CWE-22 · Path Traversal (page 73)
Page 73 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-16819 | Medium | 4.9 | 2018-09-18 | admin/index.php in Monstra CMS 3.0.4 allows arbitrary file deletion via id=filesmanager&path=uploads/.......//./.......//./&delete_file= requests. |
CVE-2018-13982 | High | 7.5 | 2018-09-18 | Smarty_Security::isTrustedResourceDir() in Smarty before 3.1.33 is prone to a path traversal vulnerability due to insufficient template code sanitization. This… |
CVE-2018-8041 | Medium | 5.3 | 2018-09-17 | Apache Camel's Mail 2.20.0 through 2.20.3, 2.21.0 through 2.21.1 and 2.22.0 is vulnerable to path traversal. |
CVE-2018-17125 | High | 7.5 | 2018-09-17 | CScms 4.1 allows arbitrary directory deletion via a dir=..\\ substring to plugins\sys\admin\Plugins.php. |
CVE-2018-15610 | High | 7.3 | 2018-09-12 | A vulnerability in the one-X Portal component of Avaya IP Office allows an authenticated attacker to read and delete arbitrary files on the system. Affected ve… |
CVE-2018-16836 | Critical | 9.8 | 2018-09-11 | Rubedo through 3.4.0 contains a Directory Traversal vulnerability in the theme component, allowing unauthenticated attackers to read and execute arbitrary file… |
CVE-2018-16831 | Medium | 5.9 | 2018-09-11 | Smarty before 3.1.33-dev-4 allows attackers to bypass the trusted_dir protection mechanism via a file:./../ substring in an include statement. |
CVE-2016-7041 | Medium | 6.5 | 2018-09-10 | Drools Workbench contains a path traversal vulnerability. The vulnerability allows a remote, authenticated attacker to bypass the directory restrictions and re… |
CVE-2018-16774 | High | 7.5 | 2018-09-10 | HongCMS 3.0.0 allows arbitrary file deletion via a ../ in the file parameter to admin/index.php/language/ajax?action=delete. |
CVE-2018-16059 | Medium | 5.3 | 2018-09-07 | Endress+Hauser WirelessHART Fieldgate SWG70 3.x devices allow Directory Traversal via the fcgi-bin/wgsetcgi filename parameter. |
CVE-2018-0660 | Low | 3.3 | 2018-09-07 | Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create arbitrary files via specially crafted ATC… |
CVE-2018-0659 | Medium | 5.5 | 2018-09-07 | Directory traversal vulnerability in ver.2.8.4.0 and earlier and ver.3.3.0.0 and earlier allows an attacker to create or overwrite existing files via specially… |
CVE-2018-1000801 | Medium | 5.5 | 2018-09-06 | okular version 18.08 and earlier contains a Directory Traversal vulnerability in function "unpackDocumentArchive(...)" in "core/document.cpp" that can result i… |
CVE-2018-1000659 | High | 8.8 | 2018-09-06 | LimeSurvey version 3.14.4 and earlier contains a directory traversal in file upload that allows upload of webshell vulnerability in file upload functionality t… |
CVE-2018-16549 | Medium | 5.3 | 2018-09-05 | HScripts PHP File Browser Script v1.0 allows Directory Traversal via the index.php path parameter. |
CVE-2018-16437 | Medium | 4.9 | 2018-09-05 | Gxlcms 2.0 before bug fix 20180915 has Directory Traversal exploitable by an administrator. |
CVE-2015-9266 | Critical | 9.8 | 2018-09-05 | The web management interface of Ubiquiti airMAX, airFiber, airGateway and EdgeSwitch XP (formerly TOUGHSwitch) allows an unauthenticated attacker to upload and… |
CVE-2018-16518 | Critical | 9.8 | 2018-09-05 | A directory traversal vulnerability with remote code execution in Prim'X Zed! FREE through 1.0 build 186 and Zed! Limited Edition through 6.1 build 2208 allows… |
CVE-2018-10926 | High | 8.8 | 2018-09-04 | A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use this flaw to write files to an arbitrar… |
