CWE-22 · Path Traversal (page 21)
Page 21 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-67506 | Critical | 9.8 | 2025-12-10 | PipesHub is a fully extensible workplace AI platform for enterprise search and workflow automation. Versions prior to 0.1.0-beta expose POST /api/v1/record/buf… |
CVE-2025-61811 | Critical | 9.1 | 2025-12-10 | ColdFusion versions 2025.4, 2023.16, 2021.22 and earlier are affected by an Improper Access Control vulnerability that could result in arbitrary code execution… |
CVE-2025-66645 | High | 7.5 | 2025-12-09 | NiceGUI is a Python-based UI framework. Versions 3.3.1 and below are vulnerable to directory traversal through the App.add_media_files() function, which allow… |
CVE-2025-67488 | High | 7.8 | 2025-12-09 | SiYuan is self-hosted, open source personal knowledge management software. Versions 0.0.0-20251202123337-6ef83b42c7ce and below contain function importZipMd wh… |
CVE-2023-53772 | High | 7.5 | 2025-12-09 | MiniDVBLinux 5.4 contains an arbitrary file disclosure vulnerability that allows attackers to read sensitive system files through the 'file' GET parameter. Att… |
CVE-2021-47724 | Medium | 6.5 | 2025-12-09 | STVS ProVision 5.9.10 contains a path traversal vulnerability that allows authenticated attackers to access arbitrary files by manipulating the files parameter… |
CVE-2025-11531 | High | 8.8 | 2025-12-09 | HP System Event Utility and Omen Gaming Hub might allow execution of certain files outside of their restricted paths. This potential vulnerabil… |
CVE-2025-60024 | High | 8.8 | 2025-12-09 | Multiple Improper Limitations of a Pathname to a Restricted Directory ('Path Traversal') vulnerabilities [CWE-22] vulnerability in Fortinet FortiVoice 7.2.0 th… |
CVE-2025-65287 | Medium | 4.3 | 2025-12-09 | An unauthenticated directory traversal vulnerability in cgi-bin/upload.cgi in SNMP Web Pro 1.1 allows a remote attacker to read arbitrary files. The CGI concat… |
CVE-2025-14311 | | 2025-12-09 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in JMRI.This issue affects JMRI: before 5.13.3. | |
CVE-2025-14306 | Critical | 9.1 | 2025-12-09 | A directory traversal vulnerability exists in the CacheCleaner component of Robocode version 1.9.3.6. The recursivelyDelete method fails to properly sanitize f… |
CVE-2025-13661 | High | 7.1 | 2025-12-09 | Path traversal in Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote authenticated attacker to write arbitrary files outside of the intended… |
CVE-2025-13070 | Medium | 6.6 | 2025-12-09 | The CSV to SortTable WordPress plugin through 4.2 does not validate some shortcode attributes before using them to generate paths passed to include function/s… |
CVE-2025-14224 | Medium | 4.3 | 2025-12-08 | A vulnerability was found in Yottamaster DM2, DM3 and DM200 up to 1.2.23/1.9.12. Affected by this issue is some unknown functionality of the component File Upl… |
CVE-2025-14220 | Medium | 4.3 | 2025-12-08 | A security vulnerability has been detected in ORICO CD3510 1.9.12. This affects an unknown function of the component File Upload. The manipulation leads to pat… |
CVE-2025-14182 | Medium | 6.3 | 2025-12-07 | A vulnerability has been found in Sobey Media Convergence System 2.0/2.1. This vulnerability affects unknown code of the file /sobey-mchEditor/watermark/upload… |
CVE-2025-13377 | Critical | 9.6 | 2025-12-06 | The 10Web Booster – Website speed optimization, Cache & Page Speed optimizer plugin for WordPress is vulnerable to arbitrary folder deletion due to insufficien… |
CVE-2025-14111 | Medium | 5.0 | 2025-12-05 | A security vulnerability has been detected in Rarlab RAR App up to 7.11 Build 127 on Android. This affects an unknown part of the component com.rarlab.rar. Suc… |
