CWE-22 · Path Traversal (page 19)
Page 19 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-1532 | Low | 2.4 | 2026-01-28 | A vulnerability was identified in D-Link DCS-700L 1.03.09. The affected element is the function uploadmusic of the file /setUploadMusic of the component Music… |
CVE-2025-69601 | Medium | 6.5 | 2026-01-28 | A directory traversal (Zip Slip) vulnerability exists in the “Static Sites” feature of 66biolinks v44.0.0 by AltumCode. Uploaded ZIP archives are automatically… |
CVE-2020-36970 | High | 8.4 | 2026-01-28 | PMB 5.6 contains a local file disclosure vulnerability in getgif.php that allows attackers to read arbitrary system files by manipulating the 'chemin' paramete… |
CVE-2026-1056 | Critical | 9.8 | 2026-01-28 | The Snow Monkey Forms plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'generate_user_dirpath' fun… |
CVE-2026-24842 | High | 8.2 | 2026-01-28 | node-tar,a Tar for Node.js, contains a vulnerability in versions prior to 7.5.7 where the security check for hardlink entries uses different path resolution se… |
CVE-2026-24770 | Critical | 9.8 | 2026-01-27 | RAGFlow is an open-source RAG (Retrieval-Augmented Generation) engine. In version 0.23.1 and possibly earlier versions, the MinerU parser contains a "Zip Slip"… |
CVE-2026-24741 | High | 8.1 | 2026-01-27 | ConvertXis a self-hosted online file converter. In versions prior to 0.17.0, the `POST /delete` endpoint uses a user-controlled `filename` value to construct a… |
CVE-2026-23593 | High | 7.5 | 2026-01-27 | A vulnerability in the web-based management interface of HPE Aruba Networking Fabric Composer could allow an unauthenticated remote attacker to view some syste… |
CVE-2020-36939 | High | 7.5 | 2026-01-27 | Cassandra Web 0.5.0 contains a directory traversal vulnerability that allows unauthenticated attackers to read arbitrary files by manipulating path traversal p… |
CVE-2026-24801 | | 2026-01-27 | Vulnerability in Ralim IronOS (source/Core/BSP/Pinecilv2/bl_mcu_sdk/components/ble/ble_stack/common/tinycrypt/source modules). This vulnerability is associated… | |
CVE-2026-24686 | Medium | 4.7 | 2026-01-27 | go-tuf is a Go implementation of The Update Framework (TUF). go-tuf's TAP 4 Multirepo Client uses the map file repository name string (`repoName`) as a filesys… |
CVE-2026-24486 | High | 8.6 | 2026-01-27 | Python-Multipart is a streaming multipart parser for Python. Prior to version 0.0.22, a Path Traversal vulnerability exists when using non-default configuratio… |
CVE-2026-24479 | Critical | 9.8 | 2026-01-27 | HUSTOF is an open source online judge based on PHP/C++/MySQL/Linux for ACM/ICPC and NOIP training. Prior to version 26.01.24, the problem_import_qduoj.php and… |
CVE-2026-24478 | High | 7.2 | 2026-01-27 | AnythingLLM is an application that turns pieces of content into context that any LLM can use as references during chatting. Prior to version 1.10.0, a critical… |
CVE-2026-24123 | High | 7.4 | 2026-01-26 | BentoML is a Python library for building online serving systems optimized for AI apps and model inference. Prior to version 1.4.34, BentoML's `bentofile.yaml`… |
CVE-2026-24131 | Medium | 5.5 | 2026-01-26 | pnpm is a package manager. Prior to version 10.28.2, when pnpm processes a package's `directories.bin` field, it uses `path.join()` without validating the resu… |
CVE-2026-24056 | Medium | 6.5 | 2026-01-26 | pnpm is a package manager. Prior to version 10.28.2, when pnpm installs a `file:` (directory) or `git:` dependency, it follows symlinks and reads their target… |
CVE-2026-23889 | Medium | 6.5 | 2026-01-26 | pnpm is a package manager. Prior to version 10.28.1, a path traversal vulnerability in pnpm's tarball extraction allows malicious packages to write files outsi… |
CVE-2026-23888 | Medium | 6.5 | 2026-01-26 | pnpm is a package manager. Prior to version 10.28.1, a path traversal vulnerability in pnpm's binary fetcher allows malicious packages to write files outside t… |