CVE-2018-0646 | High | 7.8 | 2018-09-04 | Directory traversal vulnerability in Explzh v.7.58 and earlier allows an attacker to read arbitrary files via unspecified vectors. |
CVE-2018-16446 | High | 7.5 | 2018-09-04 | An issue was discovered in SeaCMS through 6.61. adm1n/admin_database.php allows remote attackers to delete arbitrary files via directory traversal sequences in… |
CVE-2018-16367 | Critical | 9.9 | 2018-09-02 | In OnlineJudge 2.0, the sandbox has an incorrect access control vulnerability that can write a file anywhere. A user can write a directory listing to /tmp, and… |
CVE-2018-16344 | High | 7.5 | 2018-09-02 | An issue was discovered in zzcms 8.3. It allows remote attackers to delete arbitrary files via directory traversal sequences in the flv parameter. This can be… |
CVE-2018-16320 | High | 7.2 | 2018-09-01 | idreamsoft iCMS 7.0.11 allows admincp.php?app=config Directory Traversal, resulting in execution of arbitrary PHP code from a ZIP file. |
CVE-2018-3787 | High | 7.5 | 2018-08-31 | Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server. |
CVE-2018-16237 | Low | 2.7 | 2018-08-30 | An issue was discovered in damiCMS V6.0.1. There is Directory Traversal via '|' characters in the s parameter to admin.php, as demonstrated by an admin.php?s=T… |
CVE-2018-15745 | High | 7.5 | 2018-08-30 | Argus Surveillance DVR 4.0.0.0 devices allow Unauthenticated Directory Traversal, leading to File Disclosure via a ..%2F in the WEBACCOUNT.CGI RESULTPAGE param… |
CVE-2018-11720 | High | 7.5 | 2018-08-30 | Xovis PC2, PC2R, and PC3 devices through 3.6.0 allow Directory Traversal. |
CVE-2018-16141 | Medium | 6.5 | 2018-08-30 | ThinkCMF X2.2.3 has an arbitrary file deletion vulnerability in do_avatar in \application\User\Controller\ProfileController.class.php via an imgurl parameter w… |
CVE-2018-16133 | Medium | 5.3 | 2018-08-29 | Cybrotech CyBroHttpServer 1.0.3 allows Directory Traversal via a ../ in the URI. |
CVE-2018-15810 | High | 7.5 | 2018-08-27 | Visiology Flipbox Software Suite before 2.7.0 allows directory traversal via %5c%2e%2e%2f because it does not sanitize filename parameters. |
CVE-2018-15695 | Medium | 6.5 | 2018-08-27 | ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to delete any file on the file system due to a path traversal vulnerab… |
CVE-2018-15694 | High | 7.5 | 2018-08-27 | ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to upload files to arbitrary locations due to a path traversal vulnera… |
CVE-2018-15536 | Medium | 5.5 | 2018-08-24 | /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 does not properly validate file paths in archives, allowing for the extraction of c… |
CVE-2018-15535 | High | 7.5 | 2018-08-24 | /filemanager/ajax_calls.php in tecrail Responsive FileManager before 9.13.4 uses external input to construct a pathname that should be within a restricted dire… |
CVE-2017-2627 | High | 8.2 | 2018-08-22 | A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11. The sudoers file as installed with OSP's openstack-tripleo… |
CVE-2018-14795 | High | 8.8 | 2018-08-21 | DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an attacker to replace executable files. |
CVE-2018-1656 | High | 7.4 | 2018-08-20 | The IBM Java Runtime Environment's Diagnostic Tooling Framework for Java (DTFJ) (IBM SDK, Java Technology Edition 6.0 , 7.0, and 8.0) does not protect against… |
CVE-2017-16744 | High | 7.2 | 2018-08-20 | A path traversal vulnerability in Tridium Niagara AX Versions 3.8 and prior and Niagara 4 systems Versions 4.4 and prior installed on Microsoft Windows Systems… |
