CWE-22 · Path Traversal (page 54)
Page 54 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-31505 | Critical | 9.3 | 2022-07-11 | The cheo0/MercadoEnLineaBack repository through 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31504 | Critical | 9.3 | 2022-07-11 | The ChangeWeDer/BaiduWenkuSpider_flaskWeb repository before 2021-11-29 on GitHub allows absolute path traversal because the Flask send_file function is used un… |
CVE-2022-31503 | Critical | 9.3 | 2022-07-11 | The orchest/orchest repository before 2022.05.0 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31502 | Critical | 9.3 | 2022-07-11 | The operatorequals/wormnest repository through 0.4.7 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-31501 | Critical | 9.3 | 2022-07-11 | The ChaoticOnyx/OnyxForum repository before 2022-05-04 on GitHub allows absolute path traversal because the Flask send_file function is used unsafely. |
CVE-2022-35410 | High | 7.5 | 2022-07-08 | mat2 (aka metadata anonymisation toolkit) before 0.13.0 allows ../ directory traversal during the ZIP archive cleaning process. This primarily affects mat2 web… |
CVE-2022-25046 | Critical | 9.8 | 2022-07-07 | A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted POST request. |
CVE-2022-20862 | Medium | 4.3 | 2022-07-06 | A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Man… |
CVE-2022-20812 | Critical | 9.0 | 2022-07-06 | Multiple vulnerabilities in the API and in the web-based management interface of Cisco Expressway Series and Cisco TelePresence Video Communication Server (VCS… |
CVE-2022-20791 | Medium | 6.5 | 2022-07-06 | A vulnerability in the database user privileges of Cisco Unified Communications Manager (Unified CM), Cisco Unified Communications Manager Session Management E… |
CVE-2022-31836 | Critical | 9.8 | 2022-07-05 | The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to cross directory risk. |
CVE-2022-32551 | High | 7.5 | 2022-07-02 | Zoho ManageEngine ServiceDesk Plus MSP before 10604 allows path traversal (to WEBINF/web.xml from sample/WEB-INF/web.xml or sample/META-INF/web.xml). |
CVE-2022-28127 | Critical | 9.1 | 2022-06-30 | A data removal vulnerability exists in the web_server /action/remove/ API functionality of Robustel R1510 3.3.0. A specially-crafted network request can lead t… |
CVE-2017-20105 | Medium | 5.4 | 2022-06-28 | A vulnerability was found in Simplessus 3.7.7. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument path… |
CVE-2022-33116 | Medium | 6.5 | 2022-06-27 | An issue in the jmpath variable in /modules/mindmap/index.php of GUnet Open eClass Platform (aka openeclass) v3.12.4 and below allows attackers to read arbitra… |
CVE-2022-2106 | Low | 3.8 | 2022-06-27 | Elcomplus SmartICS v2.3.4.0 does not validate the filenames sufficiently, which enables authenticated administrator-level users to perform path traversal attac… |
CVE-2017-20102 | Medium | 4.4 | 2022-06-27 | A vulnerability was found in Album Lock 4.0 and classified as critical. Affected by this issue is some unknown functionality of the file /getImage. The manipul… |
CVE-2022-1953 | Critical | 9.1 | 2022-06-27 | The Product Configurator for WooCommerce WordPress plugin before 1.2.32 suffers from an arbitrary file deletion vulnerability via an AJAX action, accessible to… |
CVE-2022-29097 | Medium | 4.9 | 2022-06-24 | Dell WMS 3.6.1 and below contains a Path Traversal vulnerability in Device API. A remote attacker could potentially exploit this vulnerability, to gain unautho… |
CVE-2022-30117 | Critical | 9.1 | 2022-06-24 | Concrete 8.5.7 and below as well as Concrete 9.0 through 9.0.2 allow traversal in /index.php/ccm/system/file/upload which could result in an Arbitrary File Del… |
