CWE-22 · Path Traversal (page 65)
Page 65 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-0179 | High | 7.8 | 2020-06-11 | In doSendObjectInfo of MtpServer.cpp, there is a possible path traversal attack due to insufficient input validation. This could lead to local escalation of pr… |
CVE-2020-11798 | Medium | 5.3 | 2020-06-10 | A Directory Traversal vulnerability in the web conference component of Mitel MiCollab AWV before 8.1.2.4 and 9.x before 9.1.3 could allow an attacker to access… |
CVE-2020-6110 | High | 8.8 | 2020-06-08 | An exploitable partial path traversal vulnerability exists in the way Zoom Client version 4.6.10 processes messages including shared code snippets. A specially… |
CVE-2020-6109 | Critical | 9.8 | 2020-06-08 | An exploitable path traversal vulnerability exists in the Zoom client, version 4.6.10 processes messages including animated GIFs. A specially crafted chat mess… |
CVE-2020-12851 | High | 8.1 | 2020-06-04 | Pydio Cells 2.0.4 allows an authenticated user to write or overwrite existing files in another user’s personal and cells folders (repositories) by uploading a… |
CVE-2020-13836 | High | 7.5 | 2020-06-04 | An issue was discovered on Samsung mobile devices with O(8.x), P(9.0), and Q(10.0) software. HWRResProvider allows path traversal for data exposure. The Samsun… |
CVE-2019-16384 | Medium | 6.5 | 2020-06-04 | Cybele Thinfinity VirtualUI 2.5.17.2 allows ../ path traversal that can be used for data exfiltration. This enables files outside of the web directory to be re… |
CVE-2020-13818 | High | 7.5 | 2020-06-04 | In Zoho ManageEngine OpManager before 125144, when <cachestart> is used, directory traversal validation can be bypassed. |
CVE-2020-13795 | Medium | 5.3 | 2020-06-03 | An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/template.class.php mishandles ../ and ..\ s… |
CVE-2020-13792 | Medium | 4.3 | 2020-06-03 | PlayTube 1.8 allows disclosure of user details via ajax.php?type=../admin-panel/autoload&page=manage-users directory traversal, aka local file inclusion. |
CVE-2020-5410 | High | 7.5 | 2020-06-02 | Spring Cloud Config, versions 2.2.x prior to 2.2.3, versions 2.1.x prior to 2.1.9, and older unsupported versions allow applications to serve arbitrary configu… |
CVE-2020-13227 | Medium | 5.3 | 2020-06-02 | An issue was discovered in Sysax Multi Server 6.90. An attacker can determine the username (under which the web server is running) by triggering an invalid pat… |
CVE-2014-8939 | Medium | 5.3 | 2020-06-01 | Lexiglot through 2014-11-20 allows remote attackers to obtain sensitive information (full path) via an include/smarty/plugins/modifier.date_format.php request… |
CVE-2014-7174 | Medium | 5.3 | 2020-06-01 | FarLinX X25 Gateway through 2014-09-25 allows directory traversal via the log-handling feature. |
CVE-2020-7650 | Medium | 6.5 | 2020-05-29 | All versions of snyk-broker after 4.72.0 including and before 4.73.1 are vulnerable to Arbitrary File Read. It allows arbitrary file reads to users with access… |
CVE-2020-7648 | Medium | 6.5 | 2020-05-29 | All versions of snyk-broker before 4.72.2 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users who have access to Snyk's internal ne… |
CVE-2020-7652 | Medium | 6.5 | 2020-05-29 | All versions of snyk-broker before 4.80.0 are vulnerable to Arbitrary File Read. It allows arbitrary file reads for users with access to Snyk's internal networ… |
CVE-2020-7651 | Medium | 4.3 | 2020-05-29 | All versions of snyk-broker before 4.79.0 are vulnerable to Arbitrary File Read. It allows partial file reads for users who have access to Snyk's internal netw… |
CVE-2020-8604 | High | 7.5 | 2020-05-27 | A vulnerability in Trend Micro InterScan Web Security Virtual Appliance 6.5 may allow remote attackers to disclose sensitive informatoin on affected installati… |
CVE-2020-12392 | Medium | 5.5 | 2020-05-26 | The 'Copy as cURL' feature of Devtools' network tab did not properly escape the HTTP POST data of a request, which can be controlled by the website. If a user… |
CVE-2020-1082 | High | 7.8 | 2020-05-21 | An elevation of privilege vulnerability exists in Windows Error Reporting (WER) when WER handles and executes files. The vulnerability could allow elevation of… |
CVE-2020-5752 | High | 7.8 | 2020-05-21 | Relative path traversal in Druva inSync Windows Client 6.6.3 allows a local, unauthenticated attacker to execute arbitrary operating system commands with SYSTE… |