CVE-2025-65879 | High | 8.1 | 2025-12-05 | Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability. The /goods/deleteGoods endpoint accepts a user-controlled good… |
CVE-2025-65878 | High | 7.5 | 2025-12-05 | The warehouse management system version 1.2 contains an arbitrary file read vulnerability. The endpoint `/file/showImageByPath` does not sanitize user-controll… |
CVE-2025-65897 | High | 8.8 | 2025-12-05 | zdh_web is a data collection, processing, monitoring, scheduling, and management platform. In zdh_web thru 5.6.17, insufficient validation of file upload paths… |
CVE-2025-64057 | High | 8.3 | 2025-12-05 | Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to store files in arbitrary locations and pot… |
CVE-2016-20023 | Medium | 5.0 | 2025-12-05 | In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided. |
CVE-2025-54160 | High | 7.8 | 2025-12-04 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in BeeDrive in Synology BeeDrive for desktop before 1.4.2-13960 al… |
CVE-2025-65346 | Critical | 9.1 | 2025-12-04 | alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The unzip/extraction functionality improperly allows archive contents to b… |
CVE-2025-54307 | High | 8.8 | 2025-12-04 | An issue was discovered in the Thermo Fisher Torrent Suite Django application 5.18.1. The /configure/plugins/plugin/upload/zip/ and /configure/newupdates/offli… |
CVE-2025-29846 | High | 7.2 | 2025-12-04 | A vulnerability in portenable cgi allows remote authenticated users to get the status of installed packages. |
CVE-2025-29845 | Medium | 4.3 | 2025-12-04 | A vulnerability in VideoPlayer2 subtitle cgi allows remote authenticated users to read .srt files. |
CVE-2025-29844 | Medium | 4.3 | 2025-12-04 | A vulnerability in FileStation file cgi allows remote authenticated users to read file metadata and path information. |
CVE-2025-29843 | Medium | 5.4 | 2025-12-04 | A vulnerability in FileStation thumb cgi allows remote authenticated users to read/write image files. |
CVE-2025-65345 | Medium | 6.5 | 2025-12-03 | alexusmai laravel-file-manager 3.3.1 and below is vulnerable to Directory Traversal. The zip/archiving functionality allows an attacker to create archives cont… |
CVE-2025-13645 | High | 7.2 | 2025-12-03 | The Modula Image Gallery plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'ajax_unzip_file' functi… |
CVE-2025-13876 | Medium | 5.3 | 2025-12-02 | A security vulnerability has been detected in Rareprob HD Video Player All Formats App 12.1.372 on Android. Impacted is an unknown function of the component co… |
CVE-2025-13875 | Medium | 6.3 | 2025-12-02 | A weakness has been identified in Yohann0617 oci-helper up to 3.2.4. This issue affects the function addCfg of the file src/main/java/com/yohann/ocihelper/serv… |
CVE-2025-13879 | Low | 2.7 | 2025-12-02 | Directory traversal vulnerability in SOLIDserver IPAM v8.2.3. This vulnerability allows an authenticated user with administrator privileges to list directories… |
CVE-2025-66410 | Critical | 9.1 | 2025-12-01 | Gin-vue-admin is a backstage management system based on vue and gin. In 2.8.6 and earlier, attackers can delete any file on the server at will, causing damage… |
CVE-2025-66302 | Medium | 6.8 | 2025-12-01 | Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A path traversal vulnerability has been identified in Grav CMS, allowing authenticated attackers wit… |
CVE-2025-66300 | High | 8.5 | 2025-12-01 | Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can read any server files using "Frontmatte… |
CVE-2025-66295 | High | 8.8 | 2025-12-01 | Grav is a file-based Web platform. Prior to 1.8.0-beta.27, when a user with privilege of user creation creates a new user through the Admin UI and supplies a u… |
CVE-2025-66206 | Medium | 6.8 | 2025-12-01 | Frappe is a full-stack web application framework. Prior to 15.86.0 and 14.99.2, certain requests were vulnerable to path traversal attacks, wherein some files… |
