CWE-21

6 CVEs classified under CWE-21. Browse by severity and year.

Top CVEs for CWE-21
CVESeverityScorePublishedSummary
CVE-2016-1505Critical10.02016-02-03The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrate…
CVE-2016-15017Medium5.52023-01-10A vulnerability has been found in fabarea media_upload on TYPO3 and classified as critical. This vulnerability affects the function getUploadedFileList of the…
CVE-2015-10030Medium5.52023-01-08A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php…
CVE-2019-11626Medium5.32019-04-30routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c request.
CVE-2024-7738Low3.32024-08-13A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality o…
CVE-2014-22322014-12-01Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files…
All CVEs classified under CWE-21 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2024-7738Low3.32024-08-13A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality o…
CVE-2016-15017Medium5.52023-01-10A vulnerability has been found in fabarea media_upload on TYPO3 and classified as critical. This vulnerability affects the function getUploadedFileList of the…
CVE-2015-10030Medium5.52023-01-08A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php…
CVE-2019-11626Medium5.32019-04-30routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c request.
CVE-2016-1505Critical10.02016-02-03The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrate…
CVE-2014-22322014-12-01Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files…