CWE-22 · Path Traversal (page 60)
Page 60 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-26806 | High | 8.8 | 2021-07-31 | admin/file.do in ObjectPlanet Opinio before 7.15 allows Unrestricted File Upload of executable JSP files, resulting in remote code execution, because filePath… |
CVE-2021-30483 | Medium | 5.3 | 2021-07-30 | isomorphic-git before 1.8.2 allows Directory Traversal via a crafted repository. |
CVE-2021-28966 | High | 7.5 | 2021-07-30 | In Ruby through 3.0 on Windows, a remote attacker can submit a crafted path when a Web application handles a parameter with TmpDir. |
CVE-2021-23415 | High | 7.5 | 2021-07-28 | This affects the package elFinder.AspNet before 1.1.1. The user-controlled file name is not properly sanitized before it is used to create a file system path. |
CVE-2021-37447 | High | 8.1 | 2021-07-25 | In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion. |
CVE-2021-37446 | Medium | 4.3 | 2021-07-25 | In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading. |
CVE-2021-37445 | Medium | 6.5 | 2021-07-25 | In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading. |
CVE-2021-37444 | High | 8.8 | 2021-07-25 | NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a Z… |
CVE-2021-37443 | High | 8.1 | 2021-07-25 | NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion. |
CVE-2021-37442 | Medium | 6.5 | 2021-07-25 | NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files. |
CVE-2021-37441 | High | 8.8 | 2021-07-25 | NCH Axon PBX v2.22 and earlier allows path traversal for file deletion via the logdelete?file=/.. substring. |
CVE-2021-37440 | Medium | 6.5 | 2021-07-25 | NCH Axon PBX v2.22 and earlier allows path traversal for file disclosure via the logprop?file=/.. substring. |
CVE-2021-37439 | Medium | 6.5 | 2021-07-25 | NCH FlexiServer v6.00 suffers from a syslog?file=/.. path traversal vulnerability. |
CVE-2021-37469 | Medium | 6.5 | 2021-07-25 | In NCH WebDictate v2.13 and earlier, authenticated users can abuse logprop?file=/.. path traversal to read files on the filesystem. |
CVE-2020-5370 | High | 7.9 | 2021-07-22 | Dell EMC OpenManage Enterprise (OME) versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote authenticated malicious user with high p… |
CVE-2021-1617 | Medium | 6.5 | 2021-07-22 | Multiple vulnerabilities in the web-based management interface of Cisco Intersight Virtual Appliance could allow an authenticated, remote attacker to conduct a… |
CVE-2021-35521 | Medium | 5.9 | 2021-07-22 | A path traversal in Thrift command handlers in IDEMIA Morpho Wave Compact and VisionPass devices before 2.6.2 allows remote authenticated attackers to achieve… |
CVE-2021-35054 | High | 7.5 | 2021-07-20 | Minecraft before 1.17.1, when online-mode=false is configured, allows path traversal for deletion of arbitrary JSON files. |
CVE-2021-34820 | High | 7.5 | 2021-07-19 | Web Path Directory Traversal in the Novus HTTP Server. The Novus HTTP Server is affected by the Directory Traversal for Arbitrary File Access vulnerability. A… |
CVE-2021-35968 | Medium | 4.3 | 2021-07-19 | The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly. Remote attackers can access the system… |
CVE-2021-35967 | Medium | 5.3 | 2021-07-19 | The directory page parameter of the Orca HCM digital learning platform does not filter special characters. Remote attackers can access the system directory thr… |
CVE-2021-24453 | High | 8.8 | 2021-07-19 | The Include Me WordPress plugin through 1.2.1 is vulnerable to path traversal / local file inclusion, which can lead to Remote Code Execution (RCE) of the syst… |
CVE-2021-24447 | Medium | 5.3 | 2021-07-19 | The WP Image Zoom WordPress plugin before 1.47 did not validate its tab parameter before using it in the include_once() function, leading to a local file inclu… |
CVE-2021-32769 | High | 7.5 | 2021-07-16 | Micronaut is a JVM-based, full stack Java framework designed for building JVM applications. A path traversal vulnerability exists in versions prior to 2.5.9. W… |
CVE-2021-35962 | High | 7.5 | 2021-07-16 | Specific page parameters in Dr. ID Door Access Control and Personnel Attendance Management system does not filter special characters. Remote attackers can appl… |
CVE-2021-20511 | Medium | 4.9 | 2021-07-15 | IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL re… |
