CWE-22 · Path Traversal (page 70)
Page 70 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-7106 | Critical | 9.8 | 2019-05-23 | Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2019-7105 | Critical | 9.8 | 2019-05-23 | Adobe XD versions 16.0 and earlier have a path traversal vulnerability. Successful exploitation could lead to arbitrary code execution. |
CVE-2019-11231 | Critical | 9.8 | 2019-05-22 | An issue was discovered in GetSimple CMS through 3.3.15. insufficient input sanitation in the theme-edit.php file allows upload of files with arbitrary content… |
CVE-2019-12277 | Critical | 9.8 | 2019-05-22 | Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname. |
CVE-2019-12173 | High | 8.8 | 2019-05-18 | MacDown 0.7.1 (870) allows remote code execution via a file:\\\ URI, with a .app pathname, in the HREF attribute of an A element. This is different from CVE-20… |
CVE-2019-12172 | High | 7.8 | 2019-05-17 | Typora 0.9.9.21.1 (1913) allows arbitrary code execution via a modified file: URL syntax in the HREF attribute of an AREA element, as demonstrated by file:\\\… |
CVE-2019-5936 | Medium | 5.4 | 2019-05-17 | Directory traversal vulnerability in Cybozu Garoon 4.0.0 to 4.10.1 allows remote authenticated attackers to obtain files without access privileges via the appl… |
CVE-2018-17180 | Medium | 5.3 | 2019-05-17 | An issue was discovered in OpenEMR before 5.0.1 Patch 7. Directory Traversal exists via docid=../ to /portal/lib/download_template.php. |
CVE-2019-8925 | Medium | 4.3 | 2019-05-17 | An issue was discovered in Zoho ManageEngine Netflow Analyzer Professional 7.0.0.2. An Absolute Path Traversal vulnerability in the Administration zone, in /ne… |
CVE-2019-12138 | High | 7.8 | 2019-05-16 | MacDown 0.7.1 allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note. |
CVE-2019-12137 | High | 7.8 | 2019-05-16 | Typora 0.9.9.24.6 on macOS allows directory traversal, for execution of arbitrary programs, via a file:/// or ../ substring in a shared note. |
CVE-2019-1820 | Medium | 6.5 | 2019-05-16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow a… |
CVE-2019-1819 | Medium | 6.5 | 2019-05-16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow a… |
CVE-2019-1818 | Medium | 6.5 | 2019-05-16 | A vulnerability in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programmable Network (EPN) Manager software could allow a… |
CVE-2019-1717 | High | 7.5 | 2019-05-15 | A vulnerability in the web-based management interface of Cisco Video Surveillance Manager could allow an unauthenticated, remote attacker to access sensitive i… |
CVE-2019-11397 | Medium | 6.5 | 2019-05-14 | GetFile.aspx in Rapid4 RapidFlows Enterprise Application Builder 4.5M.23 (when used with .NET Framework 4.5) allows Local File Inclusion via the FileDesc param… |
CVE-2018-6885 | Critical | 9.8 | 2019-05-14 | An issue was discovered in MicroStrategy Web Services (the Microsoft Office plugin) before 10.4 Hotfix 7, and before 10.11. The vulnerability is unauthenticate… |
CVE-2019-9618 | Critical | 9.8 | 2019-05-13 | The GraceMedia Media Player plugin 1.0 for WordPress allows Local File Inclusion via the "cfg" parameter. |
CVE-2019-8952 | Medium | 6.5 | 2019-05-13 | A Path Traversal vulnerability located in the webserver affects several Bosch hardware and software products. The vulnerability potentially allows a remote aut… |
CVE-2019-9726 | High | 7.5 | 2019-05-13 | Directory Traversal / Arbitrary File Read in eQ-3 AG Homematic CCU3 3.43.15 and earlier allows remote attackers to read arbitrary files of the device's filesys… |
CVE-2015-9287 | Critical | 9.8 | 2019-05-13 | Directory Traversal was discovered in University of Cambridge mod_ucam_webauth before 2.0.2. The key identification field ("kid") of the IdP's HTTP response me… |
