CWE-22 · Path Traversal (page 68)
Page 68 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2015-9463 | High | 7.5 | 2019-10-10 | The s3bubble-amazon-s3-audio-streaming plugin 2.0 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.php path par… |
CVE-2015-9464 | High | 7.5 | 2019-10-10 | The s3bubble-amazon-s3-html-5-video-with-adverts plugin 0.7 for WordPress has directory traversal via the adverts/assets/plugins/ultimate/content/downloader.ph… |
CVE-2019-17109 | Medium | 6.5 | 2019-10-09 | Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation. |
CVE-2019-0074 | Medium | 5.5 | 2019-10-09 | A path traversal vulnerability in NFX150 Series and QFX10K Series, EX9200 Series, MX Series and PTX Series devices with Next-Generation Routing Engine (NG-RE)… |
CVE-2019-17399 | Critical | 9.8 | 2019-10-09 | The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment. |
CVE-2019-17187 | High | 7.5 | 2019-10-08 | /var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication Directory Traversal for reading arbitrary fil… |
CVE-2019-14657 | High | 8.8 | 2019-10-08 | Yealink phones through 2019-08-04 have an issue with OpenVPN file upload. They execute tar as root to extract files, but do not validate the extraction directo… |
CVE-2019-17314 | High | 7.2 | 2019-10-07 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user. |
CVE-2019-17313 | High | 8.8 | 2019-10-07 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user. |
CVE-2019-17312 | High | 8.8 | 2019-10-07 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user. |
CVE-2019-17311 | High | 8.8 | 2019-10-07 | SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user. |
CVE-2019-17199 | High | 7.5 | 2019-10-05 | www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of an unanchored regular expression, as de… |
CVE-2019-17180 | High | 7.8 | 2019-10-04 | Valve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem content, as demonstrated by file modifications on Windows in t… |
CVE-2019-17175 | High | 7.5 | 2019-10-04 | joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal. |
CVE-2019-16198 | Medium | 6.5 | 2019-10-03 | KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter. |
CVE-2019-12691 | Medium | 4.9 | 2019-10-02 | A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an authenticated, remote attacker to perf… |
CVE-2019-13343 | High | 7.5 | 2019-10-02 | Butor Portal before 1.0.27 is affected by a Path Traversal vulnerability leading to a pre-authentication arbitrary file download. Effectively, a remote anonymo… |
CVE-2019-8291 | High | 7.5 | 2019-10-01 | Online Store System v1.0 delete_file.php doesn't check to see if a user has administrative rights nor does it check for path traversal. |
CVE-2019-17073 | Medium | 6.5 | 2019-10-01 | emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal. |
CVE-2019-7618 | Medium | 6.5 | 2019-10-01 | A local file disclosure flaw was found in Elastic Code versions 7.3.0, 7.3.1, and 7.3.2. If a malicious code repository is imported into Code it is possible to… |
CVE-2019-15039 | Critical | 9.8 | 2019-10-01 | An issue was discovered in JetBrains TeamCity 2018.2.4. It had a possible remote code execution issue. This was fixed in TeamCity 2019.1. |
CVE-2019-4423 | Medium | 5.3 | 2019-09-30 | IBM Sterling File Gateway 2.2.0.0 through 6.0.1.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-craft… |
CVE-2017-18636 | High | 7.5 | 2019-09-30 | CDG through 2017-01-01 allows downloadDocument.jsp?command=download&pathAndName= directory traversal. |
CVE-2019-9281 | High | 7.5 | 2019-09-27 | In GoogleContactsSyncAdapter, there is a possible path traversal due to improper input sanitization. This could lead to a bypass of user interaction requiremen… |
CVE-2019-8074 | Critical | 9.8 | 2019-09-27 | ColdFusion 2018- update 4 and earlier and ColdFusion 2016- update 11 and earlier have a Path Traversal vulnerability. Successful exploitation could lead to Acc… |
