CWE-22 · Path Traversal (page 67)
Page 67 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-19628 | Critical | 9.8 | 2020-01-05 | In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry could lead to privilege escalation and… |
CVE-2019-11994 | Critical | 9.8 | 2020-01-03 | A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380 Gen 10 G, HPE SimpliVity 2600 Gen 10, S… |
CVE-2019-19088 | Critical | 9.8 | 2020-01-03 | Gitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Directory Traversal. |
CVE-2019-7751 | High | 7.5 | 2019-12-31 | A directory traversal and local file inclusion vulnerability in FPProducerInternetServer.exe in Ricoh MarcomCentral, formerly PTI Marketing, FusionPro VDP befo… |
CVE-2019-20085 | High | 7.5 | 2019-12-30 | TVT NVMS-1000 devices allow GET /.. Directory Traversal |
CVE-2019-19781 | Critical | 9.8 | 2019-12-27 | An issue was discovered in Citrix Application Delivery Controller (ADC) and Gateway 10.5, 11.1, 12.0, 12.1, and 13.0. They allow Directory Traversal. |
CVE-2019-6022 | Medium | 6.5 | 2019-12-26 | Directory traversal vulnerability in Cybozu Office 10.0.0 to 10.8.3 allows remote authenticated attackers to alter arbitrary files via the 'Customapp' function. |
CVE-2019-19141 | High | 8.8 | 2019-12-19 | The Camera Upload functionality in Plex Media Server through 1.18.2.2029 allows remote authenticated users to write files anywhere the user account running the… |
CVE-2019-7483 | High | 7.5 | 2019-12-19 | In SonicWall SMA100, an unauthenticated Directory Traversal vulnerability in the handleWAFRedirect CGI allows the user to test for the presence of a file on th… |
CVE-2019-15600 | High | 7.5 | 2019-12-18 | A Path traversal exists in http_server which allows an attacker to read arbitrary system files. |
CVE-2019-15596 | High | 7.5 | 2019-12-18 | A path traversal in statics-server exists in all version that allows an attacker to perform a path traversal when a symlink is used within the working director… |
CVE-2019-7289 | Medium | 5.5 | 2019-12-18 | A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in Shortcuts 2.1.3 for iOS. A local user ma… |
CVE-2019-19845 | Medium | 5.3 | 2019-12-18 | In Joomla! before 3.9.14, a missing access check in framework files could lead to a path disclosure. |
CVE-2019-19848 | High | 7.2 | 2019-12-17 | An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. It has been discovered that the extraction of manually uploaded ZIP… |
CVE-2019-19264 | High | 7.5 | 2019-12-17 | In Simplifile RecordFusion through 2019-11-25, the logs and hist parameters allow remote attackers to access local files via a logger/logs?/../ or logger/hist?… |
CVE-2019-19731 | High | 7.5 | 2019-12-16 | Roxy Fileman 1.4.5 for .NET is vulnerable to path traversal. A remote attacker can write uploaded files to arbitrary locations via the RENAMEFILE action. This… |
CVE-2019-19790 | Critical | 9.8 | 2019-12-13 | Path traversal in RadChart in Telerik UI for ASP.NET AJAX allows a remote attacker to read and delete an image with extension .BMP, .EXIF, .GIF, .ICON, .JPEG… |
CVE-2019-5251 | Medium | 5.5 | 2019-12-13 | There is a path traversal vulnerability in several Huawei smartphones. The system does not sufficiently validate certain pathnames from the application. An att… |
CVE-2019-16777 | High | 7.7 | 2019-12-13 | Versions of the npm CLI prior to 6.13.4 are vulnerable to an Arbitrary File Overwrite. It fails to prevent existing globally-installed binaries to be overwritt… |
CVE-2019-16776 | High | 7.7 | 2019-12-13 | Versions of the npm CLI prior to 6.13.3 are vulnerable to an Arbitrary File Write. It fails to prevent access to folders outside of the intended node_modules f… |
CVE-2019-18338 | High | 7.7 | 2019-12-12 | A vulnerability has been identified in Control Center Server (CCS) (All versions < V1.5.0). The Control Center Server (CCS) contains a directory traversal vuln… |
CVE-2019-13944 | Medium | 5.3 | 2019-12-12 | A vulnerability has been identified in EN100 Ethernet module DNP3 variant (All versions), EN100 Ethernet module IEC 61850 variant (All versions < V4.37), EN100… |
CVE-2019-16246 | Critical | 9.8 | 2019-12-12 | Intesync Solismed 3.3sp1 allows Local File Inclusion (LFI), a different vulnerability than CVE-2019-15931. This leads to unauthenticated code execution. |