CVE-2026-24469 | High | 7.5 | 2026-01-24 | C++ HTTP Server is an HTTP/1.1 server built to handle client connections and serve HTTP requests. Versions 1.0 and below are vulnerable to Path Traversal via t… |
CVE-2025-11002 | High | 7.8 | 2026-01-23 | 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2026-24137 | Medium | 5.8 | 2026-01-23 | sigstore framework is a common go library shared across sigstore services and clients. In versions 1.10.3 and below, the legacy TUF client (pkg/tuf/client.go)… |
CVE-2026-20613 | High | 7.8 | 2026-01-23 | The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive memb… |
CVE-2026-21227 | High | 8.2 | 2026-01-22 | Improper limitation of a pathname to a restricted directory ('path traversal') in Azure Logic Apps allows an unauthorized attacker to elevate privileges over a… |
CVE-2026-23954 | High | 8.7 | 2026-01-22 | Incus is a system container and virtual machine manager. Versions 6.21.0 and below allow a user with the ability to launch a container with a custom image (e.g… |
CVE-2025-66428 | High | 8.8 | 2026-01-22 | An issue with WordPress directory names in WebPros WordPress Toolkit before 6.9.1 allows privilege escalation. |
CVE-2025-69097 | High | 8.6 | 2026-01-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue… |
CVE-2025-69055 | Medium | 6.5 | 2026-01-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SeaTheme BM Content Builder bm-builder allows Path Traversal.Th… |
CVE-2025-68912 | High | 8.6 | 2026-01-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Harmonic Design HDForms hdforms allows Path Traversal.This issu… |
CVE-2025-68907 | High | 7.5 | 2026-01-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Hostme v2 hostmev2 allows Path Traversal.This issue… |
CVE-2025-68902 | High | 7.5 | 2026-01-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affect… |
CVE-2025-68901 | High | 8.6 | 2026-01-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in AivahThemes Anona anona allows Path Traversal.This issue affect… |
CVE-2025-67963 | High | 8.6 | 2026-01-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ovatheme Movie Booking movie-booking allows Path Traversal.This… |
CVE-2023-7335 | | 2026-01-22 | EduSoho versions prior to 22.4.7 contain an arbitrary file read vulnerability in the classroom-course-statistics export functionality. A remote, unauthenticate… | |
CVE-2025-69820 | Medium | 6.0 | 2026-01-22 | Directory Traversal vulnerability in Beam beta9 v.0.1.521 allows a remote attacker to obtain sensitive information via the joinCleanPath function. |
CVE-2025-69612 | Medium | 6.5 | 2026-01-22 | A path traversal vulnerability exists in TMS Management Console (version 6.3.7.27386.20250818) from TMS Global Software. The "Download Template" function in th… |
CVE-2025-67684 | High | 7.2 | 2026-01-22 | Quick.Cart is vulnerable to Local File Inclusion and Path Traversal issues in the theme selection mechanism. Quick.Cart allows a privileged user to upload arbi… |
CVE-2026-24049 | High | 7.1 | 2026-01-22 | wheel is a command line tool for manipulating Python wheel files, as defined in PEP 427. In versions 0.40.0 through 0.46.1, the unpack function is vulnerable t… |
CVE-2026-24046 | High | 7.1 | 2026-01-21 | Backstage is an open framework for building developer portals. Multiple Scaffolder actions and archive extraction utilities were vulnerable to symlink-based pa… |
CVE-2021-47850 | High | 7.5 | 2026-01-21 | Mini Mouse 9.2.0 contains a path traversal vulnerability that allows remote attackers to access arbitrary system files and directories through crafted HTTP req… |
CVE-2021-47849 | Medium | 6.2 | 2026-01-21 | Mini Mouse 9.3.0 contains a path traversal vulnerability that allows attackers to access sensitive system directories through the device information endpoint… |
