CWE-22 · Path Traversal (page 59)
Page 59 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-41293 | High | 7.5 | 2021-09-30 | ECOA BAS controller suffers from a path traversal vulnerability, causing arbitrary files disclosure. Using the specific POST parameter, unauthenticated attacke… |
CVE-2021-41291 | High | 7.5 | 2021-09-30 | ECOA BAS controller suffers from a path traversal content disclosure vulnerability. Using the GET parameter in File Manager, unauthenticated attackers can remo… |
CVE-2021-41290 | Critical | 9.8 | 2021-09-30 | ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, unauthenticated attackers can remotely se… |
CVE-2021-40651 | Medium | 6.5 | 2021-09-29 | OS4Ed OpenSIS Community 8.0 is vulnerable to a local file inclusion vulnerability in Modules.php (modname parameter), which can disclose arbitrary file from th… |
CVE-2021-35027 | High | 7.5 | 2021-09-29 | A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive inform… |
CVE-2021-36286 | High | 7.1 | 2021-09-28 | Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file deletion vulnerability that can be exploited… |
CVE-2021-21569 | Medium | 6.8 | 2021-09-28 | Dell NetWorker, versions 18.x and 19.x contain a Path traversal vulnerability. A NetWorker server user with remote access to NetWorker clients may potentially… |
CVE-2021-20034 | Critical | 9.1 | 2021-09-27 | An improper access control vulnerability in SMA100 allows a remote unauthenticated attacker to bypass the path traversal checks and delete an arbitrary file po… |
CVE-2021-40103 | High | 7.5 | 2021-09-27 | An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF. |
CVE-2021-40098 | Critical | 9.8 | 2021-09-27 | An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regular expression. |
CVE-2021-40097 | High | 8.8 | 2021-09-27 | An issue was discovered in Concrete CMS through 8.5.5. Authenticated path traversal leads to to remote code execution via uploaded PHP code, related to the bFi… |
CVE-2021-40349 | Medium | 5.3 | 2021-09-27 | e7d Speed Test (aka speedtest) 0.5.3 allows a path-traversal attack that results in information disclosure via the "GET /.." substring. |
CVE-2021-22868 | Medium | 4.3 | 2021-09-24 | A path traversal vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configurat… |
CVE-2021-41381 | High | 7.5 | 2021-09-23 | Payara Micro Community 5.2021.6 and below allows Directory Traversal. |
CVE-2021-22013 | High | 7.5 | 2021-09-23 | The vCenter Server contains a file path traversal vulnerability leading to information disclosure in the appliance management API. A malicious actor with netwo… |
CVE-2021-22005 | Critical | 9.8 | 2021-09-23 | The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with network access to port 443 on vCenter Serve… |
CVE-2021-41087 | Medium | 5.6 | 2021-09-21 | in-toto-golang is a go implementation of the in-toto framework to protect software supply chain integrity. In affected versions authenticated attackers posing… |
CVE-2021-24639 | High | 8.1 | 2021-09-20 | The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_empty_dir AJAX action, which allows any… |
CVE-2021-24638 | Critical | 9.1 | 2021-09-20 | The OMGF WordPress plugin before 4.5.4 does not escape or validate the handle parameter of the REST API, which allows unauthenticated users to perform path tra… |
CVE-2021-3806 | Medium | 5.3 | 2021-09-18 | A path traversal vulnerability on Pardus Software Center's "extractArchive" function could allow anyone on the same network to do a man-in-the-middle and write… |
CVE-2019-9060 | High | 7.5 | 2021-09-17 | An issue was discovered in CMS Made Simple 2.2.8. It is possible to achieve unauthenticated path traversal in the CGExtensions module (in the file action.setde… |
CVE-2021-39208 | Medium | 4.3 | 2021-09-16 | SharpCompress is a fully managed C# library to deal with many compression types and formats. Versions prior to 0.29.0 are vulnerable to partial path traversal… |
CVE-2021-27341 | Critical | 9.8 | 2021-09-16 | OpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via the "filename" parameter. |
CVE-2021-33692 | High | 7.5 | 2021-09-15 | SAP Cloud Connector, version - 2.0, allows the upload of zip files as backup. This backup file can be tricked to inject special elements such as '..' and '/' s… |
