CWE-22 · Path Traversal (page 61)
Page 61 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-28149 | Medium | 6.5 | 2021-05-06 | Hongdian H8922 3.0.5 devices allow Directory Traversal. The /log_download.cgi log export handler does not validate user input and allows a remote attacker with… |
CVE-2021-32062 | Medium | 5.3 | 2021-05-06 | MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MS_MAP_NO_PA… |
CVE-2021-1532 | Medium | 6.5 | 2021-05-06 | A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software and Cisco RoomOS Software could allow an authentica… |
CVE-2021-29101 | High | 7.5 | 2021-05-05 | ArcGIS GeoEvent Server versions 10.8.1 and below has a read-only directory path traversal vulnerability that could allow an unauthenticated, remote attacker to… |
CVE-2021-29100 | High | 7.8 | 2021-05-05 | A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creation on an affected system through crafted… |
CVE-2020-4993 | Medium | 4.9 | 2021-05-05 | IBM QRadar SIEM 7.3 and 7.4 when decompressing or verifying signature of zip files processes data in a way that may be vulnerable to path traversal attacks. IB… |
CVE-2021-31542 | High | 7.5 | 2021-05-05 | In Django 2.2 before 2.2.21, 3.1 before 3.1.9, and 3.2 before 3.2.1, MultiPartParser, UploadedFile, and FieldFile allowed directory traversal via uploaded file… |
CVE-2021-29246 | Medium | 6.7 | 2021-05-05 | BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achieve code execution. The attacker must cra… |
CVE-2021-31800 | Critical | 9.8 | 2021-05-05 | Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a running smbserver instance can list an… |
CVE-2020-4039 | High | 8.6 | 2021-04-30 | SUSI.AI is an intelligent Open Source personal assistant. SUSI.AI Server before version d27ed0f has a directory traversal vulnerability due to insufficient inp… |
CVE-2021-28959 | Critical | 9.8 | 2021-04-30 | Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory traversal via an entry in a ZIP archive. This leads to remote code… |
CVE-2020-18070 | Critical | 9.1 | 2021-04-30 | Path Traversal in iCMS v7.0.13 allows remote attackers to delete folders by injecting commands into a crafted HTTP request to the "do_del()" method of the comp… |
CVE-2021-1256 | Medium | 6.0 | 2021-04-29 | A vulnerability in the CLI of Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to overwrite files on the file system… |
CVE-2021-31421 | Medium | 6.0 | 2021-04-29 | This vulnerability allows local attackers to delete arbitrary files on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain… |
CVE-2021-30048 | Medium | 5.3 | 2021-04-29 | Directory Traversal in the fileDownload function in com/java2nb/common/controller/FileController.java in Novel-plus (小说精品屋-plus) 3.5.1 allows attackers to read… |
CVE-2021-20090 | Critical | 9.8 | 2021-04-29 | A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3 firmware version <= 1.24 could allow un… |
CVE-2021-20714 | Medium | 6.5 | 2021-04-27 | Directory traversal vulnerability in WP Fastest Cache versions prior to 0.9.1.7 allows a remote attacker with administrator privileges to delete arbitrary file… |
CVE-2021-30635 | Medium | 5.3 | 2021-04-27 | Sonatype Nexus Repository Manager 3.x before 3.30.1 allows a remote attacker to get a list of files and directories that exist in a UI-related folder via direc… |
CVE-2021-29474 | Medium | 4.7 | 2021-04-26 | HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker can read arbitrary `.md` files from the server's filesystem du… |
CVE-2020-36321 | Medium | 5.9 | 2021-04-23 | Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 (Vaadin 14.0.0 through 14.4.2), and 3.0 prior to 5.0… |
CVE-2020-17564 | Critical | 9.1 | 2021-04-22 | Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to the " Admin/DataAction.class.php" compo… |
CVE-2020-17563 | Critical | 9.1 | 2021-04-22 | Path Traversal in FeiFeiCMS v4.0 allows remote attackers to delete arbitrary files by sending a crafted HTTP request to " /index.php?s=/admin-tpl-del&id=". |
CVE-2021-24242 | Low | 3.8 | 2021-04-22 | The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion vulnerability through the maliciously… |
