CWE-22 · Path Traversal (page 63)
Page 63 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-10010 | High | 7.8 | 2020-12-08 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A… |
CVE-2020-29600 | Critical | 9.8 | 2020-12-07 | In AWStats through 7.7, cgi-bin/awstats.pl?config= accepts an absolute pathname, even though it was intended to only read a file in the /etc/awstats/awstats.co… |
CVE-2020-29529 | High | 7.5 | 2020-12-03 | HashiCorp go-slug up to 0.4.3 did not fully protect against directory traversal while unpacking tar archives, and protections could be bypassed with specific c… |
CVE-2020-28993 | High | 7.5 | 2020-12-01 | A Directory Traversal vulnerability exists in ATX miniCMTS200a Broadband Gateway through 2.0 and Pico CMTS through 2.0. Successful exploitation of this vulnera… |
CVE-2020-29373 | Medium | 6.5 | 2020-11-28 | An issue was discovered in fs/io_uring.c in the Linux kernel before 5.6. It unsafely handles the root directory during path lookups, and thus a process inside… |
CVE-2017-15684 | High | 7.5 | 2020-11-27 | Crafter CMS Crafter Studio 3.0.1 has a directory traversal vulnerability which allows unauthenticated attackers to view files from the operating system. |
CVE-2017-15681 | Critical | 9.8 | 2020-11-27 | In Crafter CMS Crafter Studio 3.0.1 a directory traversal vulnerability exists which allows unauthenticated attackers to overwrite files from the operating sys… |
CVE-2019-19877 | Medium | 5.3 | 2020-11-27 | An issue was discovered in B&R Industrial Automation APROL before R4.2 V7.08. An attacker can get access to sensitive information outside the working directory… |
CVE-2020-13886 | Medium | 5.3 | 2020-11-26 | Intelbras TIP 200 60.61.75.15, TIP 200 LITE 60.61.75.15, and TIP 300 65.61.75.22 devices allow cgi-bin/cgiServer.exx?page=../ Directory Traversal. |
CVE-2020-4000 | High | 8.8 | 2020-11-24 | The SD-WAN Orchestrator 3.3.2 prior to 3.3.2 P3, 3.4.x prior to 3.4.4, and 4.0.x prior to 4.0.1 allows for executing files through directory traversal. An auth… |
CVE-2020-28348 | Medium | 6.5 | 2020-11-24 | HashiCorp Nomad and Nomad Enterprise 0.9.0 up to 0.12.7 client Docker file sandbox feature may be subverted when not explicitly disabled or when using a volume… |
CVE-2020-15929 | Critical | 9.8 | 2020-11-24 | In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters passed to system/runners/HTMLRunner.cfm allow an attacker to write an arbitrary CFM f… |
CVE-2020-15928 | Medium | 5.3 | 2020-11-24 | In Ortus TestBox 2.4.0 through 4.1.0, unvalidated query string parameters to test-browser/index.cfm allow directory traversal. |
CVE-2020-15246 | High | 7.5 | 2020-11-23 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.421 and before version 1.0.469, an… |
CVE-2020-13355 | High | 7.5 | 2020-11-19 | An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.14. A path traversal is found in LFS Upload that allows attacker to overwri… |
CVE-2020-28574 | High | 7.5 | 2020-11-18 | A unauthenticated path traversal arbitrary remote file deletion vulnerability in Trend Micro Worry-Free Business Security 10 SP1 could allow an unauthenticated… |
CVE-2020-26078 | Medium | 6.5 | 2020-11-18 | A vulnerability in the file system of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to overwrite files on an affected sy… |
CVE-2020-26405 | High | 7.1 | 2020-11-17 | Path traversal vulnerability in package upload functionality in GitLab CE/EE starting from 12.8 allows an attacker to save packages in arbitrary locations. Aff… |
CVE-2020-27553 | High | 7.5 | 2020-11-17 | In BASETech GE-131 BT-1837836 firmware 20180921, the web-server on the system is configured with the option “DocumentRoot /etc“. This allows an attacker with n… |
CVE-2020-8271 | Critical | 9.8 | 2020-11-16 | Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8 |
CVE-2020-27385 | High | 8.1 | 2020-11-12 | Incorrect Access Control in the FileEditor (/Admin/Views/FileEditor/) in FlexDotnetCMS before v1.5.11 allows an authenticated remote attacker to read and write… |
CVE-2020-12315 | Critical | 9.8 | 2020-11-12 | Path traversal in the Intel(R) EMA before version 1.3.3 may allow an unauthenticated user to potentially enable escalation of privilege via network access. |
CVE-2020-25074 | Critical | 9.8 | 2020-11-10 | The cache action in action/cache.py in MoinMoin through 1.9.10 allows directory traversal through a crafted HTTP request. An attacker who can upload attachment… |
