Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:22"
1,001 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-40076 |
critical | 9.4 | 0.0085 | 2026-05-06 | OpenMRS Core is an open source electronic medical record system platform. In versions 2.7.8 and earl | |
CVE-2026-41202 |
critical | 9.4 | 0.0068 | 2026-05-07 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture w | |
CVE-2026-41203 |
critical | 9.4 | 0.0062 | 2026-05-07 | CI4MS is a CodeIgniter 4-based CMS skeleton that delivers a production-ready, modular architecture w | |
CVE-2026-42882 |
critical | 9.4 | 0.0055 | 2026-05-11 | oxyno-zeta/s3-proxy is an aws s3 proxy written in go. Prior to 5.0.0, s3-proxy contains an authentic | |
CVE-2026-52830 |
critical | 9.4 | 0.0065 | 2026-07-02 | fast-mcp-telegram is a Telegram MCP Server. Prior to 0.19.1, fast-mcp-telegram validates HTTP Bearer | |
CVE-2026-61445 |
critical | 9.4 | 0.0064 | 2026-07-11 | PraisonAI before 4.6.78 contains arbitrary file write and command execution vulnerabilities in the A | |
CVE-2026-15265 |
critical | 9.4 | 0.0056 | 2026-07-14 | A path traversal vulnerability in Tenable Agent 11.2.0 and 11.1.3 and lower allows a privileged atta | |
CVE-2026-115375 |
critical | 9.4 | 0.0040 | 2026-10-22 | Incus 7.0.0 before 7.0.2 and 7.1.0 before 7.5.0 contains a path traversal vulnerability that allows | |
CVE-2026-92812 |
critical | 9.3 | 0.0044 | 2026-09-16 | Decap CMS before 3.11.0 contains a path traversal vulnerability in the local proxy containment guard | |
CVE-2026-7875 |
critical | 9.3 | 0.0015 | 2026-05-06 | NanoClaw version 1.2.0 and prior contains a host/container filesystem boundary vulnerability in outb | |
CVE-2026-44225 |
critical | 9.3 | 0.0154 | 2026-05-12 | Pulpy is a lightweight, cross-platform desktop application packager for web apps. Prior to 0.1.1, Pu | |
CVE-2026-48777 |
critical | 9.3 | 0.0055 | 2026-06-16 | FileBrowser Quantum is a free, self-hosted, web-based file manager. Versions prior to 1.3.2-stable, | |
CVE-2026-48768 |
critical | 9.3 | 0.0033 | 2026-06-18 | TypeBot is a chatbot builder tool. In versions 3.16.1 and earlier, POST /api/blocks/file-input/v3/ge | |
CVE-2026-54414 |
critical | 9.3 | 0.0066 | 2026-06-19 | FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/fo | |
CVE-2026-11720 |
critical | 9.3 | 0.0053 | 2026-06-29 | A path traversal vulnerability exists in the HTTP tool URL builder of googleapis/mcp-toolbox. When | |
CVE-2026-48313 |
critical | 9.3 | 0.0295 | 2026-06-30 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname | |
CVE-2026-50003 |
critical | 9.3 | 0.0066 | 2026-06-30 | A malicious or compromised server can make a DCMTK client using bit-preserving C-GET storage mode wr | |
CVE-2026-59864 |
critical | 9.3 | 0.0133 | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, `kiota plugin add` | |
CVE-2026-59866 |
critical | 9.3 | 0.0141 | 2026-07-16 | Kiota is an OpenAPI based HTTP Client code generator. Prior to 1.29.1 and 1.32.5, Kiota emitted x-ms | |
CVE-2026-64824 |
critical | 9.3 | 0.0071 | 2026-07-21 | Home Assistant Core before 2026.7.0 contains a path traversal vulnerability in the backup-restore fu | |
CVE-2026-65687 |
critical | 9.3 | 0.0087 | 2026-07-23 | Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulner | |
CVE-2026-65688 |
critical | 9.3 | 0.0087 | 2026-07-23 | Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulner | |
CVE-2026-65689 |
critical | 9.3 | 0.0087 | 2026-07-23 | Bold Reports Standalone Report Designer before 14.1.12 contains a missing filepath validation vulner | |
CVE-2026-65700 |
critical | 9.3 | 0.0152 | 2026-07-23 | h2oGPT through 0.2.1 contains a path traversal vulnerability in the OpenAI-compatible files API that | |
CVE-2026-65701 |
critical | 9.3 | 0.0069 | 2026-07-23 | SoftVC VITS Singing Voice Conversion through commit 730930d contains a path traversal vulnerability | |
CVE-2026-14973 |