CVE-2019-15931 | Critical | 9.8 | 2019-12-12 | Intesync Solismed 3.3sp allows Directory Traversal, a different vulnerability than CVE-2019-16246. |
CVE-2019-19374 | Critical | 9.1 | 2019-12-11 | An issue was discovered in core/assets/form/form_question_types/form_question_type_file_upload/form_question_type_file_upload.inc in Squiz Matrix CMS 5.5.0 pri… |
CVE-2019-19683 | Critical | 9.1 | 2019-12-09 | RoxyFileman, as shipped with nopCommerce v4.2.0, is vulnerable to ../ path traversal via d or f to Admin/RoxyFileman/ProcessRequest because of Libraries/Nop.Se… |
CVE-2019-14251 | High | 7.5 | 2019-12-09 | An issue was discovered in T24 in TEMENOS Channels R15.01. The login page presents JavaScript functions to access a document on the server once successfully au… |
CVE-2019-7195 | Critical | 9.8 | 2019-12-05 | This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend upd… |
CVE-2019-7194 | Critical | 9.8 | 2019-12-05 | This external control of file name or path vulnerability allows remote attackers to access or modify system files. To fix the vulnerability, QNAP recommend upd… |
CVE-2019-19229 | Medium | 6.5 | 2019-12-04 | admincgi-bin/service.fcgi on Fronius Solar Inverter devices before 3.14.1 (HM 1.12.1) allows action=download&filename= Directory Traversal. |
CVE-2019-19459 | Critical | 9.8 | 2019-12-03 | An issue was discovered in SALTO ProAccess SPACE 5.4.3.0. An attacker can write arbitrary content to arbitrary files, as demonstrated by CVE-2019-19458 files u… |
CVE-2019-19458 | High | 8.6 | 2019-12-03 | SALTO ProAccess SPACE 5.4.3.0 allows Directory Traversal in the Data Export feature. |
CVE-2014-9356 | High | 8.6 | 2019-12-02 | Path traversal vulnerability in Docker before 1.3.3 allows remote attackers to write to arbitrary files and bypass a container protection mechanism via a full… |
CVE-2015-2060 | Medium | 5.3 | 2019-11-29 | cabextract before 1.6 does not properly check for leading slashes when extracting files, which allows remote attackers to conduct absolute directory traversal… |
CVE-2019-18922 | High | 7.5 | 2019-11-29 | A Directory Traversal in the Web interface of the Allied Telesis AT-GS950/8 until Firmware AT-S107 V.1.1.3 [1.00.047] allows unauthenticated attackers to read… |
CVE-2019-19372 | High | 7.5 | 2019-11-28 | A downloadFile.php download_file path traversal vulnerability in rConfig through 3.9.3 allows attackers to list files in arbitrary folders and potentially down… |
CVE-2019-18253 | Critical | 10.0 | 2019-11-27 | An attacker could use specially crafted paths in a specific request to read or delete files from Relion 670 Series (versions 1p1r26, 1.2.3.17, 2.0.0.10, RES670… |
CVE-2019-10220 | High | 8.8 | 2019-11-27 | Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists. |
CVE-2015-9538 | Medium | 6.5 | 2019-11-26 | The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection. |
CVE-2011-4350 | Medium | 6.5 | 2019-11-26 | Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of a… |
CVE-2019-16765 | High | 7.4 | 2019-11-25 | If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbitrary code… |
CVE-2019-17406 | Medium | 5.3 | 2019-11-25 | Nokia IMPACT < 18A has path traversal that may lead to RCE if chained with CVE-2019-1743 |
CVE-2015-1396 | High | 7.5 | 2019-11-25 | A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file… |
CVE-2019-17404 | Medium | 4.3 | 2019-11-25 | Nokia IMPACT < 18A: allows full path disclosure |
CVE-2019-13157 | High | 7.5 | 2019-11-22 | nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences in a filename within nsz archive. |
CVE-2013-3311 | High | 7.5 | 2019-11-21 | Directory traversal vulnerability in the Loftek Nexus 543 IP Camera allows remote attackers to read arbitrary files via a .. (dot dot) in the URL of an HTTP GE… |
CVE-2019-16758 | High | 7.5 | 2019-11-21 | In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%… |
CVE-2019-10767 | High | 7.5 | 2019-11-21 | An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". It is exploited… |
CVE-2019-16540 | Medium | 6.5 | 2019-11-21 | A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the J… |
CVE-2019-10765 | Critical | 9.8 | 2019-11-20 | iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory. |