CVE-2022-2120 | High | 7.5 | 2022-06-24 | OFFIS DCMTK's (All versions prior to 3.6.7) service class user (SCU) is vulnerable to relative path traversal, allowing an attacker to write DICOM files into a… |
CVE-2022-2119 | High | 7.5 | 2022-06-24 | OFFIS DCMTK's (All versions prior to 3.6.7) service class provider (SCP) is vulnerable to path traversal, allowing an attacker to write DICOM files into arbitr… |
CVE-2022-1518 | Critical | 10.0 | 2022-06-24 | LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directory structure. |
CVE-2013-1891 | Medium | 6.5 | 2022-06-24 | In OpenCart 1.4.7 to 1.5.5.1, implemented anti-traversal code in filemanager.php is ineffective and can be bypassed. |
CVE-2021-41636 | Medium | 6.5 | 2022-06-24 | MELAG FTP Server 2.2.0.4 allows an attacker to use the CWD command to break out of the FTP servers root directory and operate on the entire operating system, w… |
CVE-2022-34179 | High | 7.5 | 2022-06-23 | Jenkins Embeddable Build Status Plugin 2.0.3 and earlier allows specifying a `style` query parameter that is used to choose a different SVG image style without… |
CVE-2022-34177 | High | 7.5 | 2022-06-23 | Jenkins Pipeline: Input Step Plugin 448.v37cea_9a_10a_70 and earlier archives files uploaded for `file` parameters for Pipeline `input` steps on the controller… |
CVE-2022-31395 | High | 8.8 | 2022-06-23 | Algo Communication Products Ltd. 8373 IP Zone Paging Adapter Firmware 1.7.6 allows attackers to perform a directory traversal via a web request sent to /fm-dat… |
CVE-2022-33995 | High | 7.5 | 2022-06-21 | A path traversal issue in entry attachments in Devolutions Remote Desktop Manager before 2022.2 allows attackers to create or overwrite files in an arbitrary l… |
CVE-2022-29774 | Critical | 9.8 | 2022-06-21 | iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal. |
CVE-2022-31062 | Medium | 5.3 | 2022-06-20 | ### Impact A plugin public script can be used to read content of system files. ### Patches Upgrade to version 1.0.2. ### Workarounds `b/deploy/index.php` file… |
CVE-2022-25856 | High | 7.5 | 2022-06-17 | The package github.com/argoproj/argo-events/sensors/artifacts before 1.7.1 are vulnerable to Directory Traversal in the (g *GitArtifactReader).Read() API in gi… |
CVE-2022-31372 | High | 7.5 | 2022-06-16 | Wiris Mathtype v7.28.0 was discovered to contain a path traversal vulnerability in the resourceFile parameter. This vulnerability is exploited via a crafted re… |
CVE-2021-33036 | High | 8.8 | 2022-06-15 | In Apache Hadoop 2.2.0 to 2.10.1, 3.0.0-alpha1 to 3.1.4, 3.2.0 to 3.2.2, and 3.3.0 to 3.3.1, a user who can escalate to yarn user can possibly run arbitrary co… |
CVE-2022-32328 | Critical | 9.1 | 2022-06-14 | Fast Food Ordering System v1.0 is vulnerable to Delete any file. via /ffos/classes/Master.php?f=delete_img. |
CVE-2022-29509 | High | 7.5 | 2022-06-14 | Directory traversal vulnerability in T&D Data Server (Japanese Edition) Ver.2.22 and earlier, T&D Data Server (English Edition) Ver.2.30 and earlier, THERMO RE… |
CVE-2022-1657 | High | 8.8 | 2022-06-13 | Vulnerable versions of the Jupiter (<= 6.10.1) and JupiterX (<= 2.0.6) Themes allow logged-in users, including subscriber-level users, to perform Path Traversa… |
CVE-2022-26041 | Medium | 6.5 | 2022-06-13 | Directory traversal vulnerability in RCCMD 4.26 and earlier allows a remote authenticated attacker with an administrative privilege to read or alter an arbitra… |
CVE-2022-29094 | High | 7.1 | 2022-06-10 | Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an… |
