VulnSea

CWE-31

CVEs classified under CWE-31, newest first.

5 CVEsRSS

CVE-2026-94346High· 7.2
yesterday

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.…

PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release versions 8.3.1.0 through 8.3.1.30, LTS2026 release versions 8.6.1.0 through 8.6.…

▾ TwilightDell · PowerProtect Data Domain Virtual Editionvia CVEORG
CVE-2026-108120High· 7.7
1w ago

path traversal inKoozali - SME Server

Brian Mariani from DigitalCanion SA has discovered a path traversal vulnerability in the View Logs functionality of koozali's SME Server version 11.0rc1-215 allowing an unauthenticated attacker to access files outside of the intended d…

▾ Twilightkoozali · SME ServerEPSS 0.37%via CVEORG
CVE-2026-104806Medium· 5.5
3w ago

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management …

DigitalCanion has discovered a path traversal vulnerability that allows an attacker to access files outside of the intended directory. The specific flaw exists within the Maintenance → System Logs functionality of the web management …

▾ SunlitMitel · Mitel MiVoice Office 400EPSS 0.31%via NVD
CVE-2026-104706High· 8.4
3w ago

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://<ip>:8443 via menus Administration -> View Logs

DigitalCanion has discovered a path traversal vulnerability that allows to view or download sensitive system files over the portal https://<ip>:8443 via menus Administration -> View Logs

▾ TwilightMitel · Mitel MiVoice Office 400EPSS 0.14%via NVD
CVE-2026-104810High· 8.4
3w ago

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400

This vulnerability allows remote attackers to delete sensitive files on vulnerable installations of Mitel MiVoice Office 400. Authentication is required to exploit this vulnerability. The specific flaw exists within the web portal li…

▾ TwilightMitel · Mitel MiVoice Office 400EPSS 0.38%via NVD
CWE-31 vulnerabilities (CVEs) · VulnSea