CVE-2012-6652 | Critical | 9.8 | 2019-05-13 | Directory traversal vulnerability in pageflipbook.php script from index.php in Page Flip Book plugin for WordPress (wppageflip) allows remote attackers to incl… |
CVE-2018-12298 | High | 7.5 | 2019-05-13 | Directory Traversal in filebrowser in Seagate NAS OS 4.3.15.1 allows attackers to read files within the application's container via a URL path. |
CVE-2019-5438 | Medium | 5.3 | 2019-05-10 | Path traversal using symlink in npm harp module versions <= 0.29.0. |
CVE-2019-11879 | Medium | 5.5 | 2019-05-10 | The WEBrick gem 1.4.2 for Ruby allows directory traversal if the attacker once had local access to create a symlink to a location outside of the web root direc… |
CVE-2019-11082 | High | 7.5 | 2019-05-10 | core/api/datasets/internal/actions/Explode.java in the Dataset API in DKPro Core through 1.10.0 allows Directory Traversal, resulting in the overwrite of local… |
CVE-2019-0226 | Medium | 4.9 | 2019-05-09 | Apache Karaf Config service provides a install method (via service or MBean) that could be used to travel in any directory and overwrite existing file. The vul… |
CVE-2019-11831 | Critical | 9.8 | 2019-05-09 | The PharStreamWrapper (aka phar-stream-wrapper) package 2.x before 2.1.1 and 3.x before 3.1.1 for TYPO3 does not prevent directory traversal, which allows atta… |
CVE-2019-11510 | Critical | 10.0 | 2019-05-08 | In Pulse Secure Pulse Connect Secure (PCS) 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a speci… |
CVE-2019-11508 | High | 7.2 | 2019-05-08 | In Pulse Secure Pulse Connect Secure (PCS) before 8.1R15.1, 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an authenticated attacker (via the… |
CVE-2019-10869 | High | 8.1 | 2019-05-07 | Path Traversal and Unrestricted File Upload exists in the Ninja Forms plugin before 3.0.23 for WordPress (when the Uploads add-on is activated). This allows an… |
CVE-2019-3799 | Medium | 6.5 | 2019-05-06 | Spring Cloud Config, versions 2.1.x prior to 2.1.2, versions 2.0.x prior to 2.0.4, and versions 1.4.x prior to 1.4.6, and older unsupported versions allow appl… |
CVE-2019-1854 | Medium | 4.1 | 2019-05-03 | A vulnerability in the management web interface of Cisco Expressway Series could allow an authenticated, remote attacker to perform a directory traversal attac… |
CVE-2019-1836 | High | 7.1 | 2019-05-03 | A vulnerability in the system shell for Cisco Nexus 9000 Series Fabric Switches in Application Centric Infrastructure (ACI) mode could allow an authenticated… |
CVE-2018-16961 | High | 7.5 | 2019-05-02 | An issue was discovered in Open XDMoD through 7.5.0. html/gui/general/dl_publication.php allows Path traversal via the file parameter, allowing remote attacker… |
CVE-2018-16716 | Critical | 9.1 | 2019-05-02 | A path traversal vulnerability exists in viewcgi.c in the 2.0.7 through 2.2.26 legacy versions of the NCBI ToolBox, which may result in reading of arbitrary fi… |
CVE-2019-0194 | High | 7.5 | 2019-04-30 | Apache Camel's File is vulnerable to directory traversal. Camel 2.21.0 to 2.21.3, 2.22.0 to 2.22.2, 2.23.0 and the unsupported Camel 2.x (2.19 and earlier) ver… |
CVE-2019-11624 | Medium | 4.9 | 2019-04-30 | doorGets 7.0 has an arbitrary file deletion vulnerability in /doorgets/app/requests/user/configurationRequest.php. A remote background administrator privilege… |
CVE-2019-11612 | High | 7.5 | 2019-04-30 | doorGets 7.0 has an arbitrary file deletion vulnerability in /fileman/php/deletefile.php. A remote unauthenticated attacker can exploit this vulnerability to d… |
CVE-2019-11611 | High | 7.5 | 2019-04-30 | doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/download.php. A remote unauthenticated attacker can exploit this vulnerabilit… |
