builder plugin for WordPress is vulnerable to Directory Traversal in all versions up to 3.17.1 (exclusive) via the ux_cb_page_customize_save_layout_ajax() function.EPSS 0.5%Sep 22, 2026
- Critical9.8Check Point Multiple Products Path Traversal VulnerabilityKEVEPSS 75.9%Sep 22, 2026
- High7.5IBM Cloud Pak for Data 5.1.2 could allow a remote attacker to traverse directories on the system.EPSS 0.5%Sep 18, 2026
- Critical10.0GitLab Community Edition and Enterprise Edition Path Traversal VulnerabilityKEVEPSS 93.0%Sep 11, 2026
- Medium6.8MOOS-IvP through 24.8.1 fails to properly validate variable names extracted from alog files in the SplitHandler, allowing attackers to write files outside the split directory.EPSS 0.2%Sep 3, 2026
- High7.1rConfig Core 8.0.0 before 8.2.13 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying crafted filenames contain…EPSS 0.7%Aug 24, 2026
- High7.2A path traversal vulnerability was found in AWX's project archive extraction.EPSS 1.7%Aug 24, 2026
- High8.2RansomLook contains a path traversal vulnerability in the handling of the screen field associated with group posts.EPSS 0.6%Aug 24, 2026
- High8.8The Mercado Pago Node.js SDK interpolates caller-supplied identifiers into API request paths without percent-encoding them, so characters that are structural in a URL…EPSS 0.5%Aug 24, 2026