CVE-2025-65838 | High | 7.5 | 2025-12-01 | PublicCMS V5.202506.b is vulnerable to path traversal via the doUploadSitefile method. |
CVE-2025-63365 | High | 7.1 | 2025-12-01 | SoftSea EPUB File Reader 1.0.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the EPUB file processing component, specifically in the fun… |
CVE-2025-13816 | Medium | 6.3 | 2025-12-01 | A security vulnerability has been detected in moxi159753 Mogu Blog v2 up to 5.2. The impacted element is the function FileOperation.unzip of the file /networkD… |
CVE-2025-13810 | Medium | 5.3 | 2025-12-01 | A vulnerability was found in jsnjfz WebStack-Guns 1.0. This affects the function renderPicture of the file src/main/java/com/jsnjfz/manage/modular/system/contr… |
CVE-2025-13791 | Medium | 6.3 | 2025-11-30 | A vulnerability was identified in Scada-LTS up to 2.7.8.1. Affected is the function Common.getHomeDir of the file br/org/scadabr/vo/exporter/ZIPProjectManager… |
CVE-2025-12638 | High | 8.0 | 2025-11-28 | Keras version 3.11.3 is affected by a path traversal vulnerability in the keras.utils.get_file() function when extracting tar archives. The vulnerability arise… |
CVE-2025-59890 | High | 7.3 | 2025-11-27 | Improper input sanitization in the file archives upload functionality of Eaton Galileo software allows traversing paths which could lead into an attacker with… |
CVE-2025-66262 | Critical | 9.8 | 2025-11-26 | Arbitrary File Overwrite via Tar Extraction Path Traversal in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 100… |
CVE-2025-66251 | Critical | 9.1 | 2025-11-26 | Unauthenticated Path Traversal with Arbitrary File Deletion in DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter versions 30, 50, 100, 300, 500, 10… |
CVE-2025-65952 | | 2025-11-25 | Console is a network used to control Gorilla Tag mods' users and other users on the network. Prior to version 2.8.0, a path traversal vulnerability exists wher… | |
CVE-2025-34350 | | 2025-11-25 | UnForm Server versions < 10.1.15 contain an unauthenticated arbitrary file read and SMB coercion vulnerability in the Doc Flow feature’s 'arc' endpoint. The Do… | |
CVE-2025-59372 | | 2025-11-25 | A path traversal vulnerability has been identified in certain router models. A remote, authenticated attacker could exploit this vulnerability to write files o… | |
CVE-2025-59366 | | 2025-11-25 | An authentication-bypass vulnerability exists in AiCloud. This vulnerability can be triggered by an unintended side effect of the Samba functionality, potentia… | |
CVE-2025-12003 | | 2025-11-25 | A path traversal vulnerability has been identified in WebDAV, which may allow unauthenticated remote attackers to impact the integrity of the device. Refer to… | |
CVE-2025-54347 | Critical | 9.9 | 2025-11-24 | A Directory Traversal vulnerability was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows an attacker to writ… |
CVE-2025-60915 | High | 8.1 | 2025-11-24 | An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute Openatlas before v8.12.0 allows attackers to execute a path traversa… |
CVE-2025-12972 | Medium | 5.3 | 2025-11-24 | Fluent Bit out_file plugin does not properly sanitize tag values when deriving output file names. When the File option is omitted, the plugin uses untrusted ta… |
CVE-2025-31248 | Medium | 5.5 | 2025-11-21 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.3… |
CVE-2025-34320 | | 2025-11-20 | BASIS BBj versions prior to 25.00 contain a Jetty-served web endpoint that fails to properly validate or canonicalize input path segments. This allows unauthen… | |
CVE-2025-13435 | Medium | 5.6 | 2025-11-20 | A security vulnerability has been detected in Dreampie Resty up to 1.3.1.SNAPSHOT. This affects the function Request of the file /resty-httpclient/src/main/jav… |