CVE-2021-21586 | High | 8.1 | 2021-07-15 | Wyse Management Suite versions 3.2 and earlier contain an absolute path traversal vulnerability. A remote authenticated malicious user could exploit this vulne… |
CVE-2021-22867 | Medium | 6.5 | 2021-07-14 | A path traversal vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub Pages site. User-controlled configurat… |
CVE-2021-23407 | High | 7.5 | 2021-07-14 | This affects the package elFinder.Net.Core from 0 and before 1.2.4. The user-controlled file name is not properly sanitized before it is used to create a file… |
CVE-2021-33211 | Medium | 6.5 | 2021-07-14 | A Directory Traversal vulnerability in the Unzip feature in Elements-IT HTTP Commander 5.3.3 allows remote authenticated users to write files to arbitrary dire… |
CVE-2021-22440 | Medium | 4.6 | 2021-07-13 | There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that… |
CVE-2021-32746 | Medium | 5.3 | 2021-07-12 | Icinga Web 2 is an open source monitoring web interface, framework and command-line interface. Between versions 2.3.0 and 2.8.2, the `doc` module of Icinga Web… |
CVE-2021-33807 | High | 7.5 | 2021-07-12 | Cartadis Gespage through 8.2.1 allows Directory Traversal in gespage/doDownloadData and gespage/webapp/doDownloadData. |
CVE-2021-24013 | High | 8.8 | 2021-07-12 | Multiple Path traversal vulnerabilities in the Webmail of FortiMail before 6.4.4 may allow a regular user to obtain unauthorized access to files and data via s… |
CVE-2021-33215 | Medium | 4.3 | 2021-07-07 | An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The API allows Directory Traversal. |
CVE-2021-32532 | High | 7.5 | 2021-07-07 | Path traversal vulnerability in back-end analysis function in QSAN XEVO allows remote attackers to download arbitrary files without permissions. The referred v… |
CVE-2021-32527 | High | 7.5 | 2021-07-07 | Path traversal vulnerability in QSAN Storage Manager allows remote unauthenticated attackers to download arbitrary files thru injecting file path in download f… |
CVE-2021-32516 | High | 7.5 | 2021-07-07 | Path traversal vulnerability in share_link in QSAN Storage Manager allows remote attackers to download arbitrary files. The referred vulnerability has been sol… |
CVE-2021-32507 | Medium | 6.5 | 2021-07-07 | Absolute Path Traversal vulnerability in FileDownload in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path p… |
CVE-2021-32506 | Medium | 6.5 | 2021-07-07 | Absolute Path Traversal vulnerability in GetImage in QSAN Storage Manager allows remote authenticated attackers download arbitrary files via the Url path param… |
CVE-2020-24146 | High | 8.1 | 2021-07-07 | Directory traversal in the CM Download Manager (aka cm-download-manager) plugin 2.7.0 for WordPress allows authorized users to delete arbitrary files and possi… |
CVE-2020-24144 | High | 8.6 | 2021-07-07 | Directory traversal in the Media File Organizer (aka media-file-organizer) plugin 1.0.1 for WordPress lets an attacker get access to files that are stored outs… |
CVE-2020-24143 | High | 7.5 | 2021-07-07 | Directory traversal in the Video Downloader for TikTok (aka downloader-tiktok) plugin 1.3 for WordPress lets an attacker get access to files that are stored ou… |
CVE-2021-24375 | Critical | 9.8 | 2021-07-06 | Lack of authentication or validation in motor_load_more, motor_gallery_load_more, motor_quick_view and motor_project_quick_view AJAX handlers of the Motor Word… |
CVE-2021-35958 | Critical | 9.1 | 2021-06-30 | TensorFlow through 2.5.0 allows attackers to overwrite arbitrary files via a crafted archive when tf.keras.utils.get_file is used with extract=True. NOTE: the… |
CVE-2020-23715 | High | 8.6 | 2021-06-28 | Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download. |
CVE-2021-28588 | High | 8.8 | 2021-06-28 | Adobe RoboHelp Server version 2019.0.9 (and earlier) is affected by a Path Traversal vulnerability when parsing a crafted HTTP POST request. An authenticated a… |
CVE-2021-28584 | Medium | 5.4 | 2021-06-28 | Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a Path Traversal vulnerability when creating a store wi… |
CVE-2021-21102 | High | 8.8 | 2021-06-28 | Adobe Illustrator version 25.2 (and earlier) is affected by a Path Traversal vulnerability when parsing a specially crafted file. An unauthenticated attacker c… |
CVE-2021-21090 | High | 8.8 | 2021-06-28 | Adobe InCopy version 16.0 (and earlier) is affected by an path traversal vulnerability when parsing a crafted file. An unauthenticated attacker could leverage… |