CVE-2019-3423 | Medium | 5.3 | 2019-11-18 | permission and access control vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can construct a URL for di… |
CVE-2019-18978 | Medium | 5.3 | 2019-11-14 | An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources be… |
CVE-2013-3073 | Critical | 9.8 | 2019-11-14 | A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34. |
CVE-2019-3662 | Medium | 6.5 | 2019-11-14 | Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to gain unint… |
CVE-2019-18951 | High | 7.5 | 2019-11-13 | SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files. |
CVE-2013-4657 | Critical | 9.8 | 2019-11-13 | Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service. |
CVE-2013-4654 | Critical | 9.8 | 2019-11-13 | Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND.. |
CVE-2013-4656 | Critical | 9.8 | 2019-11-13 | Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service. |
CVE-2019-18924 | Medium | 5.3 | 2019-11-12 | Systematic IRIS WebForms 5.4 is vulnerable to directory traversal. By manipulating variables that reference files with ../ (and variations), it is possible to… |
CVE-2019-17327 | High | 7.2 | 2019-11-08 | JEUS 7 Fix#0~5 and JEUS 8Fix#0~1 versions contains a directory traversal vulnerability caused by improper input parameter check when uploading installation fil… |
CVE-2019-16876 | High | 7.5 | 2019-11-07 | Portainer before 1.22.1 allows Directory Traversal. |
CVE-2019-15004 | High | 7.5 | 2019-11-07 | The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 befor… |
CVE-2019-15003 | Medium | 5.3 | 2019-11-07 | The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before 3.9.17, from 3.10.0 before 3.16.10, from 4.0.0 befor… |
CVE-2014-9014 | Medium | 4.3 | 2019-11-06 | Directory traversal vulnerability in the ajaxinit function in wpmarketplace/libs/cart.php in the WP Marketplace plugin before 2.4.1 for WordPress allows remote… |
CVE-2019-10218 | Medium | 6.5 | 2019-11-06 | A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client… |
CVE-2019-18665 | High | 7.5 | 2019-11-02 | The Log module in SECUDOS DOMOS before 5.6 allows local file inclusion. |
CVE-2019-13551 | Critical | 9.8 | 2019-10-31 | Advantech WISE-PaaS/RMM, Versions 3.3.29 and prior. Path traversal vulnerabilities are caused by a lack of proper validation of a user-supplied path prior to u… |
CVE-2019-17324 | Medium | 6.5 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows directory traversal by issuing a special HTTP POST request with ../ characters. This could lead to create… |
CVE-2019-17322 | Medium | 6.5 | 2019-10-30 | ClipSoft REXPERT 1.0.0.527 and earlier version allows arbitrary file creation via a POST request with the parameter set to the file path to be written. This ca… |
CVE-2019-3976 | High | 8.8 | 2019-10-29 | RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerability via the upgrade package's name fie… |
CVE-2019-10743 | Medium | 5.5 | 2019-10-29 | All versions of archiver allow attacker to perform a Zip Slip attack via the "unarchive" functions. It is exploited using a specially crafted zip archive, that… |
CVE-2009-3887 | Critical | 9.8 | 2019-10-29 | ytnef has directory traversal |
CVE-2019-18189 | Critical | 9.8 | 2019-10-28 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (11.0, XG) and Worry-Free Business Security (9.5, 10.0) may allow an attacker to bypass… |
CVE-2019-18187 | High | 7.5 | 2019-10-28 | Trend Micro OfficeScan versions 11.0 and XG (12.0) could be exploited by an attacker utilizing a directory traversal vulnerability to extract files from an arb… |
CVE-2019-14450 | Critical | 9.8 | 2019-10-28 | A directory traversal vulnerability was discovered in RepetierServer.exe in Repetier-Server 0.8 through 0.91 that allows for the creation of a user controlled… |
CVE-2019-17224 | Medium | 5.3 | 2019-10-28 | The web interface of the Compal Broadband CH7465LG modem (version CH7465LG-NCIP-6.12.18.25-2p6-NOSH) is vulnerable to a /%2f/ path traversal attack, which can… |
CVE-2005-2349 | High | 7.5 | 2019-10-28 | Zoo 2.10 has Directory traversal |
CVE-2019-4400 | Medium | 4.3 | 2019-10-25 | IBM Cloud Orchestrator 2.4 through 2.4.0.5 and 2.5 through 2.5.0.9 could allow a remote attacker to traverse directories on the system. An attacker could send… |