CVE-2025-11001 | High | 7.8 | 2025-11-19 | 7-Zip ZIP File Parsing Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affecte… |
CVE-2025-63371 | High | 7.5 | 2025-11-19 | Milos Paripovic OneCommander 3.102.0.0 is vulnerable to Directory Traversal. The vulnerability resides in the ZIP file processing component, specifically in th… |
CVE-2025-65025 | High | 8.2 | 2025-11-19 | esm.sh is a nobuild content delivery network(CDN) for modern web development. Prior to version 136, the esm.sh CDN service is vulnerable to path traversal duri… |
CVE-2025-64765 | Medium | 5.3 | 2025-11-19 | Astro is a web framework. Prior to version 5.15.8, a mismatch exists between how Astro normalizes request paths for routing/rendering and how the application’s… |
CVE-2025-64757 | Low | 3.5 | 2025-11-19 | Astro is a web framework. Prior to version 5.14.3, a vulnerability has been identified in the Astro framework's development server that allows arbitrary local… |
CVE-2025-63408 | High | 7.8 | 2025-11-18 | Local Agent DVR versions thru 6.6.1.0 are vulnerable to directory traversal that allows an unauthenticated local attacker to gain access to sensitive informati… |
CVE-2025-41736 | High | 8.8 | 2025-11-18 | A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a… |
CVE-2025-40549 | Critical | 9.1 | 2025-11-18 | A Path Restriction Bypass vulnerability exists in Serv-U that when abused, could give a malicious actor with access to admin privileges the ability to execute… |
CVE-2025-63918 | Medium | 6.2 | 2025-11-17 | PDFPatcher executable does not validate user-supplied file paths, allowing directory traversal attacks allowing attackers to upload arbitrary files to arbitrar… |
CVE-2025-13266 | Medium | 5.3 | 2025-11-17 | A security vulnerability has been detected in wwwlike vlife up to 2.0.1. This issue affects the function create of the file vlife-base/src/main/java/cn/wwwlike… |
CVE-2025-13265 | Medium | 6.3 | 2025-11-17 | A weakness has been identified in lsfusion platform up to 6.1. This vulnerability affects the function unpackFile of the file server/src/main/java/lsfusion/ser… |
CVE-2025-13262 | High | 7.3 | 2025-11-17 | A vulnerability was determined in lsfusion platform up to 6.1. Affected by this vulnerability is the function UploadFileRequestHandler of the file platform/web… |
CVE-2025-13261 | Medium | 5.3 | 2025-11-17 | A vulnerability was found in lsfusion platform up to 6.1. Affected is the function DownloadFileRequestHandler of the file web-client/src/main/java/lsfusion/htt… |
CVE-2025-13246 | Medium | 6.3 | 2025-11-16 | A vulnerability was identified in shsuishang ShopSuite ModulithShop up to 45a99398cec3b7ad7ff9383694f0b53339f2d35a. Impacted is the function JwtAuthenticationF… |
CVE-2025-11990 | Low | 3.1 | 2025-11-15 | GitLab has remediated an issue in GitLab EE affecting all versions from 18.4 before 18.4.4, and 18.5 before 18.5.2 that could have allowed an authenticated use… |
CVE-2025-63680 | High | 8.6 | 2025-11-14 | Nero BackItUp in the Nero Productline is vulnerable to a path parsing/UI rendering flaw (CWE-22) that, in combination with Windows ShellExecuteW fallback exten… |
CVE-2025-54559 | Low | 3.7 | 2025-11-14 | An issue was found in the Application Server of Desktop Alert PingAlert version 6.1.0.11 to 6.1.1.2 which allows remote Path Traversal for loading arbitrary ex… |
CVE-2025-36236 | High | 8.2 | 2025-11-13 | IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a remote attacker to traverse directorie… |
CVE-2025-12089 | Medium | 6.5 | 2025-11-13 | The Data Tables Generator by Supsystic plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the cleanCache… |
CVE-2023-7327 | | 2025-11-12 | Ozeki SMS Gateway versions up to and including 10.3.208 contain a path traversal vulnerability. Successful exploitation allows an unauthenticated attacker to u… | |