CVE-2026-23949 | High | 8.6 | 2026-01-20 | jaraco.context, an open-source software package that provides some useful decorators and context managers, has a Zip Slip path traversal vulnerability in the `… |
CVE-2026-22218 | Medium | 6.5 | 2026-01-20 | Chainlit versions prior to 2.9.4 contain an arbitrary file read vulnerability in the /project/element update flow. An authenticated client can send a custom El… |
CVE-2026-23851 | Medium | 6.5 | 2026-01-19 | SiYuan is a personal knowledge management system. Versions prior to 3.5.4 contain a logic vulnerability in the /api/file/globalCopyFiles endpoint. The function… |
CVE-2026-23850 | High | 7.5 | 2026-01-19 | SiYuan is a personal knowledge management system. In versions prior to 3.5.4, the markdown feature allows unrestricted server side html-rendering which allows… |
CVE-2025-29847 | High | 7.5 | 2026-01-19 | A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC engine and data source functionality, if the URL p… |
CVE-2026-23644 | High | 7.5 | 2026-01-18 | esm.sh is a no-build content delivery network (CDN) for web development. Prior to Go pseeudoversion 0.0.0-20260116051925-c62ab83c589e, the software has a path… |
CVE-2026-1111 | Medium | 4.7 | 2026-01-18 | A vulnerability has been found in Sanluan PublicCMS up to 5.202506.d. This impacts the function Save of the file com/publiccms/controller/admin/sys/TaskTemplat… |
CVE-2025-13725 | Medium | 6.5 | 2026-01-17 | The Gutenberg Thim Blocks – Page Builder, Gutenberg Blocks for the Block Editor plugin for WordPress is vulnerable to arbitrary file reads in all versions up t… |
CVE-2025-12002 | Medium | 5.9 | 2026-01-17 | The Feeds for YouTube Pro plugin for WordPress is vulnerable to arbitrary file read in all versions up to, and including, 2.6.0 via the 'sby_check_wp_submit' A… |
CVE-2026-23745 | Medium | 6.1 | 2026-01-16 | node-tar is a Tar for Node.js. The node-tar library (<= 7.5.2) fails to sanitize the linkpath of Link (hardlink) and SymbolicLink entries when preservePaths is… |
CVE-2026-23535 | High | 8.0 | 2026-01-16 | wlc is a Weblate command-line client using Weblate's REST API. Prior to 1.17.2, the multi-translation download could write to an arbitrary location when instru… |
CVE-2025-68921 | High | 7.8 | 2026-01-16 | SteelSeries Nahimic 3 1.10.7 allows Directory traversal. |
CVE-2026-22876 | Medium | 6.5 | 2026-01-16 | Path Traversal vulnerability exists in multiple Network Cameras TRIFORA 3 series provided by TOA Corporation. If this vulnerability is exploited, arbitrary fil… |
CVE-2021-47795 | Medium | 6.2 | 2026-01-16 | GeoVision GeoWebServer 5.3.3 contains multiple vulnerabilities including local file inclusion, cross-site scripting, and remote code execution through improper… |
CVE-2026-22249 | High | 7.1 | 2026-01-15 | Docmost is an open-source collaborative wiki and documentation software. From 0.21.0 to before 0.24.0, Docmost is vulnerable to Arbitrary File Write via Zip Im… |
CVE-2025-66292 | High | 8.1 | 2026-01-15 | DPanel is an open source server management panel written in Go. Prior to 1.9.2, DPanel has an arbitrary file deletion vulnerability in the /api/common/attach/d… |
CVE-2025-67076 | High | 7.5 | 2026-01-15 | Directory traversal vulnerability in Omnispace Agora Project before 25.10 allowing unauthenticated attackers to read files on the system via the misc controlle… |
CVE-2021-47755 | High | 7.5 | 2026-01-15 | Oliver Library Server v5 contains a file download vulnerability that allows unauthenticated attackers to access arbitrary system files through unsanitized inpu… |
CVE-2025-67083 | Medium | 5.3 | 2026-01-15 | Directory traversal vulnerability in InvoicePlane through 1.6.3 allows unauthenticated attackers to read files from the server. The ability to read files and t… |