CVE-2021-29157 | High | 7.5 | 2021-06-28 | Dovecot before 2.3.15 allows ../ Path Traversal. An attacker with access to the local filesystem can trick OAuth2 authentication into using an HS256 validation… |
CVE-2020-18665 | Medium | 5.3 | 2021-06-24 | Directory Traversal vulnerability in WebPort <=1.19.1 in tags of system settings. |
CVE-2021-29087 | High | 7.5 | 2021-06-23 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in webapi component in Synology DiskStation Manager (DSM) before 6… |
CVE-2021-31272 | Critical | 9.8 | 2021-06-18 | SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/unzip that may lead to command execution… |
CVE-2021-32954 | Medium | 6.5 | 2021-06-18 | Advantech WebAccess/SCADA Versions 9.0.1 and prior is vulnerable to a directory traversal, which may allow an attacker to remotely read arbitrary files on the… |
CVE-2021-33576 | Critical | 9.8 | 2021-06-18 | An issue was discovered in Cleo LexiCom 5.5.0.0. Within the AS2 message, the sender can specify a filename. This filename can include path-traversal characters… |
CVE-2021-34553 | Medium | 4.3 | 2021-06-18 | Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files and read the content of a blob file (via… |
CVE-2020-22200 | Medium | 5.3 | 2021-06-16 | Directory Traversal vulnerability in phpCMS 9.1.13 via the q parameter to public_get_suggest_keyword. |
CVE-2020-35762 | Low | 2.7 | 2021-06-16 | bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files. |
CVE-2021-34129 | High | 8.1 | 2021-06-15 | LaikeTui 3.5.0 allows remote authenticated users to delete arbitrary files, as demonstrated by deleting install.lock in order to reinstall the product in an at… |
CVE-2021-32682 | Critical | 9.8 | 2021-06-14 | elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities c… |
CVE-2021-22762 | High | 7.8 | 2021-06-11 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) V15.0.0.21140 and prior that could resul… |
CVE-2021-24035 | Critical | 9.1 | 2021-06-11 | A lack of filename validation when unzipping archives prior to WhatsApp for Android v2.21.8.13 and WhatsApp Business for Android v2.21.8.13 could have allowed… |
CVE-2021-31538 | High | 7.5 | 2021-06-10 | LANCOM R&S Unified Firewall (UF) devices running LCOS FX 10.5 allow Relative Path Traversal. |
CVE-2021-34363 | Critical | 9.1 | 2021-06-10 | The thefuck (aka The Fuck) package before 3.31 for Python allows Path Traversal that leads to arbitrary file deletion via the "undo archive operation" feature. |
CVE-2021-0097 | Medium | 6.5 | 2021-06-09 | Path traversal in the BMC firmware for Intel(R) Server Board M10JNP2SB before version EFI BIOS 7215, BMC 8100.01.08 may allow an unauthenticated user to potent… |
CVE-2021-33203 | Medium | 4.9 | 2021-06-08 | Django before 2.2.24, 3.x before 3.1.12, and 3.2.x before 3.2.4 has a potential directory traversal via django.contrib.admindocs. Staff members could use the T… |
CVE-2021-32674 | High | 8.8 | 2021-06-08 | Zope is an open-source web application server. This advisory extends the previous advisory at https://github.com/zopefoundation/Zope/security/advisories/GHSA-5… |
CVE-2021-23391 | High | 7.3 | 2021-06-07 | This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary file system through the module install f… |
CVE-2021-33896 | Medium | 5.3 | 2021-06-07 | Dino before 0.1.2 and 0.2.x before 0.2.1 allows Directory Traversal (only for creation of new files) via URI-encoded path separators. |
CVE-2021-20517 | High | 8.8 | 2021-06-07 | IBM WebSphere Application Server Network Deployment 8.5 and 9.0 could allow a remote authenticated attacker to traverse directories. An attacker could send a s… |
CVE-2020-36142 | Medium | 6.5 | 2021-06-04 | BloofoxCMS 0.5.2.1 allows Directory traversal vulnerability by inserting '../' payloads within the 'fileurl' parameter. |
CVE-2021-32662 | Medium | 6.5 | 2021-06-03 | Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In `@backstage/tech… |
CVE-2020-6950 | Medium | 6.5 | 2021-06-02 | Directory traversal in Eclipse Mojarra before 2.3.14 allows attackers to read arbitrary files via the loc parameter or con parameter. |
CVE-2021-29091 | High | 7.7 | 2021-06-02 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management component in Synology Photo Station before 6.8… |