CVE-2018-1000647 | High | 7.1 | 2018-08-20 | LibreHealthIO lh-ehr version REL-2.0.0 contains a Authenticated Unrestricted File Deletion vulnerability in Import template that can result in Denial of servic… |
CVE-2018-15495 | High | 7.5 | 2018-08-18 | /filemanager/upload.php in Responsive FileManager before 9.13.3 allows Directory Traversal and SSRF because the url parameter is used directly in a curl_exec c… |
CVE-2018-10510 | Critical | 9.8 | 2018-08-15 | A Directory Traversal Remote Code Execution vulnerability in Trend Micro Control Manager (versions 6.0 and 7.0) could allow an attacker to execute arbitrary co… |
CVE-2018-14007 | Critical | 9.8 | 2018-08-15 | Citrix XenServer 7.1 and newer allows Directory Traversal. |
CVE-2018-15138 | High | 7.5 | 2018-08-15 | Ericsson-LG iPECS NMS 30M allows directory traversal via ipecs-cm/download?filename=../ URIs. |
CVE-2018-10917 | Medium | 6.8 | 2018-08-15 | pulp 2.16.x and possibly older is vulnerable to an improper path parsing. A malicious user or a malicious iso feed repository can write to locations accessible… |
CVE-2018-14429 | High | 7.5 | 2018-08-14 | man-cgi before 1.16 allows Local File Inclusion via absolute path traversal, as demonstrated by a cgi-bin/man-cgi?/etc/passwd URI. |
CVE-2018-7098 | High | 8.4 | 2018-08-14 | A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability may be locally exploited to allow direc… |
CVE-2018-15142 | High | 8.8 | 2018-08-13 | Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to execute… |
CVE-2018-15141 | Medium | 6.5 | 2018-08-13 | Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to delete… |
CVE-2018-15140 | Medium | 6.5 | 2018-08-13 | Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authenticated in the patient portal to read ar… |
CVE-2017-1749 | Medium | 5.3 | 2018-08-13 | IBM UrbanCode Deploy 6.1 through 6.9.6.0 could allow a remote attacker to traverse directories on the system. An unauthenticated attacker could alter UCD deplo… |
CVE-2018-11455 | High | 8.8 | 2018-08-07 | A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager 6 (All versions < 6.0.1). A directory… |
CVE-2017-16654 | High | 7.5 | 2018-08-06 | An issue was discovered in Symfony before 2.7.38, 2.8.31, 3.2.14, 3.3.13, 3.4-BETA5, and 4.0-BETA5. The Intl component includes various bundle readers that are… |
CVE-2018-7092 | High | 7.5 | 2018-08-06 | A potential security vulnerability has been identified in HPE Intelligent Management Center Platform (IMC Plat) 7.3 E0506P09. The vulnerability could be remote… |
CVE-2018-14942 | High | 8.8 | 2018-08-05 | Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "POST /PY/EMULATION_GET_FILE" or "POST /P… |
CVE-2018-14927 | Medium | 5.3 | 2018-08-03 | Matera Banco 1.0.0 is vulnerable to path traversal (allowing access to system files outside the default application folder) via the /contingency/servlet/Servle… |
CVE-2018-14912 | High | 7.5 | 2018-08-03 | cgit_clone_objects in CGit before 1.2.1 has a directory traversal vulnerability when `enable-http-clone=1` is not turned off, as demonstrated by a cgit/cgit.cg… |
CVE-2018-14847 | Critical | 9.1 | 2018-08-02 | MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due… |
CVE-2018-10897 | High | 8.1 | 2018-08-01 | A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote repository configuration files. If an… |
CVE-2018-12939 | Medium | 6.5 | 2018-07-31 | A directory traversal flaw in SeedDMS (formerly LetoDMS and MyDMS) before 5.1.8 allows an authenticated attacker to write to (or potentially delete) arbitrary… |
CVE-2017-2595 | High | 7.7 | 2018-07-27 | It was found that the log file viewer in Red Hat JBoss Enterprise Application 6 and 7 allows arbitrary file read to authenticated user via path traversal. |