CVE-2020-13093 | Medium | 5.3 | 2020-05-15 | iSpyConnect.com Agent DVR before 2.7.1.0 allows directory traversal. |
CVE-2019-17572 | Medium | 5.3 | 2020-05-14 | In Apache RocketMQ 4.2.0 to 4.6.0, when the automatic topic creation in the broker is turned on by default, an evil topic like “../../../../topic2020” is sent… |
CVE-2020-11073 | High | 7.9 | 2020-05-13 | In Autoswitch Python Virtualenv before version 0.16.0, a user who enters a directory with a malicious `.venv` file could run arbitrary code without any user in… |
CVE-2020-12832 | Critical | 9.8 | 2020-05-13 | WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly… |
CVE-2020-8159 | Critical | 9.8 | 2020-05-12 | There is a vulnerability in actionpack_page-caching gem < v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in rem… |
CVE-2020-7647 | Medium | 5.3 | 2020-05-11 | All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal v… |
CVE-2020-5834 | Medium | 5.3 | 2020-05-11 | Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size o… |
CVE-2020-12765 | Medium | 5.3 | 2020-05-09 | Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal. |
CVE-2020-12764 | Medium | 5.3 | 2020-05-09 | Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal. |
CVE-2020-11531 | High | 8.8 | 2020-05-08 | The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the database schema name when handling a DR-SCH… |
CVE-2020-12737 | Medium | 6.5 | 2020-05-08 | An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. Authenticated users can perform a path traversal using double escaped characters, enabling read… |
CVE-2020-12026 | High | 8.8 | 2020-05-08 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to… |
CVE-2020-12010 | High | 7.1 | 2020-05-08 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow an authenticated user t… |
CVE-2020-12006 | Critical | 9.8 | 2020-05-08 | Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. Multiple relative path traversal vulnerabilities exist that may allow a low privilege user to… |
CVE-2020-10794 | Critical | 9.8 | 2020-05-07 | Gira TKS-IP-Gateway 4.0.7.7 is vulnerable to unauthenticated path traversal that allows an attacker to download the application database. This can be combined… |
CVE-2020-4430 | Medium | 4.3 | 2020-05-07 | IBM Data Risk Manager 2.0.1, 2.0.2, 2.0.3, and 2.0.4 could allow a remote authenticated attacker to traverse directories on the system. An attacker could send… |
CVE-2020-12116 | High | 7.5 | 2020-05-07 | Zoho ManageEngine OpManager Stable build before 124196 and Released build before 125125 allows an unauthenticated attacker to read arbitrary files on the serve… |
CVE-2020-5744 | Medium | 4.9 | 2020-05-07 | Relative Path Traversal in TCExam 14.2.2 allows a remote, authenticated attacker to read the contents of arbitrary files on disk. |
CVE-2020-12448 | Medium | 5.3 | 2020-05-07 | GitLab EE 12.8 and later allows Exposure of Sensitive Information to an Unauthorized Actor via NuGet. |
CVE-2020-11431 | Critical | 9.1 | 2020-05-07 | The documentation component in i-net Clear Reports 16.0 to 19.2, HelpDesk 8.0 to 8.3, and PDFC 4.3 to 6.2 allows a remote unauthenticated attacker to read arbi… |
CVE-2020-8983 | High | 7.5 | 2020-05-07 | An arbitrary file write issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases… |
CVE-2020-8982 | High | 7.5 | 2020-05-07 | An unauthenticated arbitrary file read issue exists in all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent… |
CVE-2020-7473 | High | 7.5 | 2020-05-07 | In certain situations, all versions of Citrix ShareFile StorageZones (aka storage zones) Controller, including the most recent 5.10.x releases as of May 2020… |
CVE-2019-18871 | High | 8.8 | 2020-05-07 | A path traversal in debug.php accessed via default.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to upload arbitrary files… |
CVE-2019-18870 | Medium | 6.5 | 2020-05-07 | A path traversal via the iniFile parameter in excel.php in Blaauw Remote Kiln Control through v3.00r4 allows an authenticated attacker to download arbitrary fi… |
CVE-2020-3187 | Critical | 9.1 | 2020-05-06 | A vulnerability in the web services interface of Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow… |
CVE-2020-10859 | Medium | 6.5 | 2020-05-05 | Zoho ManageEngine Desktop Central before 10.0.484 allows authenticated arbitrary file writes during ZIP archive extraction via Directory Traversal in a crafted… |