CVE-2025-9142 | High | 7.5 | 2026-01-14 | A local user can trigger Harmony SASE Windows client to write or delete files outside the intended certificate working directory. |
CVE-2025-15020 | Medium | 6.5 | 2026-01-14 | The Gotham Block Extra Light plugin for WordPress is vulnerable to Arbitrary File Read in all versions up to, and including, 1.5.0 via the 'ghostban' shortcod… |
CVE-2025-14301 | Critical | 9.8 | 2026-01-14 | The Integration Opvius AI for WooCommerce plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.3.0. This is due to the… |
CVE-2022-50939 | High | 7.2 | 2026-01-13 | e107 CMS version 3.2.1 contains a critical file upload vulnerability that allows authenticated administrators to override arbitrary server files through path t… |
CVE-2022-50932 | High | 7.5 | 2026-01-13 | Kyocera Command Center RX ECOSYS M2035dn contains a directory traversal vulnerability that allows unauthenticated attackers to read sensitive system files by m… |
CVE-2022-50890 | High | 7.5 | 2026-01-13 | Owlfiles File Manager 12.0.1 contains a path traversal vulnerability in its built-in HTTP server that allows attackers to access system directories. Attackers… |
CVE-2021-47751 | High | 7.5 | 2026-01-13 | CuteEditor for PHP (now referred to as Rich Text Editor) 6.6 contains a directory traversal vulnerability in the browse template feature that allows attackers… |
CVE-2021-47749 | Medium | 5.5 | 2026-01-13 | YouPHPTube <= 7.8 contains a local file inclusion vulnerability that allows unauthenticated attackers to access arbitrary files by manipulating the 'lang' para… |
CVE-2026-22871 | Critical | 9.8 | 2026-01-13 | GuardDog is a CLI tool to identify malicious PyPI packages. Prior to 2.7.1, there is a path traversal vulnerability exists in GuardDog's safe_extract() functio… |
CVE-2025-58693 | Medium | 6.5 | 2026-01-13 | An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiVoice 7.2.0 through 7.2.2, FortiVoice 7.0.0 th… |
CVE-2025-25652 | High | 7.5 | 2026-01-13 | In Eptura Archibus 2024.03.01.109, the "Run script" and "Server File" components of the "Database Update Wizard" are vulnerable to directory traversal. |
CVE-2025-9435 | Medium | 5.5 | 2026-01-13 | Zohocorp ManageEngine ADManager Plus versions below 7230 are vulnerable to Path Traversal in the User Management module |
CVE-2026-22786 | High | 7.2 | 2026-01-12 | Gin-vue-admin is a backstage management system based on vue and gin. Gin-vue-admin <= v2.8.7 has a path traversal vulnerability in the breakpoint resume upload… |
CVE-2025-68472 | High | 8.1 | 2026-01-12 | MindsDB is a platform for building artificial intelligence from enterprise data. Prior to version 25.11.1, an unauthenticated path traversal in the file upload… |
CVE-2025-66689 | Medium | 6.5 | 2026-01-12 | A path traversal vulnerability exists in Zen MCP Server before 9.8.2 that allows authenticated attackers to read arbitrary files on the system. The vulnerabili… |
CVE-2025-69267 | Medium | 6.5 | 2026-01-12 | Improper Limitation of a Pathname to a Restricted Directory (Path Traversal) vulnerability in Broadcom DX NetOps Spectrum on Windows, Linux allows Path Travers… |
CVE-2026-22685 | High | 8.8 | 2026-01-10 | DevToys is a desktop app for developers. In versions from 2.0.0.0 to before 2.0.9.0, a path traversal vulnerability exists in the DevToys extension installatio… |
CVE-2025-61686 | Critical | 9.1 | 2026-01-10 | React Router is a router for React. In @react-router/node versions 7.0.0 through 7.9.3, @remix-run/deno prior to version 2.17.2, and @remix-run/node prior to v… |
CVE-2025-67004 | Medium | 6.5 | 2026-01-09 | ** Disputed ** An Information Disclosure vulnerability in CouchCMS 2.4 allow an Admin user to read arbitrary files via traversing directories back after back… |
CVE-2025-66744 | High | 7.5 | 2026-01-09 | In Yonyou YonBIP v3 and before, the LoginWithV8 interface in the series data application service system is vulnerable to path traversal, allowing unauthorized… |