CVE-2022-29093 | High | 7.1 | 2022-06-10 | Dell SupportAssist Client Consumer versions (3.10.4 and versions prior) and Dell SupportAssist Client Commercial versions (3.1.1 and versions prior) contain an… |
CVE-2022-24278 | High | 7.5 | 2022-06-10 | The package convert-svg-core before 0.6.4 are vulnerable to Directory Traversal due to improper sanitization of SVG tags. Exploiting this vulnerability is poss… |
CVE-2021-42811 | Low | 3.3 | 2022-06-10 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in SafeNet KeySecure allows an authenticated user to read arbitrar… |
CVE-2022-1993 | High | 8.1 | 2022-06-09 | Path Traversal in GitHub repository gogs/gogs prior to 0.12.9. |
CVE-2022-1992 | Critical | 9.1 | 2022-06-09 | Path Traversal in GitHub repository gogs/gogs prior to 0.12.9. |
CVE-2021-40668 | High | 8.1 | 2022-06-09 | The Android application HTTP File Server (Version 1.4.1) by 'slowscript' is affected by a path traversal vulnerability that permits arbitrary directory listing… |
CVE-2022-24840 | Critical | 9.1 | 2022-06-09 | django-s3file is a lightweight file upload input for Django and Amazon S3 . In versions prior to 5.5.1 it was possible to traverse the entire AWS S3 bucket and… |
CVE-2022-0779 | Medium | 6.5 | 2022-06-08 | The User Meta WordPress plugin before 2.4.4 does not validate the filepath parameter of its um_show_uploaded_file AJAX action, which could allow low privileged… |
CVE-2022-28478 | Medium | 6.5 | 2022-06-06 | SeedDMS 6.0.17 and 5.1.24 are vulnerable to Directory Traversal. The "Remove file" functionality inside the "Log files management" menu does not sanitize user… |
CVE-2022-32275 | High | 7.5 | 2022-06-06 | Grafana 8.4.3 allows reading files via (for example) a /dashboard/snapshot/%7B%7Bconstructor.constructor'/.. /.. /.. /.. /.. /.. /.. /.. /etc/passwd URI. NOTE… |
CVE-2022-31483 | Critical | 9.1 | 2022-06-06 | An authenticated attacker can upload a file with a filename including “..” and “/” to achieve the ability to upload the desired file anywhere on the filesystem… |
CVE-2022-32270 | Critical | 9.8 | 2022-06-03 | In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Traversal, leading to Remote Code Execution… |
CVE-2022-29597 | Medium | 6.5 | 2022-06-02 | Solutions Atlantic Regulatory Reporting System (RRS) v500 is vulnerable to Local File Inclusion (LFI). Any authenticated user has the ability to reference inte… |
CVE-2022-30804 | Medium | 6.5 | 2022-06-02 | elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=. |
CVE-2022-28945 | Critical | 9.8 | 2022-06-02 | An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file. |
CVE-2022-1661 | High | 7.5 | 2022-06-02 | The affected products are vulnerable to directory traversal, which may allow an attacker to obtain arbitrary operating system files. |
CVE-2022-23082 | High | 7.5 | 2022-05-31 | In CureKit versions v1.0.1 through v1.1.3 are vulnerable to path traversal as the function isFileOutsideDir fails to sanitize the user input which may lead to… |
CVE-2022-30508 | Medium | 6.5 | 2022-05-26 | DedeCMS v5.7.93 was discovered to contain arbitrary file deletion vulnerability in upload.php via the delete parameter. |
CVE-2022-1664 | Critical | 9.8 | 2022-05-26 | Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is prone to a directory traversal vulnerab… |
CVE-2022-29253 | Low | 2.7 | 2022-05-25 | XWiki Platform is a generic wiki platform offering runtime services for applications built on top of it. Starting with version 8.3-rc-1 and prior to versions 1… |
CVE-2022-30427 | High | 7.5 | 2022-05-25 | In ginadmin through 05-10-2022 the incoming path value is not filtered, resulting in directory traversal. |