CVE-2021-40964 | Medium | 6.5 | 2021-09-15 | A Path Traversal vulnerability exists in TinyFileManager all version up to and including 2.4.6 that allows attackers to upload a file (with Admin credentials o… |
CVE-2020-19154 | Medium | 6.5 | 2021-09-15 | Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'FileManager.editFile()' function in t… |
CVE-2020-19150 | High | 8.1 | 2021-09-15 | Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information or cause a denial of service via the 'FileMana… |
CVE-2020-19147 | Medium | 6.5 | 2021-09-15 | Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive infromation via the 'getFolder()' function in the componen… |
CVE-2020-19146 | Medium | 6.5 | 2021-09-15 | Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information via the 'TemplatePath' parameter in the compon… |
CVE-2021-40444 | High | 8.8 | 2021-09-15 | Microsoft is investigating reports of a remote code execution vulnerability in MSHTML that affects Microsoft Windows. Microsoft is aware of targeted attacks th… |
CVE-2021-23043 | Medium | 6.5 | 2021-09-14 | On BIG-IP, on all versions of 16.1.x, 16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x, and 11.6.x, a directory traversal vulnerability exists in an undisclosed page of… |
CVE-2021-38163 | Critical | 9.9 | 2021-09-14 | SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can uploa… |
CVE-2021-37532 | Medium | 4.3 | 2021-09-14 | SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to directory and view the contents of index in the… |
CVE-2021-33685 | Medium | 6.5 | 2021-09-14 | SAP Business One version - 10.0 allows low-level authorized attacker to traverse the file system to access files or directories that are outside of the restric… |
CVE-2021-40357 | Medium | 4.9 | 2021-09-14 | A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Workspace V5.0 (All versions < V5.0.8), Tea… |
CVE-2021-37200 | High | 7.7 | 2021-09-14 | A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of an affected system could download arbit… |
CVE-2021-41072 | High | 8.1 | 2021-09-14 | squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-2021-40153. A squashfs filesystem that ha… |
CVE-2021-38360 | High | 8.3 | 2021-09-10 | The wp-publications WordPress plugin is vulnerable to restrictive local file inclusion via the Q_FILE parameter found in the ~/bibtexbrowser.php file which all… |
CVE-2021-25452 | Medium | 5.5 | 2021-09-09 | An improper input validation vulnerability in loading graph file in DSP driver prior to SMR Sep-2021 Release 1 allows attackers to perform permanent denial of… |
CVE-2021-25450 | Medium | 4.5 | 2021-09-09 | Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socket. |
CVE-2021-1815 | Medium | 5.5 | 2021-09-08 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Big Sur 11.3, iOS 14.5 and iPadOS… |
CVE-2021-1740 | Medium | 5.5 | 2021-09-08 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, iOS 1… |
CVE-2021-1739 | Medium | 5.5 | 2021-09-08 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Security Update 2021-002 Catalina, Secur… |
CVE-2021-39500 | High | 7.5 | 2021-09-07 | Eyoucms 1.5.4 is vulnerable to Directory Traversal. Due to a lack of input data sanitizaton in param tpldir, filename, type, nid an attacker can inject "../" t… |
CVE-2021-37733 | Medium | 4.9 | 2021-09-07 | A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0… |
CVE-2021-37731 | Medium | 6.2 | 2021-09-07 | A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4… |
CVE-2021-37729 | Medium | 6.5 | 2021-09-07 | A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0… |
CVE-2021-37728 | Medium | 6.5 | 2021-09-07 | A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13. Aruba has re… |
CVE-2021-36717 | Medium | 5.4 | 2021-09-07 | Synerion TimeNet version 9.21 contains a directory traversal vulnerability where, on the "Name" parameter, the attacker can return to the root directory and op… |
CVE-2021-34436 | Critical | 9.8 | 2021-09-02 | In Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote code execution (and XXE) via the theia-xml-extension. This extens… |
CVE-2021-22704 | Critical | 9.1 | 2021-09-02 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer (all versions p… |
CVE-2021-36031 | High | 7.2 | 2021-09-01 | Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a Path Traversal vulnerability via the `theme[pre… |