CVE-2019-11610 | High | 7.5 | 2019-04-30 | doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/downloaddir.php. A remote unauthenticated attacker can exploit this vulnerabi… |
CVE-2019-11609 | High | 8.2 | 2019-04-30 | doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/movefile.php. A remote unauthenticated attacker can exploit this vulnerabilit… |
CVE-2019-11608 | High | 8.2 | 2019-04-30 | doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/renamefile.php. A remote unauthenticated attacker can exploit this vulnerabil… |
CVE-2019-11607 | High | 7.5 | 2019-04-30 | doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copydir.php. A remote unauthenticated attacker can exploit this vulnerability… |
CVE-2019-11606 | High | 7.5 | 2019-04-30 | doorGets 7.0 has a sensitive information disclosure vulnerability in /fileman/php/copyfile.php. A remote unauthenticated attacker can exploit this vulnerabilit… |
CVE-2019-5624 | High | 7.3 | 2019-04-30 | Rapid7 Metasploit Framework suffers from an instance of CWE-22, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in the Zip impor… |
CVE-2019-11591 | High | 8.8 | 2019-04-29 | The WebDorado Contact Form plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion… |
CVE-2019-11590 | High | 8.8 | 2019-04-29 | The 10Web Form Maker plugin before 1.13.5 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file inclusion via d… |
CVE-2019-11557 | High | 8.8 | 2019-04-26 | The WebDorado Contact Form Builder plugin before 1.0.69 for WordPress allows CSRF via the wp-admin/admin-ajax.php action parameter, with resultant local file i… |
CVE-2019-3720 | Medium | 4.9 | 2019-04-25 | Dell EMC Open Manage System Administrator (OMSA) versions prior to 9.3.0 contain a Directory Traversal Vulnerability. A remote authenticated malicious user wit… |
CVE-2019-11515 | Medium | 4.9 | 2019-04-25 | core/classes/db_backup.php in Gila CMS 1.10.1 allows admin/db_backup?download= absolute path traversal to read arbitrary files. |
CVE-2019-7213 | Medium | 6.5 | 2019-04-24 | SmarterTools SmarterMail 16.x before build 6985 allows directory traversal. An authenticated user could delete arbitrary files or could create files in new fol… |
CVE-2019-3902 | Medium | 5.1 | 2019-04-22 | A flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and write files outside… |
CVE-2019-11378 | High | 8.8 | 2019-04-20 | An issue was discovered in ProjectSend r1053. upload-process-form.php allows finished_files[]=../ directory traversal. It is possible for users to read arbitra… |
CVE-2019-9005 | Medium | 6.5 | 2019-04-18 | The Cprime Power Scripts app before 4.0.14 for Atlassian Jira allows Directory Traversal. |
CVE-2019-3398 | High | 8.8 | 2019-04-18 | Confluence Server and Data Center had a path traversal vulnerability in the downloadallattachments resource. A remote attacker who has permission to add attach… |
CVE-2019-1835 | Medium | 4.4 | 2019-04-18 | A vulnerability in the CLI of Cisco Aironet Access Points (APs) could allow an authenticated, local attacker to access sensitive information stored in an AP. T… |
CVE-2019-9222 | High | 8.1 | 2019-04-17 | An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions. |
CVE-2019-4178 | Medium | 6.4 | 2019-04-15 | IBM Cognos Analytics 11 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL request to write or… |
CVE-2019-3943 | High | 8.1 | 2019-04-10 | MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote d… |
CVE-2019-10945 | Critical | 9.8 | 2019-04-10 | An issue was discovered in Joomla! before 3.9.5. The Media Manager component does not properly sanitize the folder parameter, allowing attackers to act outside… |
