CWE-22 · Path Traversal (page 53)
Page 53 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-2139 | Medium | 6.5 | 2022-07-22 | The affected product is vulnerable to directory traversal, which may allow an attacker to access unauthorized files and execute arbitrary code. |
CVE-2022-31163 | High | 7.5 | 2022-07-22 | TZInfo is a Ruby library that provides access to time zone data and allows times to be converted using time zone rules. Versions prior to 0.36.1, as well as th… |
CVE-2022-31475 | Medium | 5.5 | 2022-07-21 | Authenticated (custom plugin role) Arbitrary File Read via Export function vulnerability in GiveWP's GiveWP plugin <= 2.20.2 at WordPress. |
CVE-2022-0902 | High | 8.1 | 2022-07-21 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Improper Neutralization of Special Elements used in a Command ('Command Injecti… |
CVE-2022-29834 | High | 7.5 | 2022-07-20 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Mitsubishi Electric GENESIS64 versions 10.97 to 10.97.1, Mitsub… |
CVE-2022-1264 | Medium | 6.8 | 2022-07-20 | The affected product may allow an attacker with access to the Ignition web configuration to run arbitrary code. |
CVE-2022-24659 | High | 7.5 | 2022-07-20 | Goldshell ASIC Miners v2.2.1 and below was discovered to contain a path traversal vulnerability which allows unauthenticated attackers to retrieve arbitrary fi… |
CVE-2022-30302 | Medium | 6.5 | 2022-07-19 | Multiple relative path traversal vulnerabilities [CWE-23] in FortiDeceptor management interface 1.0.0 through 3.2.x, 3.3.0 through 3.3.2, 4.0.0 through 4.0.1 m… |
CVE-2022-30301 | High | 7.8 | 2022-07-19 | A path traversal vulnerability [CWE-22] in FortiAP-U CLI 6.2.0 through 6.2.3, 6.0.0 through 6.0.4, 5.4.0 through 5.4.6 may allow an admin user to delete and ac… |
CVE-2022-2030 | Medium | 6.5 | 2022-07-19 | A directory traversal vulnerability caused by specific character sequences within an improperly sanitized URL was identified in some CGI programs of Zyxel USG… |
CVE-2021-41031 | High | 7.8 | 2022-07-18 | A relative path traversal vulnerability [CWE-23] in FortiClient for Windows versions 7.0.2 and prior, 6.4.6 and prior and 6.2.9 and below may allow a local unp… |
CVE-2022-31202 | Medium | 6.5 | 2022-07-17 | The export function in SoftGuard Web (SGW) before 5.1.5 allows directory traversal to read an arbitrary local file via export or man.tcl. |
CVE-2022-35861 | High | 7.8 | 2022-07-17 | pyenv 1.2.24 through 2.3.2 allows local users to gain privileges via a .python-version file in the current working directory. An attacker can craft a Python ve… |
CVE-2022-31159 | High | 7.9 | 2022-07-15 | The AWS SDK for Java enables Java developers to work with Amazon Web Services. A partial-path traversal issue exists within the `downloadDirectory` method in t… |
CVE-2022-32409 | Critical | 9.8 | 2022-07-14 | A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3geo v7.0.5 allows attackers to execute ar… |
CVE-2022-34762 | Medium | 5.9 | 2022-07-13 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could cause unauthorized firmware image load… |
CVE-2022-20220 | High | 7.8 | 2022-07-13 | In openFile of CallLogProvider.java, there is a possible permission bypass due to a path traversal error. This could lead to local escalation of privilege with… |
CVE-2022-33690 | Medium | 4.0 | 2022-07-12 | Improper input validation in Contacts Storage prior to SMR Jul-2022 Release 1 allows attacker to access arbitrary file. |
CVE-2022-31588 | Critical | 9.3 | 2022-07-11 | The zippies/testplatform repository through 2016-07-19 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31587 | Critical | 9.3 | 2022-07-11 | The yuriyouzhou/KG-fashion-chatbot repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31586 | Critical | 9.3 | 2022-07-11 | The unizar-30226-2019-06/ChangePop-Back repository through 2019-06-04 on GitHub allows absolute path traversal because the Flask send_file function is used uns… |
CVE-2022-31585 | Critical | 9.3 | 2022-07-11 | The umeshpatil-dev/Home__internet repository through 2020-08-28 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31584 | Critical | 9.3 | 2022-07-11 | The stonethree/s3label repository through 2019-08-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31583 | Critical | 9.3 | 2022-07-11 | The sravaniboinepelli/AutomatedQuizEval repository through 2020-04-27 on GitHub allows absolute path traversal because the Flask send_file function is used uns… |
CVE-2022-31582 | Critical | 9.3 | 2022-07-11 | The shaolo1/VideoServer repository through 2019-09-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31581 | Critical | 9.3 | 2022-07-11 | The scorelab/OpenMF repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31580 | Critical | 9.3 | 2022-07-11 | The sanojtharindu/caretakerr-api repository through 2021-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31579 | Critical | 9.3 | 2022-07-11 | The ralphjzhang/iasset repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31578 | High | 7.5 | 2022-07-11 | The piaoyunsoft/bt_lnmp repository through 2019-10-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31577 | Critical | 9.3 | 2022-07-11 | The longmaoteamtf/audio_aligner_app repository through 2020-01-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafel… |