CVE-2021-23428 | High | 8.6 | 2021-09-01 | This affects all versions of package elFinder.NetCore. The Path.Combine(...) method is used to create an absolute file path. Due to missing sanitation of the u… |
CVE-2021-23427 | High | 8.6 | 2021-09-01 | This affects all versions of package elFinder.NetCore. The ExtractAsync function within the FileSystem is vulnerable to arbitrary extraction due to insufficien… |
CVE-2021-39109 | High | 7.5 | 2021-09-01 | The renderWidgetResource resource in Atlasian Atlasboard before version 1.1.9 allows remote attackers to read arbitrary files via a path traversal vulnerabilit… |
CVE-2021-39180 | High | 8.1 | 2021-08-31 | OpenOLAT is a web-based learning management system (LMS). A path traversal vulnerability exists in versions prior to 15.3.18, 15.5.3, and 16.0.0. Using a speci… |
CVE-2021-37713 | High | 8.2 | 2021-08-31 | The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerabil… |
CVE-2021-37712 | High | 8.2 | 2021-08-31 | The npm package "tar" (aka node-tar) before versions 4.4.18, 5.0.10, and 6.1.9 has an arbitrary file creation/overwrite and arbitrary code execution vulnerabil… |
CVE-2021-37701 | High | 8.2 | 2021-08-31 | The npm package "tar" (aka node-tar) before versions 4.4.16, 5.0.8, and 6.1.7 has an arbitrary file creation/overwrite and arbitrary code execution vulnerabili… |
CVE-2021-39316 | High | 7.5 | 2021-08-31 | The Zoomsounds plugin <= 6.45 for WordPress allows arbitrary files, including sensitive configuration files such as wp-config.php, to be downloaded via the `dz… |
CVE-2021-33555 | High | 7.5 | 2021-08-31 | In PEPPERL+FUCHS WirelessHART-Gateway <= 3.0.7 the filename parameter is vulnerable to unauthenticated path traversal attacks, enabling read access to arbitrar… |
CVE-2021-22022 | Medium | 4.9 | 2021-08-30 | The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor with administrative access to vRealize… |
CVE-2020-18127 | Medium | 6.5 | 2021-08-30 | An issue in the /config/config.php component of Indexhibit 2.1.5 allows attackers to arbitrarily view files. |
CVE-2021-40153 | High | 8.1 | 2021-08-27 | squashfs_opendir in unsquash-1.c in Squashfs-Tools 4.5 stores the filename in the directory entry; this is then used by unsquashfs to create the new file durin… |
CVE-2020-19547 | Medium | 6.5 | 2021-08-25 | Directory Traversal vulnerability exists in PopojiCMS 2.0.1 via the id parameter in admin.php. |
CVE-2021-38612 | High | 7.5 | 2021-08-24 | In NASCENT RemKon Device Manager 4.0.0.0, a Directory Traversal vulnerability in a log-reading function in maintenance/readLog.php allows an attacker to read a… |
CVE-2021-23430 | High | 7.5 | 2021-08-24 | All versions of package startserver are vulnerable to Directory Traversal due to missing sanitization. |
CVE-2021-24549 | Medium | 4.9 | 2021-08-23 | The AceIDE WordPress plugin through 2.6.2 does not sanitise or validate the user input which is appended to system paths before using it in various actions, su… |
CVE-2020-18878 | Medium | 5.3 | 2021-08-20 | Directory Traversal in Skycaiji v1.3 allows remote attackers to obtain sensitive information via the component 'index.php?m=admin&c=Tool&a=log&file=D%3A%5CphpS… |
CVE-2020-23069 | Medium | 6.5 | 2021-08-18 | Path Traversal vulneraility exists in webTareas 2.0 via the extpath parameter in general_serv.php, which could let a malicious user read arbitrary files. |
CVE-2021-22933 | Medium | 6.5 | 2021-08-16 | A vulnerability in Pulse Connect Secure before 9.1R12 could allow an authenticated administrator to perform an arbitrary file delete via a maliciously crafted… |
CVE-2021-38758 | High | 7.5 | 2021-08-16 | Directory traversal vulnerability in Online Catering Reservation System 1.0 exists due to lack of validation in index.php. |
CVE-2021-24363 | Medium | 4.9 | 2021-08-16 | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded files are kept inside its uploads folder… |
CVE-2021-23423 | Medium | 5.5 | 2021-08-16 | This affects the package bikeshed before 3.0.0. This can occur when an untrusted source file containing include, include-code or include-raw block is processed… |
CVE-2021-26086 | Medium | 5.3 | 2021-08-16 | Affected versions of Atlassian Jira Server and Data Center allow remote attackers to read particular files via a path traversal vulnerability in the /WEB-INF/w… |
CVE-2021-27402 | Medium | 6.5 | 2021-08-13 | The SAS Admin portal of Mitel MiCollab before 9.2 FP2 could allow an unauthenticated attacker to access (view and modify) user data by injecting arbitrary dire… |
CVE-2021-37347 | High | 7.8 | 2021-08-13 | Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the directory name it receives as an argumen… |
CVE-2021-37343 | High | 8.8 | 2021-08-13 | A path traversal vulnerability exists in Nagios XI below version 5.8.5 AutoDiscovery component and could lead to post authenticated RCE under security context… |
CVE-2021-31731 | Medium | 6.5 | 2021-08-12 | A directory traversal issue in KiteCMS 1.1.1 allows remote administrators to overwrite arbitrary files via ../ in the path parameter to index.php/admin/Templat… |
CVE-2021-37367 | High | 7.8 | 2021-08-10 | CTparental before 4.45.07 is affected by a code execution vulnerability in the CTparental admin panel. Because The file "bl_categories_help.php" is vulnerable… |
CVE-2020-23172 | Medium | 5.5 | 2021-08-10 | A vulnerability in all versions of Kuba allows attackers to overwrite arbitrary files in arbitrary directories with crafted Zip files due to improper validatio… |
CVE-2021-22674 | Medium | 6.5 | 2021-08-10 | The affected product is vulnerable to a relative path traversal condition, which may allow an attacker access to unauthorized files and directories on the WebA… |
CVE-2021-21501 | High | 7.5 | 2021-08-10 | Improper configuration will cause ServiceComb ServiceCenter Directory Traversal problem in ServcieCenter 1.x.x versions and fixed in 2.0.0. |
CVE-2015-2074 | High | 7.5 | 2021-08-09 | The File Repository Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka S… |
CVE-2015-2073 | High | 7.5 | 2021-08-09 | The File RepositoRy Server (FRS) CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to read arbitrary files via a full pathname, aka SAP N… |
CVE-2021-38197 | Critical | 9.8 | 2021-08-08 | unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR archive. |
CVE-2021-38136 | Medium | 6.5 | 2021-08-06 | Corero SecureWatch Managed Services 9.7.2.0020 is affected by a Path Traversal vulnerability via the snap_file parameter in the /it-IT/splunkd/__raw/services/g… |
CVE-2021-34638 | Medium | 6.5 | 2021-08-05 | Authenticated Directory Traversal in WordPress Download Manager <= 3.1.24 allows authenticated (Contributor+) users to obtain sensitive configuration file info… |
CVE-2021-36168 | Medium | 6.5 | 2021-08-04 | A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Fortinet FortiPortal 6.x before 6.0.5, FortiPortal 5.3.x before 5.3.6 and a… |
CVE-2021-24010 | High | 8.1 | 2021-08-04 | Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authentic… |
CVE-2021-35397 | High | 7.5 | 2021-08-04 | A path traversal vulnerability in the static router for Drogon from 1.0.0-beta14 to 1.6.0 could allow an unauthenticated, remote attacker to arbitrarily read f… |
CVE-2020-19305 | Critical | 9.8 | 2021-08-03 | An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attacke… |
CVE-2020-19304 | High | 7.5 | 2021-08-03 | An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive informa… |
CVE-2021-32804 | High | 8.2 | 2021-08-03 | The npm package "tar" (aka node-tar) before versions 6.1.1, 5.0.6, 4.4.14, and 3.3.2 has a arbitrary File Creation/Overwrite vulnerability due to insufficient… |
CVE-2021-32803 | High | 8.2 | 2021-08-03 | The npm package "tar" (aka node-tar) before versions 6.1.2, 5.0.7, 4.4.15, and 3.2.3 has an arbitrary File Creation/Overwrite vulnerability via insufficient sy… |
CVE-2021-32018 | High | 8.5 | 2021-08-03 | An issue was discovered in JUMP AMS 3.6.0.04.009-2487. The JUMP SOAP API was vulnerable to arbitrary file reading due to an improper limitation of file loading… |
CVE-2021-32016 | Critical | 9.9 | 2021-08-03 | An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing of arbitrary files to a user-controlled location on the remot… |
CVE-2021-32814 | High | 8.8 | 2021-08-03 | Skytable is a NoSQL database with automated snapshots and TLS. Versions prior to 0.5.1 are vulnerable to a a directory traversal attack enabling remotely conne… |
CVE-2021-36157 | Medium | 5.3 | 2021-08-03 | An issue was discovered in Grafana Cortex through 1.9.0. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to cond… |
CVE-2021-36156 | Medium | 5.3 | 2021-08-03 | An issue was discovered in Grafana Loki through 2.2.1. The header value X-Scope-OrgID is used to construct file paths for rules files, and if crafted to conduc… |