CVE-2018-19586 | Critical | 9.9 | 2019-04-09 | Silverpeas 5.15 through 6.0.2 is affected by an authenticated Directory Traversal vulnerability that can be triggered during file uploads because core/webapi/u… |
CVE-2019-3880 | Medium | 5.4 | 2019-04-09 | A flaw was found in the way samba implemented an RPC endpoint emulating the Windows registry service API. An unprivileged attacker could use this flaw to creat… |
CVE-2019-10242 | Medium | 5.3 | 2019-04-09 | In Eclipse Kura versions up to 4.0.0, the SkinServlet did not checked the path passed during servlet call, potentially allowing path traversal in get requests… |
CVE-2019-10632 | Medium | 6.5 | 2019-04-09 | A directory traversal vulnerability in the file browser component on the Zyxel NAS 326 version 5.21 and below allows a lower privileged user to change the loca… |
CVE-2019-1785 | High | 7.8 | 2019-04-08 | A vulnerability in the RAR file scanning functionality of Clam AntiVirus (ClamAV) Software versions 0.101.1 and 0.101.0 could allow an unauthenticated, remote… |
CVE-2014-5436 | High | 7.5 | 2019-04-08 | A directory traversal vulnerability exists in the confd.exe module in Honeywell Experion PKS R40x before R400.6, R41x before R410.6, and R43x before R430.2, wh… |
CVE-2019-9489 | High | 7.5 | 2019-04-05 | A directory traversal vulnerability in Trend Micro Apex One, OfficeScan (versions XG and 11.0), and Worry-Free Business Security (versions 10.0, 9.5 and 9.0) c… |
CVE-2018-20229 | High | 7.5 | 2019-04-04 | GitLab Community and Enterprise Edition before 11.3.14, 11.4.x before 11.4.12, and 11.5.x before 11.5.5 allows Directory Traversal. |
CVE-2019-5423 | High | 7.5 | 2019-04-03 | Path traversal vulnerability in http-live-simulator npm package version 1.0.5 allows arbitrary path to be accessed on the file system by a remote attacker. |
CVE-2018-1618 | High | 7.7 | 2019-04-02 | IBM Security Privileged Identity Manager Virtual Appliance 2.2.1 could allow a remote attacker to traverse directories on the system. An attacker could send a… |
CVE-2019-5889 | High | 7.5 | 2019-04-01 | An log-management directory traversal issue was discovered in OverIT Geocall 6.3 before build 2:346977. |
CVE-2018-13299 | Medium | 4.3 | 2019-04-01 | Relative path traversal vulnerability in Attachment Uploader in Synology Calendar before 2.2.2-0532 allows remote authenticated users to upload arbitrary files… |
CVE-2019-9922 | High | 7.5 | 2019-03-29 | An issue was discovered in the Harmis JE Messenger component 1.2.2 for Joomla!. Directory Traversal allows read access to arbitrary files. |
CVE-2019-0225 | High | 7.5 | 2019-03-28 | A specially crafted url could be used to access files under the ROOT directory of the application on Apache JSPWiki 2.9.0 to 2.11.0.M2, which could be used by… |
CVE-2018-20144 | High | 7.5 | 2019-03-28 | GitLab Community and Enterprise Edition 11.x before 11.3.13, 11.4.x before 11.4.11, and 11.5.x before 11.5.4 has Incorrect Access Control. |
CVE-2019-1010257 | Critical | 9.1 | 2019-03-27 | An Information Disclosure / Data Modification issue exists in article2pdf_getfile.php in the article2pdf Wordpress plugin 0.24, 0.25, 0.26, 0.27. A URL can be… |
CVE-2019-5927 | High | 7.5 | 2019-03-27 | Directory traversal vulnerability in 'an' App for iOS Version 3.2.0 and earlier allows remote attackers to read arbitrary files via unspecified vectors. |
CVE-2019-5418 | High | 7.5 | 2019-03-27 | There is a File Content Disclosure vulnerability in Action View <5.2.2.1, <5.1.6.2, <5.0.7.2, <4.2.11.1 and v3 where specially crafted accept headers can cause… |
CVE-2019-3828 | Medium | 4.2 | 2019-03-27 | Ansible fetch module before versions 2.5.15, 2.6.14, 2.7.8 has a path traversal vulnerability which allows copying and overwriting files outside of the specifi… |