CVE-2022-30321 | High | 8.6 | 2022-05-25 | go-getter up to 1.5.11 and 2.0.2 allowed arbitrary host access via go-getter path traversal, symlink processing, and command injection flaws. Fixed in 1.6.1 an… |
CVE-2021-32964 | Medium | 6.5 | 2022-05-24 | The AGG Software Web Server version 4.0.40.1014 and prior is vulnerable to a path traversal attack, which may allow an attacker to read arbitrary files from th… |
CVE-2022-1850 | High | 8.1 | 2022-05-24 | Path Traversal in GitHub repository filegator/filegator prior to 7.8.0. |
CVE-2022-31268 | High | 7.5 | 2022-05-21 | A Path Traversal vulnerability in Gitblit 1.9.3 can lead to reading website files via /resources//../ (e.g., followed by a WEB-INF or META-INF pathname). |
CVE-2022-1359 | Medium | 5.7 | 2022-05-17 | The affected On-Premise cnMaestro is vulnerable to an arbitrary file-write through improper limitation of a pathname to a restricted directory inside a specifi… |
CVE-2022-29332 | Medium | 6.5 | 2022-05-17 | D-LINK DIR-825 AC1200 R2 is vulnerable to Directory Traversal. An attacker could use the "../../../../" setting of the FTP server folder to set the router's ro… |
CVE-2021-42643 | High | 8.8 | 2022-05-17 | cmseasy V7.7.5_20211012 is affected by an arbitrary file write vulnerability. Through this vulnerability, a PHP script file is written to the website server, a… |
CVE-2022-1721 | High | 7.5 | 2022-05-16 | Path Traversal in WellKnownServlet in GitHub repository jgraph/drawio prior to 18.0.5. Read local files of the web application. |
CVE-2022-1560 | Medium | 6.5 | 2022-05-16 | The Amministrazione Aperta WordPress plugin before 3.8 does not validate the open parameter before using it in an include statement, leading to a Local File In… |
CVE-2022-24830 | Medium | 6.5 | 2022-05-14 | OpenClinica is an open source software for Electronic Data Capture (EDC) and Clinical Data Management (CDM). OpenClinica prior to version 3.16 is vulnerable to… |
CVE-2021-33005 | High | 7.5 | 2022-05-13 | mySCADA myPRO versions prior to 8.20.0 allows an unauthenticated remote attacker to upload arbitrary files to arbitrary directories. |
CVE-2022-25591 | Critical | 9.1 | 2022-05-13 | BlogEngine.NET v3.3.8.0 was discovered to contain an arbitrary file deletion vulnerability which allows attackers to delete files within the web server root di… |
CVE-2021-27771 | High | 8.2 | 2022-05-12 | User SID can be modified resulting in an Arbitrary File Upload or deletion of directories causing a Denial of Service. When interacting in a normal matter with… |
CVE-2022-23166 | Medium | 6.1 | 2022-05-12 | Sysaid – Sysaid Local File Inclusion (LFI) – An unauthenticated attacker can access to the system by accessing to "/lib/tinymce/examples/index.html" path. in t… |
CVE-2022-29298 | High | 7.5 | 2022-05-12 | SolarView Compact ver.6.00 allows attackers to access sensitive files via directory traversal. |
CVE-2022-29596 | Critical | 9.8 | 2022-05-11 | MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the Uid=/../../../../../../../../../../../wi… |
CVE-2022-30062 | Medium | 6.5 | 2022-05-11 | ftcms <=2.1 was discovered to be vulnerable to Arbitrary File Read via tp.php |
CVE-2022-30061 | Medium | 6.5 | 2022-05-11 | ftcms <=2.1 was discovered to be vulnerable to directory traversal attacks via the parameter tp. |
CVE-2022-30059 | Medium | 6.5 | 2022-05-11 | Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Delete vulnerability via the neirong parameter at \backend\controllers\DbController.php. |
CVE-2022-30058 | Medium | 5.3 | 2022-05-11 | Shopwind <=v3.4.2 was discovered to contain a Arbitrary File Download vulnerability via the neirong parameter at \backend\controllers\DbController.php. |