CVE-2020-10634 | Critical | 9.1 | 2020-05-05 | SAE IT-systems FW-50 Remote Telemetry Unit (RTU). A specially crafted request could allow an attacker to view the file structure of the affected device and acc… |
CVE-2020-12649 | High | 7.5 | 2020-05-05 | Gurbalib through 2020-04-30 allows lib/cmds/player/help.c directory traversal for reading administrative paths. |
CVE-2020-12640 | Critical | 9.8 | 2020-05-04 | Roundcube Webmail before 1.4.4 allows attackers to include local files and execute code via directory traversal in a plugin name to rcube_plugin_api.php. |
CVE-2020-4209 | Medium | 5.4 | 2020-05-04 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted… |
CVE-2020-12475 | Medium | 5.5 | 2020-05-04 | TP-Link Omada Controller Software 3.2.6 allows Directory Traversal for reading arbitrary files via com.tp_link.eap.web.portal.PortalController.getAdvertiseFile… |
CVE-2020-1631 | High | 8.8 | 2020-05-04 | A vulnerability in the HTTP/HTTPS service used by J-Web, Web Authentication, Dynamic-VPN (DVPN), Firewall Authentication Pass-Through with Web-Redirect, and Ze… |
CVE-2020-11652 | Medium | 6.5 | 2020-04-30 | An issue was discovered in SaltStack Salt before 2019.2.4 and 3000 before 3000.2. The salt-master process ClearFuncs class allows access to some methods that i… |
CVE-2020-10691 | Medium | 5.2 | 2020-04-30 | An archive traversal flaw was found in all ansible-engine versions 2.9.x prior to 2.9.7, when running ansible-galaxy collection install. When extracting a coll… |
CVE-2020-12479 | High | 8.8 | 2020-04-29 | TeamPass 2.1.27.36 allows any authenticated TeamPass user to trigger a PHP file include vulnerability via a crafted HTTP request with sources/users.queries.php… |
CVE-2020-12251 | Low | 2.2 | 2020-04-29 | An issue was discovered in Gigamon GigaVUE 5.5.01.11. The upload functionality allows an authenticated user to change the filename value (in the POST method) f… |
CVE-2020-12447 | High | 7.5 | 2020-04-29 | A Local File Inclusion (LFI) issue on Onkyo TX-NR585 1000-0000-000-0008-0000 devices allows remote unauthenticated users on the network to read sensitive files… |
CVE-2019-19102 | Medium | 5.5 | 2020-04-29 | A directory traversal vulnerability in SharpZipLib used in the upgrade service in B&R Automation Studio versions 4.0.x, 4.1.x and 4.2.x allow unauthenticated u… |
CVE-2020-12443 | Critical | 9.8 | 2020-04-29 | BigBlueButton before 2.2.6 allows remote attackers to read arbitrary files because the presfilename (lowercase) value can be a .pdf filename while the presFile… |
CVE-2020-12103 | High | 7.7 | 2020-04-28 | In Tiny File Manager 2.4.1 there is a vulnerability in the ajax file backup copy functionality which allows authenticated users to create backup copies of file… |
CVE-2020-12102 | High | 7.7 | 2020-04-28 | In Tiny File Manager 2.4.1, there is a Path Traversal vulnerability in the ajax recursive directory listing functionality. This allows authenticated users to e… |
CVE-2020-11420 | Medium | 6.5 | 2020-04-27 | UPS Adapter CS141 before 1.90 allows Directory Traversal. An attacker with Admin or Engineer login credentials could exploit the vulnerability by manipulating… |
CVE-2020-12265 | Critical | 9.8 | 2020-04-26 | The decompress package before 4.2.1 for Node.js is vulnerable to Arbitrary File Write via ../ in an archive member, when a symlink is used, because of Director… |
CVE-2020-6828 | High | 7.5 | 2020-04-24 | A malicious Android application could craft an Intent that would have been processed by Firefox for Android and potentially result in a file overwrite in the u… |
CVE-2020-12128 | High | 7.5 | 2020-04-24 | DONG JOO CHO File Transfer iFamily 2.1 allows directory traversal related to the ./etc/ path. |
CVE-2020-12112 | High | 7.5 | 2020-04-23 | BigBlueButton before 2.2.5 allows remote attackers to obtain sensitive files via Local File Inclusion. |
CVE-2020-1699 | High | 7.5 | 2020-04-21 | A path traversal flaw was found in the Ceph dashboard implemented in upstream versions v14.2.5, v14.2.6, v15.0.0 of Ceph storage and has been fixed in versions… |
CVE-2017-18824 | Low | 3.3 | 2020-04-20 | Certain NETGEAR devices are affected by directory traversal. This affects M4300-28G before 12.0.2.15, M4300-52G before 12.0.2.15, M4300-28G-POE+ before 12.0.2… |
CVE-2020-11819 | Critical | 9.8 | 2020-04-16 | In Rukovoditel 2.5.2, an attacker may inject an arbitrary .php file location instead of a language file and thus achieve command execution. |