CVE-2020-25243 | Medium | 5.1 | 2021-04-22 | A vulnerability has been identified in LOGO! Soft Comfort (All versions < V8.4). A zip slip vulnerability could be triggered while importing a compromised proj… |
CVE-2021-0231 | Medium | 6.5 | 2021-04-22 | A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue aff… |
CVE-2021-27278 | High | 8.2 | 2021-04-22 | This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the… |
CVE-2020-7861 | High | 8.4 | 2021-04-22 | AnySupport (Remote support solution) before 2019.3.21.0 allows directory traversing because of swprintf function to copy file from a management PC to a client… |
CVE-2020-7858 | Medium | 6.8 | 2021-04-22 | There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhost and an attacker ca… |
CVE-2021-29466 | Medium | 6.5 | 2021-04-22 | Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is able to read local files from the serve… |
CVE-2021-20023 | Medium | 4.9 | 2021-04-20 | SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host. |
CVE-2021-27030 | High | 7.8 | 2021-04-19 | A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s Review causing it… |
CVE-2021-22720 | High | 7.2 | 2021-04-13 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could a… |
CVE-2021-22719 | High | 8.8 | 2021-04-13 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could a… |
CVE-2021-22718 | High | 7.8 | 2021-04-13 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could a… |
CVE-2021-22717 | High | 8.8 | 2021-04-13 | A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could a… |
CVE-2021-29425 | Medium | 4.8 | 2021-04-13 | In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result wou… |
CVE-2021-22190 | High | 8.5 | 2021-04-12 | A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token |
CVE-2021-25361 | High | 7.9 | 2021-04-09 | An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of system pro… |
CVE-2020-24137 | Medium | 5.3 | 2021-04-07 | Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the path parameter… |
CVE-2020-24136 | High | 8.6 | 2021-04-07 | Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the pagename parameter to wex/htm… |
CVE-2021-20692 | High | 7.1 | 2021-04-07 | Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker to create or overwrite files by leading… |
CVE-2020-13419 | Medium | 5.3 | 2021-04-06 | OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task. |
CVE-2021-28658 | Medium | 5.3 | 2021-04-06 | In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file… |
CVE-2021-28172 | High | 7.5 | 2021-04-06 | There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this le… |
CVE-2021-28209 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Delete video file function) does not filter the specific parameter. As obtaining the administ… |
CVE-2021-28208 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Get video file function) does not filter the specific parameter. As obtaining the administrat… |
CVE-2021-28207 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Get Help file function) does not filter the specific parameter. As obtaining the administrato… |
CVE-2021-28206 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Record video file function) does not filter the specific parameter. As obtaining the administ… |
CVE-2021-28205 | Medium | 4.9 | 2021-04-06 | The specific function in ASUS BMC’s firmware Web management page (Delete SOL video file function) does not filter the specific parameter. As obtaining the admi… |
CVE-2020-21590 | Medium | 4.3 | 2021-04-02 | Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbitrary directories via the dir parameter. |
CVE-2021-3374 | Medium | 5.3 | 2021-04-02 | Directory traversal in RStudio Shiny Server before 1.5.16 allows attackers to read the application source code, involving an encoded slash. |
CVE-2021-20078 | Critical | 9.1 | 2021-04-01 | Manage Engine OpManager builds below 125346 are vulnerable to a remote denial of service vulnerability due to a path traversal issue in spark gateway component… |