CVE-2022-1476 | Medium | 6.6 | 2022-05-10 | The All-in-One WP Migration plugin for WordPress is vulnerable to arbitrary file deletion via directory traversal due to insufficient file validation via the ~… |
CVE-2022-30333 | High | 7.5 | 2022-05-09 | RARLAB UnRAR before 6.12 on Linux and UNIX allows directory traversal to write to files during an extract (aka unpack) operation, as demonstrated by creating a… |
CVE-2022-26889 | High | 8.8 | 2022-05-06 | In Splunk Enterprise versions before 8.1.2, the uri path to load a relative resource within a web page is vulnerable to path traversal. It allows an attacker t… |
CVE-2022-24878 | High | 7.7 | 2022-05-06 | Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` all… |
CVE-2022-24877 | Critical | 9.9 | 2022-05-06 | Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller via a malicious `kustomization.yaml` all… |
CVE-2022-29474 | Medium | 4.3 | 2022-05-05 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all… |
CVE-2022-26835 | Medium | 4.9 | 2022-05-05 | On F5 BIG-IP 16.1.x versions prior to 16.1.2.2, 15.1.x versions prior to 15.1.5.1, 14.1.x versions prior to 14.1.4.6, 13.1.x versions prior to 13.1.5, and all… |
CVE-2021-38693 | Medium | 5.3 | 2022-05-05 | A path traversal vulnerability has been reported to affect QNAP device running QuTScloud, QuTS hero, QTS, QVR Pro Appliance. If exploited, this vulnerability a… |
CVE-2021-42183 | High | 7.5 | 2022-05-05 | MasaCMS 7.2.1 is affected by a path traversal vulnerability in /index.cfm/_api/asset/image/. |
CVE-2021-45783 | Medium | 4.6 | 2022-05-05 | Bookeen Notea Firmware BK_R_1.0.5_20210608 is affected by a directory traversal vulnerability that allows an attacker to obtain sensitive information. |
CVE-2022-20101 | Medium | 5.5 | 2022-05-03 | In aee daemon, there is a possible information disclosure due to a path traversal. This could lead to local information disclosure with no additional execution… |
CVE-2022-28784 | Medium | 4.0 | 2022-05-03 | Path traversal vulnerability in Galaxy Themes prior to SMR May-2022 Release 1 allows attackers to list file names in arbitrary directory as system user. The pa… |
CVE-2022-1554 | High | 7.5 | 2022-05-03 | Path Traversal due to `send_file` call in GitHub repository clinical-genomics/scout prior to 4.52. |
CVE-2022-24897 | High | 7.5 | 2022-05-02 | APIs to evaluate content with Velocity is a package for APIs to evaluate content with Velocity. Starting with version 2.3 and prior to 12.6.7, 12.10.3, and 13… |
CVE-2022-29970 | High | 7.5 | 2022-05-02 | Sinatra before 2.2.0 does not validate that the expanded path matches public_dir when serving static files. |
CVE-2022-28451 | High | 7.5 | 2022-05-02 | nopCommerce 4.50.1 is vulnerable to Directory Traversal via the backup file in the Maintenance feature. |
CVE-2022-26068 | Medium | 6.5 | 2022-05-01 | This affects the package pistacheio/pistache before 0.0.3.20220425. It is possible to traverse directories to fetch arbitrary files from the server. |
CVE-2022-25842 | Medium | 6.9 | 2022-05-01 | All versions of package com.alibaba.oneagent:one-java-agent-plugin are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) using a specially c… |
CVE-2022-29967 | High | 7.5 | 2022-04-29 | static_compressed_inmemory_website_callback.c in Glewlwyd through 2.6.2 allows directory traversal. |
CVE-2022-24900 | Critical | 9.9 | 2022-04-29 | Piano LED Visualizer is software that allows LED lights to light up as a person plays a piano connected to a computer. Version 1.3 and prior are vulnerable to… |