CVE-2013-4658 | Critical | 9.8 | 2019-10-25 | Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share. |
CVE-2013-4855 | High | 8.8 | 2019-10-25 | D-Link DIR-865L has SMB Symlink Traversal due to misconfiguration in the SMB service allowing symbolic links to be created to locations outside of the Samba sh… |
CVE-2019-18393 | Medium | 5.3 | 2019-10-24 | PluginServlet.java in Ignite Realtime Openfire through 4.4.2 does not ensure that retrieved files are located under the Openfire home directory, aka a director… |
CVE-2019-18212 | Medium | 6.5 | 2019-10-23 | XMLLanguageService.java in XML Language Server (aka lsp4xml) before 0.9.1, as used in Red Hat XML Language Support (aka vscode-xml) before 0.9.1 for Visual Stu… |
CVE-2019-8238 | High | 7.5 | 2019-10-23 | Adobe Acrobat and Reader versions 2019.010.20100 and earlier; 2019.010.20099 and earlier versions; 2017.011.30140 and earlier version; 2017.011.30138 and earli… |
CVE-2019-18371 | High | 7.5 | 2019-10-23 | An issue was discovered on Xiaomi Mi WiFi R3G devices before 2.28.23-stable. There is a directory traversal vulnerability to read arbitrary files via a misconf… |
CVE-2019-16986 | Medium | 6.5 | 2019-10-21 | In FusionPBX up to v4.5.7, the file resources\download.php uses an unsanitized "f" variable coming from the URL, which takes any pathname and allows a download… |
CVE-2019-16985 | Medium | 6.5 | 2019-10-21 | In FusionPBX up to v4.5.7, the file app\xml_cdr\xml_cdr_delete.php uses an unsanitized "rec" variable coming from the URL, which is base64 decoded and allows d… |
CVE-2019-16990 | Medium | 6.5 | 2019-10-21 | In FusionPBX up to v4.5.7, the file app/music_on_hold/music_on_hold.php uses an unsanitized "file" variable coming from the URL, which takes any pathname (base… |
CVE-2019-14424 | Medium | 6.5 | 2019-10-17 | A Local File Inclusion (LFI) issue in the addon CUx-Daemon 1.11a of the eQ-3 Homematic CCU-Firmware 2.35.16 until 2.45.6 allows remote authenticated attackers… |
CVE-2019-15266 | Medium | 4.4 | 2019-10-16 | A vulnerability in the CLI of Cisco Wireless LAN Controller (WLC) Software could allow an authenticated, local attacker to view system files that should be res… |
CVE-2019-12704 | Medium | 6.5 | 2019-10-16 | A vulnerability in the web-based management interface of Cisco SPA100 Series Analog Telephone Adapters (ATAs) could allow an authenticated, remote attacker to… |
CVE-2019-17662 | Critical | 9.8 | 2019-10-16 | ThinVNC 1.0b1 is vulnerable to arbitrary file read, which leads to a compromise of the VNC server. The vulnerability exists even when authentication is turned… |
CVE-2019-16279 | High | 7.5 | 2019-10-14 | A memory error in the function SSL_accept in nostromo nhttpd through 1.9.6 allows an attacker to trigger a denial of service via a crafted HTTP request. |
CVE-2019-16278 | Critical | 9.8 | 2019-10-14 | Directory Traversal in the function http_verify in nostromo nhttpd through 1.9.6 allows an attacker to achieve remote code execution via a crafted HTTP request. |
CVE-2019-17538 | High | 7.5 | 2019-10-13 | Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file reading via the web/polygon/problem/viewfile?id=1&name=../ substring. |
CVE-2019-17537 | High | 7.5 | 2019-10-13 | Jiangnan Online Judge (aka jnoj) 0.8.0 has Directory Traversal for file deletion via the web/polygon/problem/deletefile?id=1&name=../ substring. |
CVE-2010-5335 | High | 7.5 | 2019-10-11 | IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating s… |
CVE-2010-5334 | High | 7.5 | 2019-10-11 | IceWarp Webclient before 10.2.1 has a directory traversal vulnerability. This can result in loss of confidential data of IceWarp Mailserver and the operating s… |
CVE-2015-9480 | High | 7.5 | 2019-10-10 | The RobotCPA plugin 5 for WordPress has directory traversal via the f.php l parameter. |
CVE-2015-9473 | High | 7.5 | 2019-10-10 | The estrutura-basica theme through 2015-09-13 for WordPress has directory traversal via the scripts/download.php arquivo parameter. |
CVE-2015-9470 | High | 7.5 | 2019-10-10 | The history-collection plugin through 1.1.1 for WordPress has directory traversal via the download.php var parameter. |