CVE-2020-3252 | Medium | 6.5 | 2020-04-15 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication… |
CVE-2020-3251 | High | 8.8 | 2020-04-15 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication… |
CVE-2020-3249 | High | 7.5 | 2020-04-15 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication… |
CVE-2020-3248 | Critical | 9.8 | 2020-04-15 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication… |
CVE-2020-3247 | Critical | 9.8 | 2020-04-15 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication… |
CVE-2020-3239 | High | 8.8 | 2020-04-15 | Multiple vulnerabilities in the REST API of Cisco UCS Director and Cisco UCS Director Express for Big Data may allow a remote attacker to bypass authentication… |
CVE-2020-3177 | High | 7.5 | 2020-04-15 | A vulnerability in the Tool for Auto-Registered Phones Support (TAPS) of Cisco Unified Communications Manager (UCM) and Cisco Unified Communications Manager Se… |
CVE-2020-4272 | High | 8.8 | 2020-04-15 | IBM QRadar 7.3.0 to 7.3.3 Patch 2 could allow a remote attacker to include arbitrary files. A remote attacker could send a specially-crafted request specify a… |
CVE-2020-10506 | High | 7.5 | 2020-04-15 | The School Manage System before 2020, developed by ALLE INFORMATION CO., LTD., contains a vulnerability of Path Traversal, allowing attackers to access arbitra… |
CVE-2020-6225 | High | 8.8 | 2020-04-14 | SAP NetWeaver (Knowledge Management), versions (KMC-CM - 7.00, 7.01, 7.02, 7.30, 7.31, 7.40, 7.50 and KMC-WPC 7.30, 7.31, 7.40, 7.50), does not sufficiently va… |
CVE-2020-11738 | High | 7.5 | 2020-04-13 | The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to du… |
CVE-2020-11736 | Low | 3.9 | 2020-04-13 | fr-archive-libarchive.c in GNOME file-roller through 3.36.1 allows Directory Traversal during extraction because it lacks a check of whether a file's parent is… |
CVE-2020-11705 | Critical | 9.8 | 2020-04-12 | An issue was discovered in ProVide (formerly zFTPServer) through 13.1. /ajax/ImportCertificate allows an attacker to load an arbitrary certificate in .pfx form… |
CVE-2015-9546 | Medium | 4.8 | 2020-04-10 | An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06-16. In some cases, HTTP is used for an Inputmethod, rather th… |
CVE-2020-10631 | Critical | 9.8 | 2020-04-09 | An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control. |
CVE-2020-10619 | Critical | 9.1 | 2020-04-09 | An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control. |
CVE-2020-10977 | Medium | 5.5 | 2020-04-08 | GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects. |
CVE-2020-10366 | High | 7.5 | 2020-04-08 | LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365. |
CVE-2020-6974 | Critical | 9.8 | 2020-04-07 | Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories… |
CVE-2020-11596 | High | 7.5 | 2020-04-06 | A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. An unauthenticated attacker can make HTTP GET requests to a certain URL a… |
CVE-2020-7008 | High | 7.5 | 2020-04-03 | VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an… |
CVE-2020-11498 | High | 8.8 | 2020-04-02 | Slack Nebula through 1.1.0 contains a relative path vulnerability that allows a low-privileged attacker to execute code in the context of the root user via tun… |
CVE-2020-11491 | Medium | 4.9 | 2020-04-02 | Monitoring::Logs in Zen Load Balancer 3.10.1 allows remote authenticated admins to conduct absolute path traversal attacks, as demonstrated by a filelog=/etc/s… |
CVE-2020-8144 | High | 8.4 | 2020-04-01 | The UniFi Video Server v3.9.3 and prior (for Windows 7/8/10 x64) web interface Firmware Update functionality, under certain circumstances, does not validate fi… |
CVE-2020-11455 | Critical | 9.8 | 2020-04-01 | LimeSurvey before 4.1.12+200324 contains a path traversal vulnerability in application/controllers/admin/LimeSurveyFileManager.php. |
CVE-2020-10696 | High | 8.8 | 2020-03-31 | A path traversal flaw was found in Buildah in versions before 1.14.5. This flaw allows an attacker to trick a user into building a malicious container image ho… |
CVE-2020-4240 | Medium | 6.5 | 2020-03-31 | IBM Spectrum Protect Plus 10.1.0 through 10.1.5 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted… |
CVE-2020-11414 | High | 7.5 | 2020-03-31 | An issue was discovered in Progress Telerik UI for Silverlight before 2020.1.330. The RadUploadHandler class in RadUpload for Silverlight expects a web request… |