CVE-2025-66051 | Medium | 6.5 | 2026-01-09 | Vivotek IP7137 camera with firmware version 0200a is vulnerable to path traversal. It is possible for an authenticated attacker to access resources beyond webr… |
CVE-2025-69194 | High | 8.8 | 2026-01-09 | A security issue was discovered in GNU Wget2 when handling Metalink documents. The application fails to properly validate file paths provided in Metalink <file… |
CVE-2019-25295 | Medium | 6.5 | 2026-01-08 | The WP Cost Estimation plugin for WordPress is vulnerable to Upload Directory Traversal in versions before 9.660 via the uploadFormFiles function. This allows… |
CVE-2017-20212 | Medium | 6.2 | 2026-01-08 | FLIR Thermal Camera F/FC/PT/D firmware version 8.0.0.64 contains an information disclosure vulnerability that allows unauthenticated attackers to read arbitrar… |
CVE-2026-21857 | Medium | 6.5 | 2026-01-07 | REDAXO is a PHP-based content management system. Prior to version 5.20.2, authenticated users with backup permissions can read arbitrary files within the webro… |
CVE-2026-21851 | Medium | 5.3 | 2026-01-07 | MONAI (Medical Open Network for AI) is an AI toolkit for health care imaging. In versions up to and including 1.5.1, a Path Traversal (Zip Slip) vulnerability… |
CVE-2025-68705 | Critical | 9.8 | 2026-01-07 | RustFS is a distributed object storage system built in Rust. In versions 1.0.0-alpha.13 to 1.0.0-alpha.78, RustFS contains a path traversal vulnerability in th… |
CVE-2026-0669 | High | 7.5 | 2026-01-07 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Wikimedia Foundation MediaWiki - CSS extension allows Path Trav… |
CVE-2025-14867 | Medium | 6.5 | 2026-01-07 | The Flashcard plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 0.9 via the 'source' attribute of the 'flashcard' shor… |
CVE-2025-13801 | High | 7.5 | 2026-01-07 | The Yoco Payments plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 3.9.0 via the file parameter. This makes it possib… |
CVE-2020-36909 | Medium | 6.5 | 2026-01-06 | SnapGear Management Console SG560 3.1.5 contains a file manipulation vulnerability that allows authenticated users to read, write, and delete files using the e… |
CVE-2025-14997 | High | 8.8 | 2026-01-06 | The BuddyPress Xprofile Custom Field Types plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delet… |
CVE-2026-0604 | Medium | 6.5 | 2026-01-06 | The FastDup – Fastest WordPress Migration & Duplicator plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 2.7 via the '… |
CVE-2025-69226 | Medium | 5.3 | 2026-01-05 | AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Versions 3.13.2 and below enable an attacker to ascertain the existence of abso… |
CVE-2025-68953 | High | 7.5 | 2026-01-05 | Frappe is a full-stack web application framework. Versions 14.99.5 and below and 15.0.0 through 15.80.1 include requests that are vulnerable to path traversal… |
CVE-2025-68428 | High | 7.5 | 2026-01-05 | jsPDF is a library to generate PDFs in JavaScript. Prior to version 4.0.0, user control of the first argument of the loadFile method in the node.js build allow… |
CVE-2025-66518 | High | 8.8 | 2026-01-05 | Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.local.dir.allow.list and use local… |
CVE-2025-15449 | Medium | 5.4 | 2026-01-05 | A vulnerability was determined in cld378632668 JavaMall up to 994f1e2b019378ec9444cdf3fce2d5b5f72d28f0. Affected is the function delete of the file src/main/ja… |
CVE-2026-0571 | Medium | 4.3 | 2026-01-02 | A security flaw has been discovered in yeqifu warehouse up to aaf29962ba407d22d991781de28796ee7b4670e4. Affected by this issue is the function createResponseEn… |
CVE-2026-21440 | | 2026-01-02 | AdonisJS is a TypeScript-first web framework. A Path Traversal vulnerability in AdonisJS multipart file handling may allow a remote attacker to write arbitrary… |