CVE-2022-31576 | Critical | 9.3 | 2022-07-11 | The heidi-luong1109/shackerpanel repository through 2021-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31575 | Critical | 9.3 | 2022-07-11 | The duducosmos/livro_python repository through 2018-06-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31574 | Critical | 9.3 | 2022-07-11 | The deepaliupadhyay/RealEstate repository through 2018-11-30 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31573 | Critical | 9.3 | 2022-07-11 | The chainer/chainerrl-visualizer repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31572 | Critical | 9.3 | 2022-07-11 | The ceee-vip/cockybook repository through 2015-04-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31571 | Critical | 9.3 | 2022-07-11 | The akashtalole/python-flask-restful-api repository through 2019-09-16 on GitHub allows absolute path traversal because the Flask send_file function is used un… |
CVE-2022-31570 | Critical | 9.8 | 2022-07-11 | The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsa… |
CVE-2022-31568 | Critical | 9.3 | 2022-07-11 | The Rexians/rex-web repository through 2022-06-05 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31567 | Critical | 9.3 | 2022-07-11 | The DSABenchmark/DSAB repository through 2.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31566 | High | 8.6 | 2022-07-11 | The DSAB-local/DSAB repository through 2019-02-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31565 | Critical | 9.3 | 2022-07-11 | The yogson/syrabond repository through 2020-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31564 | Critical | 9.3 | 2022-07-11 | The woduq1414/munhak-moa repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31563 | Critical | 9.3 | 2022-07-11 | The whmacmac/vprj repository through 2022-04-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31562 | Critical | 9.3 | 2022-07-11 | The waveyan/internshipsystem repository through 2018-05-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31561 | Critical | 9.3 | 2022-07-11 | The varijkapil13/Sphere_ImageBackend repository through 2019-10-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafe… |
CVE-2022-31560 | Critical | 9.3 | 2022-07-11 | The uncleYiba/photo_tag repository through 2020-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31559 | Critical | 9.3 | 2022-07-11 | The tsileo/flask-yeoman repository through 2013-09-13 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31558 | Critical | 9.3 | 2022-07-11 | The tooxie/shiva-server repository through 0.10.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31557 | Critical | 9.3 | 2022-07-11 | The seveas/golem repository through 2016-05-17 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31556 | Critical | 9.3 | 2022-07-11 | The rusyasoft/TrainEnergyServer repository through 2017-08-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31555 | Critical | 9.3 | 2022-07-11 | The romain20100/nursequest repository through 2018-02-22 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31554 | Critical | 9.3 | 2022-07-11 | The rohitnayak/movie-review-sentiment-analysis repository through 2017-05-07 on GitHub allows absolute path traversal because the Flask send_file function is u… |
CVE-2022-31553 | Critical | 9.3 | 2022-07-11 | The rainsoupah/sleep-learner repository through 2021-02-21 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31552 | Critical | 9.3 | 2022-07-11 | The project-anuvaad/anuvaad-corpus repository through 2020-11-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31551 | Critical | 9.3 | 2022-07-11 | The pleomax00/flask-mongo-skel repository through 2012-11-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31550 | Critical | 9.3 | 2022-07-11 | The olmax99/pyathenastack repository through 2019-11-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31549 | Critical | 9.3 | 2022-07-11 | The olmax99/helm-flask-celery repository before 2022-05-25 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31548 | Critical | 9.3 | 2022-07-11 | The nrlakin/homepage repository through 2017-03-06 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31547 | Critical | 9.3 | 2022-07-11 | The noamezekiel/sphere repository through 2020-05-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31546 | Critical | 9.3 | 2022-07-11 | The nlpweb/glance repository through 2014-06-27 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31545 | Critical | 9.3 | 2022-07-11 | The ml-inory/ModelConverter repository through 2021-04-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31544 | Critical | 9.3 | 2022-07-11 | The meerstein/rbtm repository through 1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31543 | Critical | 9.3 | 2022-07-11 | The maxtortime/SetupBox repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31542 | Critical | 9.3 | 2022-07-11 | The mandoku/mdweb repository through 2015-05-07 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31541 | Critical | 9.3 | 2022-07-11 | The lyubolp/Barry-Voice-Assistant repository through 2021-01-18 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31540 | Critical | 9.3 | 2022-07-11 | The kumardeepak/hin-eng-preprocessing repository through 2019-07-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsaf… |