CVE-2021-33183 | High | 7.9 | 2021-06-01 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability container volume management component in Synology Docker before 18… |
CVE-2021-33182 | Medium | 5.0 | 2021-06-01 | Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in PDF Viewer component in Synology DiskStation Manager (DSM) befo… |
CVE-2021-29088 | High | 7.8 | 2021-06-01 | Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation Manager (DSM) before 6.2.4-25553 allows… |
CVE-2021-29492 | High | 8.1 | 2021-05-28 | Envoy is a cloud-native edge/middle/service proxy. Envoy does not decode escaped slash sequences `%2F` and `%5C` in HTTP URL paths in versions 1.18.2 and befor… |
CVE-2021-32643 | Medium | 5.8 | 2021-05-27 | Http4s is a Scala interface for HTTP services. `StaticFile.fromUrl` can leak the presence of a directory on a server when the `URL` scheme is not `file://`, an… |
CVE-2009-3721 | High | 7.8 | 2021-05-26 | Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parser that is derived from yTNEF. A crafted… |
CVE-2021-22736 | High | 7.5 | 2021-05-26 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in homeLYnk (Wiser For KNX) and spaceLYnk V2.60 and prior w… |
CVE-2021-29695 | Medium | 6.5 | 2021-05-25 | IBM Host firmware for LC-class Systems could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL requ… |
CVE-2020-20907 | Critical | 9.1 | 2021-05-24 | MetInfo 7.0 beta is affected by a file modification vulnerability. Attackers can delete and modify ini files in app/system/language/admin/language_general.clas… |
CVE-2021-21001 | Critical | 9.1 | 2021-05-24 | On WAGO PFC200 devices in different firmware versions with special crafted packets an authorised attacker with network access to the device can access the file… |
CVE-2021-33497 | Critical | 9.1 | 2021-05-24 | Dutchcoders transfer.sh before 1.2.4 allows Directory Traversal for deleting files. |
CVE-2020-23766 | Medium | 6.5 | 2021-05-21 | An arbitrary file deletion vulnerability was discovered on htmly v2.7.5 which allows remote attackers to use any absolute path to delete any file in the server… |
CVE-2021-32633 | Medium | 6.8 | 2021-05-21 | Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules indirectly through Python modules that… |
CVE-2021-28798 | High | 8.8 | 2021-05-21 | A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to mo… |
CVE-2020-35580 | High | 7.5 | 2021-05-20 | A local file inclusion vulnerability in the FileServlet in all SearchBlox before 9.2.2 allows remote, unauthenticated users to read arbitrary files from the op… |
CVE-2020-21057 | High | 8.1 | 2021-05-20 | Directory Traversal vulnerability in FusionPBX 4.5.7, which allows a remote malicious user to delete folders on the system via the folder variable to app/edit/… |
CVE-2020-21056 | Medium | 4.3 | 2021-05-20 | Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via the folder variale to app\edit\folderne… |
CVE-2020-21055 | Medium | 6.5 | 2021-05-20 | A Directory Traversal vulnerability exists in FusionPBX 4.5.7 allows malicoius users to rename any file of the system.via the (1) folder, (2) filename, and (3)… |
CVE-2021-3426 | Medium | 5.7 | 2021-05-20 | There's a flaw in Python 3's pydoc. A local or adjacent attacker who discovers or is able to convince another local or adjacent user to start a pydoc server co… |
CVE-2021-27461 | High | 7.5 | 2021-05-20 | A vulnerability has been found in multiple revisions of Emerson Rosemount X-STREAM Gas Analyzer. The affected webserver applications allow access to stored dat… |
CVE-2020-36364 | Critical | 9.1 | 2021-05-19 | An issue was discovered in Smartstore (aka SmartStoreNET) before 4.1.0. Administration/Controllers/ImportController.cs allows path traversal (for copy and dele… |
CVE-2020-18178 | Critical | 9.8 | 2021-05-18 | Path Traversal in HongCMS v4.0.0 allows remote attackers to view, edit, and delete arbitrary files via a crafted POST request to the component "/hcms/admin/ind… |
CVE-2020-36197 | High | 7.1 | 2021-05-13 | An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, this vulnerability allows attackers to co… |
CVE-2021-32572 | High | 7.5 | 2021-05-12 | Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as demonstrated by reading the /etc/passwd… |
CVE-2020-23575 | High | 7.5 | 2021-05-10 | A directory traversal vulnerability exists in Kyocera Printer d-COPIA253MF plus. Successful exploitation of this vulnerability could allow an attacker to retri… |