CWE-31

CWE-31 · 5 records · 0 with a public proof-of-concept

Records the NVD classes under CWE-31, highest CVSS first.

  1. HIGH 7.2CVE-2026-943462026-10-27

    PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.1.10, contain a Path Tr…

    AI risk analysis on Exploit-DB.ai →

  2. UNSCOREDCVE-2026-1081202026-10-19

    Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended directory, leading to e…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-1048102026-10-05

    This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal listening on TCP port 443…

    AI risk analysis on Exploit-DB.ai →

  4. UNSCOREDCVE-2026-1048062026-10-05

    DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management portal listening on TCP…

    AI risk analysis on Exploit-DB.ai →

  5. UNSCOREDCVE-2026-1047062026-10-05

    DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://<ip>:8443 via menus Administration -> View Logs

    AI risk analysis on Exploit-DB.ai →