CVE-2020-14366 | Medium | 6.8 | 2020-11-09 | A vulnerability was found in keycloak, where path traversal using URL-encoded path segments in the request is possible because the resources endpoint applies a… |
CVE-2020-24406 | Low | 3.7 | 2020-11-09 | When in maintenance mode, Magento version 2.4.0 and 2.3.4 (and earlier) are affected by an information disclosure vulnerability that could expose the installat… |
CVE-2020-3588 | High | 7.3 | 2020-11-06 | A vulnerability in virtualization channel messaging in Cisco Webex Meetings Desktop App for Windows could allow a local attacker to execute arbitrary code on a… |
CVE-2020-27128 | Medium | 6.5 | 2020-11-06 | A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an authenticated, remote attacker to write arbitrary files to an… |
CVE-2020-12147 | Medium | 6.6 | 2020-11-05 | In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can make unauthorized MySQL queries against the Orchest… |
CVE-2020-12146 | Medium | 6.6 | 2020-11-05 | In Silver Peak Unity Orchestrator versions prior to 8.9.11+, 8.10.11+, or 9.0.1+, an authenticated user can access, modify, and delete restricted files on the… |
CVE-2020-7763 | High | 7.5 | 2020-11-05 | This affects the package phantom-html-to-pdf before 0.6.1. |
CVE-2020-7762 | Medium | 6.5 | 2020-11-05 | This affects the package jsreport-chrome-pdf before 1.10.0. |
CVE-2020-7758 | High | 7.5 | 2020-11-02 | This affects versions of package browserless-chrome before 1.40.2-chrome-stable. User input flowing from the workspace endpoint gets used to create a file path… |
CVE-2020-7757 | Medium | 6.5 | 2020-11-02 | This affects all versions of package droppy. It is possible to traverse directories to fetch configuration files from a droopy server. |
CVE-2020-9368 | High | 7.5 | 2020-11-02 | The Module Olea Gift On Order module through 5.0.8 for PrestaShop enables an unauthenticated user to read arbitrary files on the server via getfile.php?file=/… |
CVE-2020-15703 | Medium | 4.0 | 2020-10-31 | There is no input validation on the Locale property in an apt transaction. An unprivileged user can supply a full path to a writable directory, which lets aptd… |
CVE-2020-25780 | High | 7.5 | 2020-10-29 | In CommCell in Commvault before 14.68, 15.x before 15.58, 16.x before 16.44, 17.x before 17.29, and 18.x before 18.13, Directory Traversal can occur such that… |
CVE-2020-27993 | Medium | 5.3 | 2020-10-29 | Hrsale 2.0.0 allows download?type=files&filename=../ directory traversal to read arbitrary files. |
CVE-2020-24990 | High | 7.5 | 2020-10-28 | An issue was discovered in QSC Q-SYS Core Manager 8.2.1. By utilizing the TFTP service running on UDP port 69, a remote attacker can perform a directory traver… |
CVE-2020-4782 | Medium | 6.5 | 2020-10-28 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially… |
CVE-2020-8254 | High | 8.8 | 2020-10-28 | A vulnerability in the Pulse Secure Desktop Client < 9.1R9 has Remote Code Execution (RCE) if users can be convinced to connect to a malicious server. This vul… |
CVE-2020-9782 | High | 7.5 | 2020-10-27 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Catalina 10.15.2, Security Update… |
CVE-2020-27160 | Critical | 9.8 | 2020-10-27 | Addressed remote code execution vulnerability in AvailableApps.php that allowed escalation of privileges in Western Digital My Cloud NAS devices prior to 5.04… |
CVE-2020-9920 | Critical | 9.1 | 2020-10-22 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 13.6 and iPadOS 13.6, macOS Catalina 10.15.6, watchOS 6.2.8. A malicio… |
CVE-2020-26650 | Medium | 5.3 | 2020-10-22 | AtomXCMS 2.0 is affected by Arbitrary File Read via admin/dump.php |
CVE-2020-3550 | High | 8.1 | 2020-10-21 | A vulnerability in the sfmgr daemon of Cisco Firepower Management Center (FMC) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authen… |
CVE-2020-14864 | High | 7.5 | 2020-10-21 | Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Fusion Middleware (component: Installation). Supported versions that are… |
CVE-2019-17640 | Critical | 9.8 | 2020-10-15 | In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4… |
CVE-2020-15229 | High | 8.2 | 2020-10-14 | Singularity (an open source container platform) from version 3.1.1 through 3.6.3 has a vulnerability. Due to insecure handling of path traversal and the lack o… |
CVE-2020-15012 | High | 8.6 | 2020-10-12 | A Directory Traversal issue was discovered in Sonatype Nexus Repository Manager 2.x before 2.14.19. A user that requests a crafted path can traverse up the fil… |
