Monthly
Path traversal in Dell PowerProtect Data Domain Virtual Edition allows a remote attacker who already holds administrative-level privileges to execute commands on the appliance. Affected releases are Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10; the PR:H CVSS vector means unauthenticated and low-privileged users cannot reach the flaw. No public exploit was identified at time of analysis, and Dell has released fixed builds.
Path traversal in Koozali SME Server 11.0rc1-215 allows remote unauthenticated attackers to read files outside the intended logs directory through the server-manager View Logs feature, exposing system and application files with high confidentiality impact but no integrity or availability effect. The CVSS 4.0 vector rates exploitation maturity as E:P, so publicly available exploit code exists at the proof-of-concept level, but there is no CISA KEV confirmation of active exploitation. Real-world exposure is bounded to instances whose administrative web interface is reachable from untrusted networks.
Authenticated high-privilege attackers with access to the Mitel MiVoice Office 400 web portal on TCP 443 can exploit a directory traversal in Maintenance → File Management → File Browser to delete files outside the intended directory, including application and Linux system files, causing denial of service. The flaw affects MiVoice Office 400 deployments exposing the portal, requires a valid administrative/maintenance account, and has no public exploit identified at time of analysis. The independent assessment rates it as a moderate-priority, authentication-gated destructive issue rather than a mass-exploitation threat.
Path traversal in the Mitel MiVoice Office 400 web administration portal (https://<ip>:8443, reached through Administration -> View Logs) lets an authenticated administrator view or download sensitive system files that the portal's service context can read. Exploitation requires a high-privileged admin session and no user interaction, so the practical risk is access-gated: insiders, or attackers who have already stolen admin credentials or hijacked an admin session, are the realistic threat actors. The CNA rates it CVSS 4.0 8.4 with PR:H and a proof-of-concept-level exploit maturity metric (E:P), while our independent CVSS 3.1 assessment (7.2, AV:N/AC:L/PR:H/UI:N/C:H/I:N/A:N) characterizes it as a genuine but access-gated risk; no confirmed active exploitation (CISA KEV) or evidence of widespread attack activity appears in the available intelligence.
pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Authenticated path traversal in the Mitel MiVoice Office 400 web management portal (TCP 443) lets a high-privilege maintenance or administrator user read files outside the intended system logs directory by supplying crafted path input to the Maintenance → System Logs download function. Only users who already hold valid high-privilege portal credentials can trigger it (CVSS vector PR:H), and the impact is limited to confidentiality - files can be read or downloaded, but there is no write, code-execution, or denial-of-service capability. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the assessed risk is moderate rather than critical because exploitation is gated behind authenticated administrative access to an interface that should normally be restricted to trusted networks.
dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.
Path traversal in Dell PowerProtect Data Domain Virtual Edition allows a remote attacker who already holds administrative-level privileges to execute commands on the appliance. Affected releases are Feature Release 7.7.1.0 through 8.7, LTS2024 7.13.1.0 through 7.13.1.70, LTS2025 8.3.1.0 through 8.3.1.30, and LTS2026 8.6.1.0 through 8.6.1.10; the PR:H CVSS vector means unauthenticated and low-privileged users cannot reach the flaw. No public exploit was identified at time of analysis, and Dell has released fixed builds.
Path traversal in Koozali SME Server 11.0rc1-215 allows remote unauthenticated attackers to read files outside the intended logs directory through the server-manager View Logs feature, exposing system and application files with high confidentiality impact but no integrity or availability effect. The CVSS 4.0 vector rates exploitation maturity as E:P, so publicly available exploit code exists at the proof-of-concept level, but there is no CISA KEV confirmation of active exploitation. Real-world exposure is bounded to instances whose administrative web interface is reachable from untrusted networks.
Authenticated high-privilege attackers with access to the Mitel MiVoice Office 400 web portal on TCP 443 can exploit a directory traversal in Maintenance → File Management → File Browser to delete files outside the intended directory, including application and Linux system files, causing denial of service. The flaw affects MiVoice Office 400 deployments exposing the portal, requires a valid administrative/maintenance account, and has no public exploit identified at time of analysis. The independent assessment rates it as a moderate-priority, authentication-gated destructive issue rather than a mass-exploitation threat.
Path traversal in the Mitel MiVoice Office 400 web administration portal (https://<ip>:8443, reached through Administration -> View Logs) lets an authenticated administrator view or download sensitive system files that the portal's service context can read. Exploitation requires a high-privileged admin session and no user interaction, so the practical risk is access-gated: insiders, or attackers who have already stolen admin credentials or hijacked an admin session, are the realistic threat actors. The CNA rates it CVSS 4.0 8.4 with PR:H and a proof-of-concept-level exploit maturity metric (E:P), while our independent CVSS 3.1 assessment (7.2, AV:N/AC:L/PR:H/UI:N/C:H/I:N/A:N) characterizes it as a genuine but access-gated risk; no confirmed active exploitation (CISA KEV) or evidence of widespread attack activity appears in the available intelligence.
pgAdmin <= 8.3 is affected by a path-traversal vulnerability while deserializing users’ sessions in the session handling code. Rated critical severity (CVSS 9.9), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Authenticated path traversal in the Mitel MiVoice Office 400 web management portal (TCP 443) lets a high-privilege maintenance or administrator user read files outside the intended system logs directory by supplying crafted path input to the Maintenance → System Logs download function. Only users who already hold valid high-privilege portal credentials can trigger it (CVSS vector PR:H), and the impact is limited to confidentiality - files can be read or downloaded, but there is no write, code-execution, or denial-of-service capability. No public exploit code and no confirmed active exploitation were identified at time of analysis, and the assessed risk is moderate rather than critical because exploitation is gated behind authenticated administrative access to an interface that should normally be restricted to trusted networks.
dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary commands as SYSTEM. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.