CVE-2022-4982 | | 2025-11-12 | DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The device's web server exposes handlers (`fr… | |
CVE-2021-4463 | | 2025-11-12 | Longjing Technology BEMS API versions up to and including 1.21 contains an unauthenticated arbitrary file download vulnerability in the 'downloads' endpoint. T… | |
CVE-2016-15055 | | 2025-11-12 | JVC VN-T IP-camera models firmware versions up to 2016-08-22 (confirmed on the VN-T216VPRU model) contain a directory traversal vulnerability in the checkcgi e… | |
CVE-2025-11366 | Critical | 9.8 | 2025-11-12 | N-central < 2025.4 is vulnerable to authentication bypass via path traversal |
CVE-2025-11565 | | 2025-11-12 | CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause elevated system access when a Web… | |
CVE-2025-12382 | High | 8.8 | 2025-11-12 | Improper Limitation of a Pathname 'Path Traversal') vulnerability in Algosec Firewall Analyzer on Linux, 64 bit allows an authenticated user to upload files to… |
CVE-2025-62449 | Medium | 6.8 | 2025-11-11 | Improper limitation of a pathname to a restricted directory ('path traversal') in Visual Studio Code CoPilot Chat Extension allows an authorized attacker to by… |
CVE-2025-60722 | Medium | 6.5 | 2025-11-11 | Improper limitation of a pathname to a restricted directory ('path traversal') in OneDrive for Android allows an authorized attacker to elevate privileges over… |
CVE-2025-11696 | | 2025-11-11 | A local server-side request forgery (SSRF) security issue exists within Studio 5000® Simulation Interface™ via the API. This vulnerability allows any Windows u… | |
CVE-2025-42919 | Medium | 5.3 | 2025-11-11 | Due to an Information Disclosure vulnerability in SAP NetWeaver Application Server Java, internal metadata files could be accessed via manipulated URLs. An una… |
CVE-2025-42894 | Medium | 6.8 | 2025-11-11 | Due to a Path Traversal vulnerability in SAP Business Connector, an attacker authenticated as an administrator with adjacent access could read, write, overwrit… |
CVE-2018-25124 | | 2025-11-10 | PacsOne Server version 6.6.2 (prior versions are likely affected) contains a directory traversal vulnerability within the web-based DICOM viewer component. Suc… | |
CVE-2025-12923 | Low | 2.7 | 2025-11-10 | A vulnerability was determined in liweiyi ChestnutCMS up to 1.5.8. This vulnerability affects the function resourceDownload of the file /dev-api/common/downloa… |
CVE-2025-12922 | Medium | 6.3 | 2025-11-10 | A vulnerability was found in OpenClinica Community Edition up to 3.12.2/3.13. This affects an unknown part of the file /ImportCRFData?action=confirm of the com… |
CVE-2025-12092 | Medium | 6.5 | 2025-11-08 | The CYAN Backup plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the 'delete' functionality in all ver… |
CVE-2025-12000 | Medium | 6.5 | 2025-11-08 | The WPFunnels plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in the wpfnl_delete_log() function in all… |
CVE-2025-64485 | | 2025-11-08 | CVAT is an open source interactive video and image annotation tool for computer vision. In versions 2.4.0 through 2.48.1, a malicious CVAT user with at least t… | |
CVE-2025-64433 | Medium | 6.5 | 2025-11-07 | KubeVirt is a virtual machine management add-on for Kubernetes. Prior to 1.5.3 and 1.6.1, a vulnerability was discovered that allows a VM to read arbitrary fil… |
CVE-2025-60574 | High | 7.5 | 2025-11-07 | A Local File Inclusion (LFI) vulnerability has been identified in tQuadra CMS 4.2.1117. The issue exists in the "/styles/" path, which fails to properly saniti… |
CVE-2025-7719 | | 2025-11-07 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in GE Vernova Smallworld on Windows, Linux allows File Manipulatio… |