Browse CVEs

HIGH 7.5 CVE-2024-57451 ChestnutCMS <=1.5.0 has a directory traversal vulnerability in contentcore.controller.FileController#getFileList, which allows attackers to view any … Chestnutcms after 1.5.0 Fix from $1,9502025-02-03 HIGH 7.5 CVE-2024-57669 Directory Traversal vulnerability in Zrlog backup-sql-file.jar v.3.0.31 allows a remote attacker to obtain sensitive information via the BackupContro… Patch available Fix from $1,9502025-02-03 HIGH 7.2 CVE-2025-24605 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RealMag777 WOLF bulk-editor allows Path Traversal.Thi… Wolf Wordpress Posts Bulk Editor And Products Manager Professional 1.0.8.6+ Fix from $1,9502025-02-03 HIGH 7.5 CVE-2025-24569 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RedefiningTheWeb PDF Generator Addon for Elementor Pa… Mitigation only Fix from $1,9502025-02-03 HIGH 7.5 CVE-2025-23819 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Marco Milesi WP Cloud cloud allows Absolute Path Trav… Mitigation only Fix from $1,9502025-02-03 MEDIUM 6.5 CVE-2025-0973 A vulnerability classified as critical was found in CmsEasy 7.7.7.9. This vulnerability affects the function backAll_action in the library lib/admin/… Cmseasy No fix yet Fix from $1,6002025-02-03 MEDIUM 6.5 CVE-2025-0365 The Jupiter X Core plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.8.7 via the inline SVG feature. … Jupiter X Core 4.8.8+ Fix from $1,6002025-02-01 HIGH 7.1 CVE-2024-51534 Dell PowerProtect DD versions prior to DDOS 8.3.0.0, 7.10.1.50, and 7.13.1.20 contain a path traversal vulnerability. A local low privileged could po… Data Domain Operating System 7.10.1.50 / 7.13.1.20+ Fix from $1,9502025-02-01 CRITICAL 9.6 CVE-2025-24891 Dumb Drop is a file upload application. Users with permission to upload to the service are able to exploit a path traversal vulnerability to overwrit… Patch available Fix from $2,3002025-01-31 HIGH 7.5 CVE-2024-53582 An issue found in the Copy and View functions in the File Manager component of OpenPanel v0.3.4 allows attackers to execute a directory traversal via… Openpanel No fix yet Fix from $1,9502025-01-31 CRITICAL 9.1 CVE-2024-53537 An issue in OpenPanel v0.3.4 to v0.2.1 allows attackers to execute a directory traversal in File Actions of File Manager. Openpanel after 0.3.4 Fix from $2,3002025-01-31 CRITICAL 9.8 CVE-2025-0493 The MultiVendorX – The Ultimate WooCommerce Multivendor Marketplace Solution plugin for WordPress is vulnerable to Limited Local File Inclusion in a… Multivendorx 4.2.15+ Fix from $2,3002025-01-31 MEDIUM 5.3 CVE-2025-0573 Sante PACS Server DCM File Parsing Directory Traversal Arbitrary File Write Vulnerability. This vulnerability allows remote attackers to create arbit… Sante Pacs Server 4.0.10+ Fix from $1,6002025-01-30 MEDIUM 5.7 CVE-2024-55415EPSS 16% DevDojo Voyager through 1.8.0 is vulnerable to path traversal at the /admin/compass. Voyager after 1.8.0 Fix from $1,6002025-01-30 CRITICAL 9.1 CVE-2024-13720 The WP Image Uploader plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the gky_image_uploade… Wp Image Uploader after 1.0.1 Fix from $2,3002025-01-30 HIGH 7.5 CVE-2024-13671 The Music Sheet Viewer plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 4.1 via the read_score_file() … Music Sheet Viewer after 4.1 Fix from $1,9502025-01-30 HIGH 7.1 CVE-2024-54461 The file names constructed within file_selector are missing sanitization checks leaving them vulnerable to malicious document providers. This may res… File Selector Android 0.5.1+ Fix from $1,9502025-01-29 HIGH 7.1 CVE-2024-54462 The file names constructed within image_picker are missing sanitization checks leaving them vulnerable to malicious document providers. This may resu… Image Picker Android 0.8.12+ Fix from $1,9502025-01-29 MEDIUM 6.6 CVE-2025-0750 A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attack… Mitigation only Fix from $1,6002025-01-28 MEDIUM 5.5 CVE-2025-23084 A vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.js functi… Node.js 18.20.6 / 20.18.2+ Fix from $1,6002025-01-28 HIGH 7.5 CVE-2024-57549 CMSimple 5.16 allows the user to read cms source code through manipulation of the file name in the file parameter of a GET request. Cmsimple No fix yet Fix from $1,9502025-01-27 MEDIUM 5.5 CVE-2024-54520 A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A… macOS 13.7.2 / 14.7.2+ Fix from $1,6002025-01-27 HIGH 7.8 CVE-2025-0542 Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vul… Mitigation only Fix from $1,9502025-01-25 MEDIUM 5.3 CVE-2023-38012 IBM Cloud Pak System 2.3.3.6, 2.3.3.6 iFix1, 2.3.3.6 iFix2, 2.3.3.7, 2.3.3.7 iFix1, and 2.3.4.0 could allow a remote attacker to traverse directories… Cloud Pak System Mitigation only Fix from $1,6002025-01-25 MEDIUM 6.5 CVE-2024-13550 The ABC Notation plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 6.1.3 via the 'file' attribute of the 'ab… Abc Notation after 6.1.3 Fix from $1,6002025-01-25 MEDIUM 6.5 CVE-2024-12885 The Connections Business Directory plugin for WordPress is vulnerable to arbitrary directory deletion due to insufficient file path validation when d… Mitigation only Fix from $1,6002025-01-25 HIGH 8.8 CVE-2024-13409 The Post Grid, Slider & Carousel Ultimate – with Shortcode, Gutenberg Block & Elementor Widget plugin for WordPress is vulnerable to Local File Inclu… Post Grid\, Slider \& Carousel Ultimate 1.7+ Fix from $1,9502025-01-24 HIGH 7.5 CVE-2025-23422 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in moaluko Store Locator store-locator allows PHP Local … Mitigation only Fix from $1,9502025-01-24 CRITICAL 9.8 CVE-2024-13545 The Bootstrap Ultimate theme for WordPress is vulnerable to Local File Inclusion in all versions up to, and including, 1.4.9 via the path parameter. … Ultimate Bootstrap Elements For Elementor after 1.4.9 Fix from $2,3002025-01-24 CRITICAL 9.8 CVE-2024-55926 A vulnerability found in Xerox Workplace Suite allows arbitrary file read, upload, and deletion on the server through crafted header manipulation. By… Workplace Suite 5.6.701.9+ Fix from $2,3002025-01-23