CVE-2018-10862 | Medium | 5.5 | 2018-07-27 | WildFly Core before version 6.0.0.Alpha3 does not properly validate file paths in .war archives, allowing for the extraction of crafted .war archives to overwr… |
CVE-2018-0617 | High | 7.5 | 2018-07-26 | Directory traversal vulnerability in ChamaNet MemoCGI v2.1800 to v2.2200 allows remote attackers to read arbitrary files via unspecified vectors. |
CVE-2018-1002209 | Medium | 5.5 | 2018-07-25 | QuaZIP before 0.7.6 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that… |
CVE-2018-1002208 | Medium | 5.5 | 2018-07-25 | SharpZipLib before 1.0 RC1 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entr… |
CVE-2018-1002207 | Medium | 5.5 | 2018-07-25 | mholt/archiver golang package before e4ef56d48eb029648b0e895bb0b6a393ef0829c3 is vulnerable to directory traversal, allowing attackers to write to arbitrary fi… |
CVE-2018-1002206 | Medium | 5.5 | 2018-07-25 | SharpCompress before 0.21.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive ent… |
CVE-2018-1002205 | Medium | 5.5 | 2018-07-25 | DotNetZip.Semvered before 1.11.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archiv… |
CVE-2018-1002204 | Medium | 5.5 | 2018-07-25 | adm-zip npm library before 0.4.9 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archiv… |
CVE-2018-1002203 | Medium | 5.5 | 2018-07-25 | unzipper npm library before 0.8.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip arch… |
CVE-2018-1002202 | Medium | 6.5 | 2018-07-25 | zip4j before 1.3.3 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that i… |
CVE-2018-1002201 | Medium | 5.5 | 2018-07-25 | zt-zip before 1.13 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in a Zip archive entry that i… |
CVE-2018-1002200 | Medium | 5.5 | 2018-07-25 | plexus-archiver before 3.6.0 is vulnerable to directory traversal, allowing attackers to write to arbitrary files via a ../ (dot dot slash) in an archive entry… |
CVE-2017-3188 | Medium | 6.5 | 2018-07-24 | The dotCMS administration panel, versions 3.7.1 and earlier, "Push Publishing" feature in Enterprise Pro is vulnerable to path traversal. When "Bundle" tar.gz… |
CVE-2018-14573 | Medium | 5.5 | 2018-07-23 | A Local File Inclusion (LFI) vulnerability exists in the Web Interface API of TightRope Media Carousel Digital Signage before 7.3.5. The RenderingFetch API all… |
CVE-2018-1999020 | Medium | 5.5 | 2018-07-23 | Open Networking Foundation (ONF) ONOS version 1.13.2 and earlier version contains a Directory Traversal vulnerability in core/common/src/main/java/org/onosproj… |
CVE-2018-6677 | Critical | 9.1 | 2018-07-23 | Directory Traversal vulnerability in the administrative user interface in McAfee Web Gateway (MWG) MWG 7.8.1.x allows authenticated administrator users to gain… |
CVE-2018-3770 | Medium | 5.5 | 2018-07-20 | A path traversal exists in markdown-pdf version <9.0.0 that allows a user to insert a malicious html code that can result in reading the local files. |
CVE-2018-10870 | Critical | 9.8 | 2018-07-19 | redhat-certification does not properly sanitize paths in rhcertStore.py:__saveResultsFile. A remote attacker could use this flaw to overwrite any file, potenti… |
CVE-2018-14364 | Critical | 9.8 | 2018-07-18 | GitLab Community and Enterprise Edition before 10.7.7, 10.8.x before 10.8.6, and 11.x before 11.0.4 allows Directory Traversal with write access and resultant… |
CVE-2018-14371 | High | 7.5 | 2018-07-18 | The getLocalePrefix function in ResourceManager.java in Eclipse Mojarra before 2.3.7 is affected by Directory Traversal via the loc parameter. A remote attacke… |
