comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory. (CVSS:0.0) (Last Update:2019-08-23)

Power-Response before 2019-02-02 allows directory traversal (up to the application's main directory) via a plugin. (CVSS:0.0) (Last Update:2019-08-23)

Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler. (CVSS:0.0) (Last Update:2019-08-23)

jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal. (CVSS:0.0) (Last Update:2019-08-23)

Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring. (CVSS:0.0) (Last Update:2019-08-23)

The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal. (CVSS:0.0) (Last Update:2019-08-22)

NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction. (CVSS:0.0) (Last Update:2019-08-22)

Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attacker could use ..\ with this method to iterate over lists of interesting system files and download them without previous authentication. This includes SAM-database backups, Web.config files, etc. and might cause a serious impact on confidentiality. (CVSS:0.0) (Last Update:2019-08-22)