CVE-2019-16902 | High | 7.5 | 2019-09-27 | In the ARforms plugin 3.7.1 for WordPress, arf_delete_file in arformcontroller.php allows unauthenticated deletion of an arbitrary file by supplying the full p… |
CVE-2019-16915 | Critical | 9.8 | 2019-09-26 | An issue was discovered in pfSense through 2.4.4-p3. widgets/widgets/picture.widget.php uses the widgetkey parameter directly without sanitization (e.g., a bas… |
CVE-2019-16903 | Medium | 5.3 | 2019-09-26 | Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /.. where it should be checking for ../ instead. |
CVE-2019-12666 | Medium | 6.7 | 2019-09-25 | A vulnerability in the Guest Shell of Cisco IOS XE Software could allow an authenticated, local attacker to perform directory traversal on the base Linux opera… |
CVE-2019-16868 | Critical | 9.8 | 2019-09-25 | emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traversal sequences in th… |
CVE-2019-16867 | Medium | 6.5 | 2019-09-25 | HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/database/ajax?action=delete, a similar issue to CVE-2018-16774… |
CVE-2019-13063 | High | 7.5 | 2019-09-23 | Within Sahi Pro 8.0.0, an attacker can send a specially crafted URL to include any victim files on the system via the script parameter on the Script_view page… |
CVE-2019-16680 | Medium | 4.3 | 2019-09-21 | An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwr… |
CVE-2019-16679 | Medium | 4.9 | 2019-09-21 | Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion. |
CVE-2015-9406 | High | 7.5 | 2019-09-20 | Directory traversal vulnerability in the mTheme-Unus theme before 2.3 for WordPress allows an attacker to read arbitrary files via a .. (dot dot) in the files… |
CVE-2014-10397 | High | 7.5 | 2019-09-20 | The Antioch theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to lib/scripts/download.php. |
CVE-2014-10396 | High | 7.5 | 2019-09-20 | The epic theme through 2014-09-07 for WordPress allows arbitrary file downloads via the file parameter to includes/download.php. |
CVE-2019-11327 | Medium | 4.9 | 2019-09-20 | An issue was discovered on Topcon Positioning Net-G5 GNSS Receiver devices with firmware 5.2.2. The web interface of the product has a local file inclusion vul… |
CVE-2019-14914 | Critical | 9.1 | 2019-09-20 | An issue was discovered in PRiSE adAS 1.7.0. The path is not properly escaped in the medatadata_del method, leading to an arbitrary file read and deletion via… |
CVE-2019-16511 | Medium | 5.5 | 2019-09-19 | An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll al… |
CVE-2019-14994 | High | 7.5 | 2019-09-19 | The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.16, from version 3.10.0 before version 3… |
CVE-2018-1847 | Medium | 6.5 | 2019-09-18 | IBM Financial Transaction Manager (FTM) for Multi-Platform (MP) v2.0.0.0 through 2.0.0.5, v2.1.0.0 through 2.1.0.4, v2.1.1.0 through 2.1.1.4, and v3.0.0.0 thro… |
CVE-2019-4442 | Medium | 4.3 | 2019-09-17 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9,0 could allow a remote attacker to traverse directories on the file system. An attacker could send a spec… |
CVE-2019-4268 | Medium | 5.3 | 2019-09-17 | IBM WebSphere Application Server 7.0, 8.0, 8.5, and 9.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially… |
CVE-2016-10977 | Medium | 6.5 | 2019-09-17 | The nelio-ab-testing plugin before 4.5.0 for WordPress has filename=..%2f directory traversal. |
CVE-2019-0207 | High | 7.5 | 2019-09-16 | Tapestry processes assets `/assets/ctx` using classes chain `StaticFilesFilter -> AssetDispatcher -> ContextResource`, which doesn't filter the character `\`… |
CVE-2016-10966 | High | 7.5 | 2019-09-16 | The real3d-flipbook-lite plugin 1.0 for WordPress has bookName=../ directory traversal for file upload. |
CVE-2016-10965 | High | 7.5 | 2019-09-16 | The real3d-flipbook-lite plugin 1.0 for WordPress has deleteBook=../ directory traversal for file deletion. |
CVE-2019-5484 | High | 7.5 | 2019-09-13 | Bower before 1.8.8 has a path traversal vulnerability permitting file write in arbitrary locations via install command, which allows attackers to write arbitra… |