CVE-2018-14363 | High | 7.5 | 2018-07-17 | An issue was discovered in NeoMutt before 2018-07-16. newsrc.c does not properly restrict '/' characters that may have unsafe interaction with cache pathnames. |
CVE-2018-14355 | Medium | 5.3 | 2018-07-17 | An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. imap/util.c mishandles ".." directory traversal in a mailbox name. |
CVE-2018-13864 | High | 7.5 | 2018-07-17 | A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows… |
CVE-2018-13980 | Medium | 5.5 | 2018-07-16 | The websites that were built from Zeta Producer Desktop CMS before 14.2.1 are vulnerable to unauthenticated file disclosure if the plugin "filebrowser" is inst… |
CVE-2018-14064 | Critical | 9.8 | 2018-07-15 | The uc-http service 1.0.0 on VelotiSmart WiFi B-380 camera devices allows Directory Traversal, as demonstrated by /../../etc/passwd on TCP port 80. |
CVE-2018-14056 | Medium | 5.3 | 2018-07-15 | ZNC before 1.7.1-rc1 is prone to a path traversal flaw via ../ in a web skin name to access files outside of the intended skins directories. |
CVE-2016-9484 | High | 7.5 | 2018-07-13 | The generated PHP form code does not properly validate user input folder directories, allowing a remote unauthenticated attacker to perform a path traversal an… |
CVE-2018-1000208 | High | 7.5 | 2018-07-13 | MODX Revolution version <=2.6.4 contains a Directory Traversal vulnerability in /core/model/modx/modmanagerrequest.class.php that can result in remove files. T… |
CVE-2018-14036 | Medium | 6.5 | 2018-07-13 | Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in user_change_icon_file_authorized_cb() i… |
CVE-2016-10726 | High | 7.5 | 2018-07-10 | The XMLUI feature in DSpace before 3.6, 4.x before 4.5, and 5.x before 5.5 allows directory traversal via the themes/ path in an attack with two or more arbitr… |
CVE-2018-1000623 | High | 7.2 | 2018-07-09 | JFrog JFrog Artifactory version Prior to version 6.0.3, since version 4.0.0 contains a Directory Traversal vulnerability in The "Import Repository from Zip" fe… |
CVE-2018-13034 | Medium | 5.3 | 2018-07-09 | Directory traversal in Jester web framework 0.2.0 allows remote attackers to fetch files in arbitrary locations via "..%f" sequences. |
CVE-2013-3001 | High | 7.5 | 2018-07-09 | Directory traversal vulnerability in IBM InfoSphere Data Replication Dashboard 9.7 and 10.1 allows remote attackers to read arbitrary files via unspecified vec… |
CVE-2018-6830 | High | 7.5 | 2018-07-09 | Directory traversal vulnerability in Foscam Cameras C1 Lite V3, and C1 V3 with firmware 2.82.2.33 and earlier, FI9800P V3, FI9803P V4, FI9851P V3, and FI9853EP… |
CVE-2018-11543 | High | 7.5 | 2018-07-09 | A Local File Inclusion (LFI) vulnerability in the Sonus SBC 1000 / SBC 2000 / SBC SWe Lite web interface allows for the downloading of arbitrary files via an u… |
CVE-2018-12976 | Critical | 9.8 | 2018-07-05 | In Go Doc Dot Org (gddo) through 2018-06-27, an attacker could use specially crafted <go-import> tags in packages being fetched by gddo to cause a directory tr… |
CVE-2018-3766 | High | 7.5 | 2018-07-05 | Path traversal in buttle module versions <= 0.2.0 allows to read any file in the server. |
CVE-2018-11051 | High | 7.5 | 2018-07-03 | RSA Certificate Manager Versions 6.9 build 560 through 6.9 build 564 contain a path traversal vulnerability in the RSA CMP Enroll Server and the RSA REST Enrol… |
CVE-2018-7771 | High | 8.0 | 2018-07-03 | The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions prior to v1.3.4. A directory traversal vu… |