CVE-2020-9106 | Medium | 4.6 | 2020-10-12 | HUAWEI P30 Pro versions earlier than 10.1.0.160(C00E160R2P8) have a path traversal vulnerability. The system does not sufficiently validate certain pathname, s… |
CVE-2020-4776 | High | 7.5 | 2020-10-12 | A path traversal vulnerability may impact IBM Curam Social Program Management 7.0.9 and 7.0.10, which could allow a remote attacker to traverse directories on… |
CVE-2020-3597 | Medium | 5.4 | 2020-10-08 | A vulnerability in the configuration restore feature of Cisco Nexus Data Broker software could allow an unauthenticated, remote attacker to perform a directory… |
CVE-2020-13347 | Critical | 9.1 | 2020-10-07 | A command injection vulnerability was discovered in Gitlab runner versions prior to 13.2.4, 13.3.2 and 13.4.1. When the runner is configured on a Windows syste… |
CVE-2020-25985 | High | 8.1 | 2020-10-07 | MonoCMS Blog 1.0 is affected by: Arbitrary File Deletion. Any authenticated user can delete files on and off the webserver (php files can be unlinked and not d… |
CVE-2020-26603 | Medium | 5.3 | 2020-10-06 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. Sticker Center allows directory traversal for an unprivileged proc… |
CVE-2020-15239 | Low | 3.5 | 2020-10-06 | In xmpp-http-upload before version 0.4.0, when the GET method is attacked, attackers can read files which have a `.data` suffix and which are accompanied by a… |
CVE-2020-1904 | Medium | 5.5 | 2020-10-06 | A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwr… |
CVE-2020-24219 | High | 7.5 | 2020-10-06 | An issue was discovered on URayTech IPTV/H.264/H.265 video encoders through 1.97. Attackers can send crafted unauthenticated HTTP requests to exploit path trav… |
CVE-2020-15236 | High | 8.6 | 2020-10-05 | In Wiki.js before version 2.5.151, directory traversal outside of Wiki.js context is possible when a storage module with local asset cache fetching is enabled… |
CVE-2020-15230 | High | 8.5 | 2020-10-02 | Vapor is a web framework for Swift. In Vapor before version 4.29.4, Attackers can access data at arbitrary filesystem paths on the same host as an application… |
CVE-2020-18191 | Critical | 9.1 | 2020-10-02 | GetSimpleCMS-3.3.15 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /GetSimpleCMS-3.3.15/admin/log.php |
CVE-2020-18190 | Critical | 9.1 | 2020-10-02 | Bludit v3.8.1 is affected by directory traversal. Remote attackers are able to delete arbitrary files via /admin/ajax/upload-profile-picture. |
CVE-2020-25623 | High | 7.5 | 2020-10-02 | Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker can send a crafted HTTP request to read arbitrary files, if http… |
CVE-2020-5789 | Medium | 6.5 | 2020-10-01 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to read the contents of arbitrary files on disk. |
CVE-2020-5788 | Medium | 6.5 | 2020-10-01 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/… |
CVE-2020-5787 | Medium | 6.5 | 2020-10-01 | Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/service… |
CVE-2020-21527 | High | 7.7 | 2020-09-30 | There is an Arbitrary file deletion vulnerability in halo v1.1.3. A backup function in the background allows a user, when deleting their backup files, to delet… |
CVE-2020-21526 | Critical | 9.8 | 2020-09-30 | An Arbitrary file writing vulnerability in halo v1.1.3. In an interface to write files in the background, a directory traversal check is performed on the input… |
CVE-2020-21525 | High | 7.5 | 2020-09-30 | Halo V1.1.3 is affected by: Arbitrary File reading. In an interface that reads files in halo v1.1.3, a directory traversal check is performed on the input path… |
CVE-2020-21522 | Critical | 9.8 | 2020-09-30 | An issue was discovered in halo V1.1.3. A Zip Slip Directory Traversal Vulnerability in the backend,the attacker can overwrite some files, such as ftl files… |
CVE-2020-21244 | Medium | 4.9 | 2020-09-30 | An issue was discovered in FrontAccounting 2.4.7. There is a Directory Traversal vulnerability that can empty folder via admin/inst_lang.php. |
CVE-2020-25149 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-25145 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-25144 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-25136 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-25134 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-25133 | High | 8.8 | 2020-09-25 | An issue was discovered in Observium Professional, Enterprise & Community 20.8.10631. It is vulnerable to directory traversal and local file inclusion due to t… |