CVE-2019-13532 | High | 7.5 | 2019-09-13 | CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files out… |
CVE-2019-5956 | Medium | 6.5 | 2019-09-12 | Directory traversal vulnerability in WonderCMS 2.6.0 and earlier allows remote attackers to delete arbitrary files via unspecified vectors. |
CVE-2019-1142 | Medium | 5.5 | 2019-09-11 | An elevation of privilege vulnerability exists when the .NET Framework common language runtime (CLR) allows file creation in arbitrary locations, aka '.NET Fra… |
CVE-2019-6783 | High | 8.8 | 2019-09-09 | An issue was discovered in GitLab Community and Enterprise Edition before 11.5.8, 11.6.x before 11.6.6, and 11.7.x before 11.7.1. GitLab Pages contains a direc… |
CVE-2019-12464 | High | 7.5 | 2019-09-09 | An issue was discovered in LibreNMS 1.50.1. An authenticated user can perform a directory traversal attack against the /pdf.php file with a partial filename in… |
CVE-2019-16132 | Medium | 6.5 | 2019-09-09 | An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote attackers to delete arbitrary files via a title directory-traversal pa… |
CVE-2019-16123 | High | 7.5 | 2019-09-09 | In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure. |
CVE-2019-16113 | High | 8.8 | 2019-09-08 | Bludit 3.9.2 allows remote code execution via bl-kernel/ajax/upload-images.php because PHP code can be entered with a .jpg file name, and then this PHP code ca… |
CVE-2019-16105 | Medium | 4.9 | 2019-09-08 | Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI. |
CVE-2019-9854 | High | 7.8 | 2019-09-06 | LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc… |
CVE-2019-15952 | High | 8.8 | 2019-09-05 | An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to include .html files… |
CVE-2019-5480 | Medium | 5.3 | 2019-09-03 | A path traversal vulnerability in <= v0.9.7 of statichttpserver npm module allows attackers to list files in arbitrary folders. |
CVE-2019-10197 | Medium | 6.5 | 2019-09-03 | A flaw was found in samba versions 4.9.x up to 4.9.13, samba 4.10.x up to 4.10.8 and samba 4.11.x up to 4.11.0rc3, when certain parameters were set in the samb… |
CVE-2019-15839 | High | 7.5 | 2019-08-30 | The sina-extension-for-elementor plugin before 2.2.1 for WordPress has local file inclusion. |
CVE-2019-15630 | High | 7.5 | 2019-08-30 | Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft… |
CVE-2019-15822 | Critical | 9.8 | 2019-08-30 | The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal. |
CVE-2019-6113 | High | 7.5 | 2019-08-30 | Directory traversal vulnerability on ONKYO TX-NR686 1030-5000-1040-0010 A/V Receiver devices allows remote attackers to read arbitrary files via a .. (dot dot)… |
CVE-2019-3394 | High | 8.8 | 2019-08-29 | There was a local file disclosure vulnerability in Confluence Server and Confluence Data Center via page exporting. An attacker with permission to editing a pa… |
CVE-2019-13408 | High | 7.5 | 2019-08-29 | A relative path traversal vulnerability found in Advan VD-1 firmware versions up to 230. It allows attackers to download arbitrary files via url cgibin/ExportS… |
CVE-2019-11249 | Medium | 6.5 | 2019-08-29 | The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container t… |
CVE-2019-11246 | Medium | 6.5 | 2019-08-29 | The kubectl cp command allows copying files between containers and the user machine. To copy files from a container, Kubernetes runs tar inside the container t… |
CVE-2019-15714 | Medium | 5.3 | 2019-08-28 | cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations. |
CVE-2019-15648 | Medium | 6.5 | 2019-08-27 | The insert-or-embed-articulate-content-into-wordpress plugin before 4.29991 for WordPress has insufficient restrictions on deleting or renaming by a Subscriber. |
CVE-2019-13237 | Medium | 4.3 | 2019-08-27 | In Alkacon OpenCms 10.5.4 and 10.5.5, there are multiple resources vulnerable to Local File Inclusion that allow an attacker to access server resources: clearh… |