CVE-2021-27276 | High | 7.1 | 2021-03-29 | This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although… |
CVE-2021-27275 | High | 8.3 | 2021-03-29 | This vulnerability allows remote attackers to disclose sensitive information and delete arbitrary files on affected installations of NETGEAR ProSAFE Network Ma… |
CVE-2021-27272 | High | 7.1 | 2021-03-29 | This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Network Management System 1.6.0.26. Although… |
CVE-2021-29417 | Critical | 9.8 | 2021-03-29 | gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directory traversal. |
CVE-2021-20206 | High | 7.2 | 2021-03-26 | An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field… |
CVE-2020-10584 | High | 7.5 | 2021-03-25 | A directory traversal on the /admin/search_by.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to read arbitrary serv… |
CVE-2020-10579 | High | 7.5 | 2021-03-25 | A directory traversal on the /admin/sysmon.php script of Invigo Automatic Device Management (ADM) through 5.0 allows remote attackers to list the content of ar… |
CVE-2021-25367 | Low | 3.7 | 2021-03-25 | Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without permission. |
CVE-2020-26279 | High | 7.7 | 2021-03-24 | go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipfs before version 0.8.0-rc1, it is possi… |
CVE-2021-1436 | Medium | 4.4 | 2021-03-24 | A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path traversal attacks and obtain read acces… |
CVE-2021-1435 | High | 7.2 | 2021-03-24 | A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary commands that can be executed as the r… |
CVE-2021-1385 | Medium | 6.5 | 2021-03-24 | A vulnerability in the Cisco IOx application hosting environment of multiple Cisco platforms could allow an authenticated, remote attacker to conduct directory… |
CVE-2020-15809 | Medium | 6.5 | 2021-03-24 | spxmanage on certain SpinetiX devices allows requests that access unintended resources because of SSRF and Path Traversal. This affects HMP350, HMP300, and DiV… |
CVE-2021-21402 | High | 7.7 | 2021-03-23 | Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted requests will allow arbitrary file read from… |
CVE-2021-21357 | High | 8.3 | 2021-03-23 | TYPO3 is an open source PHP based web content management system. In TYPO3 before versions 8.7.40, 9.5.25, 10.4.14, 11.1.1 due to improper input validation, att… |
CVE-2020-13924 | High | 7.5 | 2021-03-17 | In Apache Ambari versions 2.6.2.2 and earlier, malicious users can construct file names for directory traversal and traverse to other directories to download f… |
CVE-2021-20218 | High | 7.4 | 2021-03-16 | A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container to cause applications using the fabric… |
CVE-2020-29556 | Medium | 5.5 | 2021-03-15 | The Backup functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to read arbitrary local files on the underlying server by exploiting… |
CVE-2020-29555 | High | 8.1 | 2021-03-15 | The BackupDelete functionality in Grav CMS through 1.7.0-rc.17 allows an authenticated attacker to delete arbitrary files on the underlying server by exploitin… |
CVE-2021-23357 | Low | 3.3 | 2021-03-15 | All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOrUpdateApi function. This function is ab… |
CVE-2020-5016 | Medium | 6.5 | 2021-03-10 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. When application security is disab… |
CVE-2021-20669 | Medium | 4.7 | 2021-03-10 | Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read and/or delete an arbitrary path via a sp… |
CVE-2021-20668 | Low | 2.7 | 2021-03-10 | Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read an arbitrary path via a specially crafte… |
CVE-2021-26294 | High | 7.5 | 2021-03-07 | An issue was discovered in AfterLogic Aurora through 7.7.9 and WebMail Pro through 7.7.9. They allow directory traversal to read files (such as a data/settings… |
CVE-2021-26814 | High | 8.8 | 2021-03-06 | Wazuh API in Wazuh from 4.0.0 to 4.0.3 allows authenticated users to execute arbitrary code with administrative privileges via /manager/files URI. An authentic… |