CVE-2020-24621 | High | 8.8 | 2020-09-25 | A remote code execution (RCE) vulnerability was discovered in the htmlformentry (aka HTML Form Entry) module before 3.11.0 for OpenMRS. By leveraging path trav… |
CVE-2020-24626 | Critical | 9.8 | 2020-09-23 | Unathenticated directory traversal in the ReceiverServlet class doPost() method can lead to arbitrary remote code execution in HPE Pay Per Use (PPU) Utility Co… |
CVE-2020-24625 | High | 7.5 | 2020-09-23 | Unathenticated directory traversal in the ReceiverServlet class doGet() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Serv… |
CVE-2020-24624 | High | 7.5 | 2020-09-23 | Unathenticated directory traversal in the DownloadServlet class execute() method can lead to arbitrary file reads in HPE Pay Per Use (PPU) Utility Computing Se… |
CVE-2020-3143 | High | 7.2 | 2020-09-23 | A vulnerability in the video endpoint API (xAPI) of Cisco TelePresence Collaboration Endpoint (CE) Software, Cisco TelePresence Codec (TC) Software, and Cisco… |
CVE-2020-3130 | Medium | 6.5 | 2020-09-23 | A vulnerability in the web management interface of Cisco Unity Connection could allow an authenticated remote attacker to overwrite files on the underlying fil… |
CVE-2020-14028 | High | 7.2 | 2020-09-22 | An issue was discovered in Ozeki NG SMS Gateway through 4.17.6. By leveraging a path traversal vulnerability in the Autoreply module's Script Name, an attacker… |
CVE-2020-5605 | Medium | 4.3 | 2020-09-18 | Directory traversal vulnerability in WHR-G54S firmware 1.43 and earlier allows an attacker to access sensitive information such as setting values via unspecifi… |
CVE-2020-25734 | Medium | 5.3 | 2020-09-18 | webTareas through 2.1 allows files/Default/ Directory Listing. |
CVE-2020-15182 | High | 8.4 | 2020-09-17 | The SOY Inquiry component of SOY CMS is affected by Cross-site Request Forgery (CSRF) and Remote Code Execution (RCE). The vulnerability affects versions 2.0.0… |
CVE-2020-11700 | Medium | 6.5 | 2020-09-17 | An issue was discovered in Titan SpamTitan 7.07. Improper sanitization of the parameter fname, used on the page certs-x.php, would allow an attacker to retriev… |
CVE-2020-7529 | Medium | 5.5 | 2020-09-16 | A CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Transversal') vulnerability exists in SCADAPack 7x Remote Connect (V3.6.3.574 and p… |
CVE-2020-2278 | Medium | 6.5 | 2020-09-16 | Jenkins Storable Configs Plugin 1.0 and earlier does not restrict the user-specified file name, allowing attackers with Job/Configure permission to replace any… |
CVE-2020-2277 | Medium | 6.5 | 2020-09-16 | Jenkins Storable Configs Plugin 1.0 and earlier allows users with Job/Read permission to read arbitrary files on the Jenkins controller. |
CVE-2020-2275 | Medium | 6.5 | 2020-09-16 | Jenkins Copy data to workspace Plugin 1.0 and earlier does not limit which directories can be copied from the Jenkins controller to job workspaces, allowing at… |
CVE-2020-2254 | Medium | 6.5 | 2020-09-16 | Jenkins Blue Ocean Plugin 1.23.2 and earlier provides an undocumented feature flag that, when enabled, allows an attacker with Job/Configure or Job/Create perm… |
CVE-2020-7268 | Medium | 4.3 | 2020-09-16 | Path Traversal vulnerability in McAfee McAfee Email Gateway (MEG) prior to 7.6.406 allows remote attackers to traverse the file system to access files or direc… |
CVE-2020-4711 | Medium | 6.5 | 2020-09-15 | IBM Spectrum Protect Plus 10.1.0 through 10.1.6 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted… |
CVE-2020-25540 | High | 7.5 | 2020-09-14 | ThinkAdmin v6 is affected by a directory traversal vulnerability. An unauthorized attacker can read arbitrarily file on a remote server via GET request encode… |
CVE-2020-25248 | High | 7.5 | 2020-09-11 | An issue was discovered in Hyland OnBase through 16.0.2.83 and below, 17.0.2.109 and below, 18.0.0.37 and below, 19.8.16.1000 and below and 20.3.10.1000 and be… |
CVE-2020-25247 | High | 7.5 | 2020-09-11 | An issue was discovered in Hyland OnBase through 18.0.0.32 and 19.x through 19.8.9.1000. Directory traversal exists for writing to files, as demonstrated by th… |
CVE-2019-20916 | High | 7.5 | 2020-09-04 | The pip package before 19.2 for Python allows Directory Traversal when a URL is given in an install command, because a Content-Disposition header can have ../… |
CVE-2020-3365 | Medium | 4.3 | 2020-09-04 | A vulnerability in the directory permissions of Cisco Enterprise NFV Infrastructure Software (NFVIS) could allow an authenticated, remote attacker to perform a… |