CVE-2019-15055 | Medium | 6.5 | 2019-08-26 | MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated users to delete arbitrary files. Attack… |
CVE-2019-11654 | High | 7.5 | 2019-08-23 | Path traversal vulnerability in Micro Focus Verastream Host Integrator (VHI), versions 7.7 SP2 and earlier, The vulnerability allows remote unauthenticated att… |
CVE-2019-15520 | Medium | 5.3 | 2019-08-23 | comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory. |
CVE-2019-15519 | Critical | 9.8 | 2019-08-23 | Power-Response before 2019-02-02 allows directory traversal (up to the application's main directory) via a plugin. |
CVE-2019-15518 | Medium | 5.3 | 2019-08-23 | Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler. |
CVE-2019-15517 | Medium | 5.5 | 2019-08-23 | jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal. |
CVE-2019-15516 | High | 7.5 | 2019-08-23 | Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring. |
CVE-2019-15326 | High | 7.5 | 2019-08-22 | The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal. |
CVE-2017-18585 | High | 8.1 | 2019-08-22 | The posts-in-page plugin before 1.3.0 for WordPress has ic_add_posts template='../ directory traversal. |
CVE-2017-18586 | Critical | 9.1 | 2019-08-22 | The insert-pages plugin before 3.2.4 for WordPress has directory traversal via custom template paths. |
CVE-2014-10390 | Critical | 9.1 | 2019-08-22 | The wp-support-plus-responsive-ticket-system plugin before 4.2 for WordPress has directory traversal. |
CVE-2019-14751 | High | 7.5 | 2019-08-22 | NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (… |
CVE-2019-11029 | High | 7.5 | 2019-08-22 | Mirasys VMS before V7.6.1 and 8.x before V8.3.2 mishandles the Download() method of AutoUpdateService in SMServer.exe, leading to Directory Traversal. An attac… |
CVE-2019-11013 | Medium | 6.5 | 2019-08-22 | Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file syste… |
CVE-2019-15323 | High | 7.5 | 2019-08-22 | The ad-inserter plugin before 2.4.20 for WordPress has path traversal. |
CVE-2016-10924 | High | 7.5 | 2019-08-22 | The ebook-download plugin before 1.2 for WordPress has directory traversal. |
CVE-2019-11603 | High | 7.5 | 2019-08-21 | A HTTP Traversal Attack in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.0.2 allows remote attackers to read files outside the h… |
CVE-2019-11601 | High | 7.5 | 2019-08-21 | A directory traversal vulnerability in remote access to backup & restore in earlier versions than ProSyst mBS SDK 8.2.6 and Bosch IoT Gateway Software 9.2.0 al… |
CVE-2019-4460 | High | 7.5 | 2019-08-20 | IBM API Connect 5.0.0.0 through 5.0.8.6 developer portal could allow a remote attacker to traverse directories on the system. An attacker could send a speciall… |
CVE-2019-3967 | Medium | 6.5 | 2019-08-20 | In OpenEMR 5.0.1 and earlier, the patient file download interface contains a directory traversal flaw that allows authenticated attackers to download arbitrary… |
CVE-2019-9852 | High | 7.8 | 2019-08-15 | LibreOffice has a feature where documents can specify that pre-installed macros can be executed on various script events such as mouse-over, document-open etc… |
CVE-2019-12791 | High | 8.8 | 2019-08-15 | A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users… |
CVE-2018-14672 | Medium | 5.3 | 2019-08-15 | In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages. |
CVE-2019-14788 | High | 8.8 | 2019-08-15 | wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resul… |
CVE-2019-12479 | Critical | 9.1 | 2019-08-13 | An issue was discovered in 20|20 Storage 2.11.0. A Path Traversal vulnerability in the TwentyTwenty.Storage library in the LocalStorageProvider allows creating… |
CVE-2019-14530 | High | 8.8 | 2019-08-13 | An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file (that is readable by… |
CVE-2019-3744 | High | 7.8 | 2019-08-09 | Dell/Alienware Digital Delivery versions prior to 4.0.41 contain a privilege escalation vulnerability. A local non-privileged malicious user could exploit a Un… |