critical | 9.3 | 0.0045 | 2026-07-28 | IBM Aspera Desktop App 1.0.5 through 1.0.19 IBM Aspera for desktop can allow files to be written out | |
CVE-2026-69110 |
critical | 9.3 | 0.0084 | 2026-08-04 | OpenCode Studio before 2.4.4 contains a missing authentication vulnerability that allows unauthentic | |
CVE-2026-9195 |
critical | 9.3 | 0.0065 | 2026-08-05 | A cross-site scripting vulnerability in the Query Console of Progress MarkLogic Server before 11.3.6 | |
CVE-2026-53976 |
critical | 9.3 | 0.0261 | 2026-08-06 | OpenChamber 1.11.7 contains a path traversal vulnerability in the file-serving endpoints /api/fs/rea | |
CVE-2026-19264 |
critical | 9.3 | 0.0101 | 2026-08-07 | Postiz is an open-source social media scheduling tool. The route that serves locally stored media jo | |
CVE-2026-47754 |
critical | 9.3 | 0.0047 | 2026-08-10 | Metacat is data repository software that helps researchers preserve, share, and discover data. Versi | |
CVE-2026-73034 |
critical | 9.3 | 0.0570 | 2026-08-11 | DB-GPT v0.8.1 contains an unauthenticated path traversal vulnerability that allows remote attackers | |
CVE-2026-70009 |
critical | 9.3 | 0.0053 | 2026-09-17 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Arc allows a | |
CVE-2021-48014 |
critical | 9.3 | — | 2026-10-22 | FineReport 9.0 contains a path traversal vulnerability in the /WebReport/ReportServer design_save_sv | |
CVE-2026-93328 |
critical | 9.3 | 0.0053 | 2026-10-26 | Path Traversal and Missing Authorization in cloud-storage source in Google Cloud MCP Toolbox for Dat | |
CVE-2026-112005 |
critical | 9.2 | 0.0069 | 2026-10-18 | WhoDB 0.104.0 before 0.135.0 contains a path traversal vulnerability that allows remote attackers to | |
CVE-2026-35615 |
critical | 9.2 | 0.0042 | 2026-04-07 | PraisonAI is a multi-agent teams system. Prior to 1.5.113, _validate_path() calls os.path.normpath() | |
CVE-2026-41552 |
critical | 9.2 | 0.0050 | 2026-05-15 | PDF Export Module used in DHTMLX's products Gantt and Scheduler is vulnerable to Path Traversal due | |
CVE-2026-7182 |
critical | 9.2 | 0.0040 | 2026-05-15 | Diagram's export module is vulnerable to Path Traversal in src attribute due to lack of HTML sanitiz | |
CVE-2026-13014 |
critical | 9.2 | 0.0070 | 2026-07-13 | A vulnerability in Thales CERT "Suspicious" application =< 1.3.4 allows a remote and unauthenticated | |
CVE-2026-65889 |
critical | 9.2 | 0.0044 | 2026-07-29 | Joomla Extension - balbooa.com - Unauthenticated recursive directory deletion < 2.20.2 - The generat | |
CVE-2026-65886 |
critical | 9.2 | 0.0055 | 2026-07-29 | Joomla Extension - balbooa.com - Unauthenticated arbitrary file read in Gridbox < 2.20.2 - The photo | |
CVE-2026-66914 |
critical | 9.2 | 0.0154 | 2026-08-07 | Joomla Extension - seblod.com - Unauthenticated path traversal in SEBLOD < 3.30.0, < 4.7.0, < 6.0.1 | |
CVE-2026-67285 |
critical | 9.2 | 0.0051 | 2026-08-12 | Joomla Extension - joomshaper.com - Unauthenticated arbitrary local PHP file inclusion in SP Page Bu | |
CVE-2026-70460 |
critical | 9.2 | 0.0045 | 2026-08-13 | rsync 2.3.3 before 3.5.0 contains a path traversal vulnerability that allows a malicious sender to e | |
CVE-2026-115353 |
critical | 9.2 | 0.0039 | 2026-10-22 | Mistune before 3.3.0 contains a path traversal vulnerability in the RST include directive that allow | |
CVE-2024-48884 |
critical | 9.1 | 0.1521 | 2025-01-14 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fo | |
CVE-2026-35573 |
critical | 9.1 | 0.0076 | 2026-04-07 | ChurchCRM is an open-source church management system. Prior to 6.5.3, a path traversal vulnerability | |
CVE-2026-40258 |
critical | 9.1 | 0.0040 | 2026-04-17 | The Gramps Web API is a Python REST API for the genealogical research software Gramps. Versions 1.6. | |
CVE-2026-41691 |
critical | 9.1 | 0.0031 | 2026-05-07 | Copilot said: i18nextify is a JavaScript library that adds i18nextify is a JavaScript library that a |