CVE-2022-31539 | Critical | 9.3 | 2022-07-11 | The kotekan/kotekan repository through 2021.11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31538 | Critical | 9.3 | 2022-07-11 | The joaopedro-fg/mp-m08-interface repository through 2020-12-10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31537 | Critical | 9.3 | 2022-07-11 | The jmcginty15/Solar-system-simulator repository through 2021-07-26 on GitHub allows absolute path traversal because the Flask send_file function is used unsaf… |
CVE-2022-31536 | Critical | 9.3 | 2022-07-11 | The jaygarza1982/ytdl-sync repository through 2021-01-02 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31535 | Critical | 9.3 | 2022-07-11 | The freefood89/Fishtank repository through 2015-06-24 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31534 | Critical | 9.3 | 2022-07-11 | The echoleegroup/PythonWeb repository through 2018-10-31 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31533 | Critical | 9.3 | 2022-07-11 | The decentraminds/umbral repository through 2020-01-15 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31532 | Critical | 9.3 | 2022-07-11 | The dankolbman/travel_blahg repository through 2016-01-16 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31531 | Critical | 9.3 | 2022-07-11 | The dainst/cilantro repository through 0.0.4 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31530 | Critical | 9.3 | 2022-07-11 | The csm-aut/csm repository through 3.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31529 | Critical | 9.3 | 2022-07-11 | The cinemaproject/monorepo repository through 2021-03-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31528 | Critical | 9.3 | 2022-07-11 | The bonn-activity-maps/bam_annotation_tool repository through 2021-08-31 on GitHub allows absolute path traversal because the Flask send_file function is used… |
CVE-2022-31527 | Critical | 9.3 | 2022-07-11 | The Wildog/flask-file-server repository through 2020-02-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31526 | Critical | 9.3 | 2022-07-11 | The ThundeRatz/ThunderDocs repository through 2020-05-01 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31525 | Critical | 9.3 | 2022-07-11 | The SummaLabs/DLS repository through 0.1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31524 | Critical | 9.3 | 2022-07-11 | The PureStorage-OpenConnect/swagger repository through 1.1.5 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31523 | Critical | 9.3 | 2022-07-11 | The PaddlePaddle/Anakin repository through 0.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31522 | Critical | 9.3 | 2022-07-11 | The NotVinay/karaokey repository through 2019-12-11 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31521 | Critical | 9.3 | 2022-07-11 | The Niyaz-Mohamed/mosaic repository through 1.0.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31520 | Critical | 9.3 | 2022-07-11 | The Luxas98/logstash-management-api repository through 2020-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafel… |
CVE-2022-31519 | Critical | 9.3 | 2022-07-11 | The Lukasavicus/WindMill repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31518 | Critical | 9.3 | 2022-07-11 | The JustAnotherSoftwareDeveloper/Python-Recipe-Database repository through 2021-03-31 on GitHub allows absolute path traversal because the Flask send_file func… |
CVE-2022-31517 | Critical | 9.3 | 2022-07-11 | The HolgerGraef/MSM repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31516 | Critical | 9.3 | 2022-07-11 | The Harveyzyh/Python repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31515 | Critical | 9.3 | 2022-07-11 | The Delor4/CarceresBE repository through 1.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31514 | Critical | 9.3 | 2022-07-11 | The Caoyongqi912/Fan_Platform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31513 | Critical | 9.3 | 2022-07-11 | The BolunHan/Krypton repository through 2021-06-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31512 | Critical | 9.3 | 2022-07-11 | The Atom02/flask-mvc repository through 2020-09-14 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31511 | Critical | 9.3 | 2022-07-11 | The AFDudley/equanimity repository through 2014-04-23 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31510 | Critical | 9.3 | 2022-07-11 | The sergeKashkin/Simple-RAT repository before 2022-05-03 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31509 | Critical | 9.3 | 2022-07-11 | The iedadata/usap-dc-website repository through 1.0.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31508 | Critical | 9.3 | 2022-07-11 | The idayrus/evoting repository before 2022-05-08 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31507 | Critical | 9.3 | 2022-07-11 | The ganga-devs/ganga repository before 8.5.10 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31506 | Critical | 9.3 | 2022-07-11 | The cmusatyalab/opendiamond repository through 10.1.1 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |