CWE-21
6 CVEs classified under CWE-21. Browse by severity and year.
Top CVEs for CWE-21| CVE | Severity | Score | Published | Summary |
|---|
CVE-2016-1505 | Critical | 10.0 | 2016-02-03 | The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrate… |
CVE-2016-15017 | Medium | 5.5 | 2023-01-10 | A vulnerability has been found in fabarea media_upload on TYPO3 and classified as critical. This vulnerability affects the function getUploadedFileList of the… |
CVE-2015-10030 | Medium | 5.5 | 2023-01-08 | A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php… |
CVE-2019-11626 | Medium | 5.3 | 2019-04-30 | routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c request. |
CVE-2024-7738 | Low | 3.3 | 2024-08-13 | A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality o… |
CVE-2014-2232 | | | 2014-12-01 | Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files… |
All CVEs classified under CWE-21 — newest first (page 1 of 1)| CVE | Severity | Score | Published | Summary |
|---|
CVE-2024-7738 | Low | 3.3 | 2024-08-13 | A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality o… |
CVE-2016-15017 | Medium | 5.5 | 2023-01-10 | A vulnerability has been found in fabarea media_upload on TYPO3 and classified as critical. This vulnerability affects the function getUploadedFileList of the… |
CVE-2015-10030 | Medium | 5.5 | 2023-01-08 | A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php… |
CVE-2019-11626 | Medium | 5.3 | 2019-04-30 | routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c request. |
CVE-2016-1505 | Critical | 10.0 | 2016-02-03 | The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrate… |
CVE-2014-2232 | | | 2014-12-01 | Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files… |