Catalog
Findings
Filter the merged record by severity, source, stack, and weakness type.
- Medium5.5A security flaw has been discovered in NousResearch hermes-agent up to 2026.4.16.May 24, 2026
- Medium6.5Directory Traversal vulnerability in Easy Chat Server 3.1 allows a remote attacker to obtain sensitive information and execute arbitrary code via the UserName parameterMay 22, 2026
- High7.5Directory traversal in Follett Software's Destiny Library Manager 22_0_2_rc1 and fixed in v.22.5 AU1 allows remote attackers to read arbitrary system and application f…May 22, 2026
- High7.7A malicious actor with access to the network and low privileges could exploit a Path Traversal vulnerability found in UniFi OS devices to access files on the underlyin…May 22, 2026
- Critical10.0Ubiquiti UniFi OS Path Traversal VulnerabilityKEVEPSS 1.8%May 21, 2026
- Critical9.8A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.May 21, 2026
- Critical9.8A vulnerability in the Trend Micro Apex One management console could allow a remote attacker to upload malicious code and execute commands on affected installations.May 21, 2026
- Critical9.9Mattermost versions 11.6.x <= 11.6.0, 11.5.x <= 11.5.3, 11.4.x <= 11.4.4, 10.11.x <= 10.11.14 fail to check integration URL for path traversal which allows an maliciou…May 21, 2026
- High7.6Incomplete sanitization of extended attribute (EA) path components in Netatalk 2.1.0 through 4.4.2 allows a remote authenticated attacker to write to files outside the…May 21, 2026
- Critical9.4A path traversal vulnerability exists in the Altium Enterprise Server Viewer StorageController due to improper handling of file path route parameters.May 20, 2026
- Critical9.4A path traversal vulnerability exists in the Altium Enterprise Server ComparisonService due to missing filename sanitization in the Gerber file upload APIs.May 20, 2026
- Critical9.4Frappe Learning Management System (LMS) is a learning system that helps users structure their content.May 20, 2026
- High8.7Frappe is a full-stack web application framework.May 20, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue.May 20, 2026
- High7.5NVIDIA Triton Inference Server contains a vulnerability where an attacker could cause a path traversal issue.May 20, 2026
- Medium6.8Trilium Notes is an open-source, cross-platform hierarchical note taking application for building large personal knowledge bases.May 20, 2026
- Critical9.8An authentication bypass vulnerability exists in the embedded HTTP server of Panabit PAP-XM320 up to and including v7.7.May 19, 2026
- High7.3An issue in gohttp commit 34ea51 allows attackers to execute a directory traversal via supplying a crafted request.May 19, 2026
- Medium5.9The file indexer does not normalize the configured directory path.May 19, 2026
- Medium6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting'), Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), I…EPSS 0.7%May 19, 2026
- Medium6.5Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.EPSS 0.8%May 19, 2026
- Medium4.8Claude HUD through 0.0.12, patched in commit 234d9aa, contains a path traversal vulnerability that allows attackers to read arbitrary files by supplying an unvalidated…May 18, 2026
- High8.8DumbAssets through 1.0.11 contains a path traversal vulnerability in the POST /api/delete-file endpoint and filesToDelete array parameters that allows unauthenticated…May 18, 2026
- High7.5HSC MailInspector 5.3.3-7 has a Path Traversal vulnerability due to improper validation of user-supplied input in the /tap/dw.php endpoint.May 18, 2026
- Medium6.5An attacker in a privileged network position may be able to leak sensitive information.May 18, 2026