CVE-2018-19856 | High | 7.5 | 2019-03-26 | GitLab CE/EE before 11.3.12, 11.4.x before 11.4.10, and 11.5.x before 11.5.3 allows Directory Traversal in Templates API. |
CVE-2019-3396 | Critical | 9.8 | 2019-03-25 | The Widget Connector macro in Atlassian Confluence Server before version 6.6.12 (the fixed version for 6.6.x), from version 6.7.0 before 6.12.3 (the fixed vers… |
CVE-2018-16858 | High | 7.8 | 2019-03-25 | It was found that libreoffice before versions 6.0.7 and 6.1.3 was vulnerable to a directory traversal attack which could be used to execute arbitrary macros bu… |
CVE-2019-6240 | High | 7.5 | 2019-03-25 | An issue was discovered in GitLab Community and Enterprise Edition before 11.4. It allows Directory Traversal. |
CVE-2019-3482 | Medium | 6.5 | 2019-03-25 | Mitigates a directory traversal issue in ArcSight Logger versions prior to 6.7. |
CVE-2019-9960 | Critical | 9.8 | 2019-03-24 | The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path. |
CVE-2019-9948 | Critical | 9.1 | 2019-03-23 | urllib in Python 2.x through 2.7.16 supports the local_file: scheme, which makes it easier for remote attackers to bypass protection mechanisms that blacklist… |
CVE-2019-9649 | Medium | 5.3 | 2019-03-22 | An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. Using the MDTM FTP command, a remote attacker can use a directory traversal tec… |
CVE-2019-1765 | High | 8.1 | 2019-03-22 | A vulnerability in the web-based management interface of Session Initiation Protocol (SIP) Software for Cisco IP Phone 8800 Series could allow an authenticated… |
CVE-2019-9648 | Medium | 5.3 | 2019-03-22 | An issue was discovered in the SFTP Server component in Core FTP 2.0 Build 674. A directory traversal vulnerability exists using the SIZE command along with a… |
CVE-2019-9889 | Low | 2.7 | 2019-03-21 | In Vanilla before 2.6.4, a flaw exists within the getSingleIndex function of the AddonManager class. The issue results in a require call using a crafted type v… |
CVE-2019-6714 | Critical | 9.8 | 2019-03-21 | An issue was discovered in BlogEngine.NET through 3.3.6.0. A path traversal and Local File Inclusion vulnerability in PostList.ascx.cs can cause unauthenticate… |
CVE-2019-6274 | High | 8.8 | 2019-03-21 | Directory traversal vulnerability in storage_cgi in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to have unspecified impact via di… |
CVE-2019-6273 | Medium | 6.5 | 2019-03-21 | download_file in GL.iNet GL-AR300M-Lite devices with firmware 2.27 allows remote attackers to download arbitrary files. |
CVE-2019-5417 | High | 7.5 | 2019-03-21 | A path traversal vulnerability in serve npm package version 7.0.1 allows the attackers to read content of arbitrary files on the remote server. |
CVE-2019-5416 | High | 7.5 | 2019-03-21 | A path traversal vulnerability in localhost-now npm package version 1.0.2 allows the attackers to read content of arbitrary files on the remote server. |
CVE-2019-0191 | Medium | 6.5 | 2019-03-21 | Apache Karaf kar deployer reads .kar archives and extracts the paths from the "repository/" and "resources/" entries in the zip file. It then writes out the co… |
CVE-2018-20647 | Medium | 6.5 | 2019-03-21 | PHP Scripts Mall Car Rental Script 2.0.8 has directory traversal via a direct request for a listing of an image directory such as an images/ directory. |
CVE-2018-20646 | Medium | 6.5 | 2019-03-21 | PHP Scripts Mall Basic B2B Script 2.0.9 has has directory traversal via a direct request for a listing of an image directory such as an uploads/ directory. |
CVE-2018-20643 | Medium | 6.5 | 2019-03-21 | PHP Scripts Mall Entrepreneur Job Portal Script 3.0.1 has directory traversal via a direct request for a listing of an image directory such as an assets/ direc… |