CVE-2021-28042 | High | 7.8 | 2021-03-05 | Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload feature or the MO Connect component. This… |
CVE-2020-29134 | High | 8.6 | 2021-03-05 | The TOTVS Fluig platform allows path traversal through the parameter "file = .. /" encoded in base64. This affects all versions Fluig Lake 1.7.0, Fluig 1.6.5 a… |
CVE-2021-26293 | Critical | 9.8 | 2021-03-04 | An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allow directory traversal to create new fil… |
CVE-2021-26028 | Medium | 5.5 | 2021-03-04 | An issue was discovered in Joomla! 3.0.0 through 3.9.24. Extracting an specifilcy crafted zip package could write files outside of the intended path. |
CVE-2021-27065 | High | 7.8 | 2021-03-03 | Microsoft Exchange Server Remote Code Execution Vulnerability |
CVE-2021-21514 | Medium | 4.9 | 2021-03-02 | Dell EMC OpenManage Server Administrator (OMSA) versions 9.5 and prior contain a path traversal vulnerability. A remote user with admin privileges could potent… |
CVE-2021-22114 | Medium | 5.3 | 2021-03-01 | Addresses partial fix in CVE-2018-1263. Spring-integration-zip, versions prior to 1.0.4, exposes an arbitrary file write vulnerability, that can be achieved us… |
CVE-2021-25833 | Critical | 9.8 | 2021-03-01 | A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21. The file extension is controlled by an attacker… |
CVE-2020-9479 | Medium | 5.5 | 2021-03-01 | When loading a UDF, a specially crafted zip file could allow files to be placed outside of the UDF deployment directory. This issue affected Apache AsterixDB u… |
CVE-2021-25282 | Critical | 9.1 | 2021-02-27 | An issue was discovered in through SaltStack Salt before 3002.5. The salt.wheel.pillar_roots.write method is vulnerable to directory traversal. |
CVE-2021-21298 | Low | 3.5 | 2021-02-26 | Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vulnerability which allows arbitrary path… |
CVE-2021-21064 | Medium | 4.9 | 2021-02-25 | Magento UPWARD-php version 1.1.4 (and earlier) is affected by a Path traversal vulnerability in Magento UPWARD Connector version 1.1.2 (and earlier) due to the… |
CVE-2021-21972 | Critical | 9.8 | 2021-02-24 | The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor with network access to port 443 may exp… |
CVE-2021-20661 | High | 8.1 | 2021-02-24 | Directory traversal vulnerability in SolarView Compact SV-CPT-MC310 prior to Ver.6.5 allows authenticated attackers to delete arbitrary files and/or directorie… |
CVE-2021-20247 | High | 7.4 | 2021-02-23 | A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not occur allowing a malicious or compromis… |
CVE-2021-22651 | High | 7.8 | 2021-02-23 | When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot Network Rendering ve… |
CVE-2021-26725 | High | 7.2 | 2021-02-22 | Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticated administrator to read-protected syst… |
CVE-2020-29453 | Medium | 5.3 | 2021-02-22 | The CachingResourceDownloadRewriteRule class in Jira Server and Jira Data Center before version 8.5.11, from 8.6.0 before 8.13.3, and from 8.14.0 before 8.15.0… |
CVE-2021-27328 | Medium | 6.5 | 2021-02-19 | Yeastar NeoGate TG400 91.3.0.3 devices are affected by Directory Traversal. An authenticated user can decrypt firmware and can read sensitive information, such… |
CVE-2020-9050 | High | 7.5 | 2021-02-19 | Path Traversal vulnerability exists in Metasys Reporting Engine (MRE) Web Services which could allow a remote unauthenticated attacker to access and download a… |
CVE-2021-23340 | High | 7.1 | 2021-02-18 | This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAction function of the CustomReportControl… |
CVE-2021-20354 | High | 7.5 | 2021-02-18 | IBM WebSphere Application Server 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories. An attacker could send a specially-crafted URL reques… |
CVE-2021-27367 | High | 7.5 | 2021-02-17 | Controller/Backend/FileEditController.php and Controller/Backend/FilemanagerController.php in Bolt before 4.1.13 allow Directory Traversal. |