Automated Import Products to Cart < 1.0.4 - Subscriber+ Arbitrary File Read and Deletion via Path Traversal
cve-program ·
Vendor product: Automated Import Products to Cart
No access to your tenant or devices. Every item links to its source. What this means
Microsoft security updates and public advisory evidence: affected products, fixing updates, exploitation and source coverage.
Public source statements across vendors. Explicit aliases connect records; each publisher keeps its own state, severity and affected-version evidence.
cve-program ·
Vendor product: Automated Import Products to Cart
cve-program ·
Vendor product: GeoDirectory
cve-program ·
Vendor product: Chat AI with Dispatcher
cve-program ·
Vendor product: Photo Engine (Media Organizer & Lightroom)
cve-program ·
Vendor product: Community Events
osv · CVE-2026-118688 · GHSA-m9f7-9w4p-gv38
crates.io: wasmtime-wasi
osv · BIT-golang-2026-111943 · CVE-2026-111943 · RUSTSEC-2026-0381 · RUSTSEC-2026-0382
Go: stdlib
osv · BIT-golang-2026-111943 · CVE-2026-111943 · GO-2026-6809 · RUSTSEC-2026-0382
crates.io: webpki-roots
osv · BIT-golang-2026-111943 · CVE-2026-111943 · GO-2026-6809 · RUSTSEC-2026-0381
crates.io: rustls-webpki
osv · BIT-golang-2026-111943 · CVE-2026-111943 · GO-2026-6809 · RUSTSEC-2026-0381
crates.io: webpki-root-certs
cve-program ·
Vendor product: ftpserverlib · Vendor product: Syncplify Server!
cve-program ·
Vendor product: Pillow
cve-program ·
Vendor product: Video Player for YouTube
cve-program ·
https://wordpress.org/plugins: Contact Form by Supsystic
cve-program ·
Vendor product: Oracle Purchasing
cve-program ·
Vendor product: Oracle Cost Management
cve-program ·
Vendor product: Oracle Quality
cve-program ·
Vendor product: Oracle Shipping Execution
cve-program ·
Vendor product: Global Order Promising
cve-program ·
Vendor product: Strategic Network Optimization
cve-program ·
Vendor product: Oracle Product Hub
cve-program ·
Vendor product: Oracle Product Hub
cve-program ·
Vendor product: Oracle Product Hub
cve-program ·
Vendor product: Oracle Contract Lifecycle Management for Public Sector
cve-program ·
Vendor product: Oracle Contract Lifecycle Management for Public Sector
cve-program ·
Vendor product: Oracle Product Hub
cve-program ·
Vendor product: Zimbra Collaboration Suite
cve-program ·
Vendor product: Zimbra Collaboration Suite
cve-program ·
Vendor product: Zimbra Collaboration Suite
cve-program ·
Vendor product: HP One Agent Software
cve-program ·
Vendor product: Kubernetes
cve-program ·
Vendor product: PowerProtect Data Domain
cve-program ·
Vendor product: PowerProtect Data Domain
cve-program ·
Vendor product: PhysX
cve-program ·
Vendor product: PowerProtect Data Domain Virtual Edition
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fireware OS · Vendor product: Fireware OS
cve-program ·
Vendor product: Fusion Post Processor Utility
cve-program ·
Vendor product: Fusion
cve-program ·
Vendor product: Creative Cloud Desktop Application
cve-program ·
Vendor product: Adobe Substance 3D Painter
cve-program ·
Vendor product: RE305 v3
cve-program ·
Vendor product: RE305 v3
cve-program ·
Vendor product: PowerProtect Data Domain
cve-program ·
Vendor product: PowerProtect Data Domain Management Center
cve-program ·
Vendor product: PowerProtect Data Domain
cve-program ·
Vendor product: Acronis Cyber Protect 17
A catalog match establishes published evidence, not applicability to your environment. Check resolved package dependencies, or open a Microsoft CVE for fixing KBs, releases and planning.