CWE-22 · Path Traversal (page 76)
Page 76 of 99 — CVEs classified under CWE-22, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-10553 | Medium | 6.5 | 2018-04-30 | An issue was discovered in Nagios XI 5.4.13. A registered user is able to use directory traversal to read local files, as demonstrated by URIs beginning with i… |
CVE-2017-18263 | High | 7.5 | 2018-04-28 | Seagate Media Server in Seagate Personal Cloud before 4.3.18.4 has directory traversal in getPhotoPlaylistPhotos.psp via a parameter named url. |
CVE-2018-7669 | High | 7.5 | 2018-04-27 | An issue was discovered in Sitecore Sitecore.NET 8.1 rev. 151207 Hotfix 141178-1 and above. The 'Log Viewer' application is vulnerable to a directory traversal… |
CVE-2017-1723 | Medium | 6.5 | 2018-04-26 | IBM Security QRadar SIEM 7.2 and 7.3 could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted URL reques… |
CVE-2018-9921 | Medium | 5.3 | 2018-04-23 | In CMS Made Simple 2.2.7, a Directory Traversal issue makes it possible to determine the existence of files and directories outside the web-site installation d… |
CVE-2018-10176 | Medium | 6.5 | 2018-04-20 | Digital Guardian Management Console 7.1.2.0015 has a Directory Traversal issue. |
CVE-2014-10073 | High | 7.5 | 2018-04-20 | The create_response function in server/server.c in Psensor before 1.1.4 allows Directory Traversal because it lacks a check for whether a file is under the web… |
CVE-2018-10201 | High | 7.5 | 2018-04-20 | An issue was discovered in NcMonitorServer.exe in NC Monitor Server in NComputing vSpace Pro 10 and 11. It is possible to read arbitrary files outside the root… |
CVE-2018-1000161 | Medium | 5.7 | 2018-04-18 | nmap version 6.49BETA6 through 7.60, up to and including SVN revision 37147 contains a Directory Traversal vulnerability in NSE script http-fetch that can resu… |
CVE-2018-5337 | Critical | 9.8 | 2018-04-18 | An issue was discovered in Zoho ManageEngine Desktop Central 10.0.124 and 10.0.184: directory traversal in the SCRIPT_NAME field when modifying existing script… |
CVE-2018-7539 | Critical | 9.8 | 2018-04-17 | On Appear TV XC5000 and XC5100 devices with firmware 3.26.217, it is possible to read OS files with a specially crafted HTTP request (such as GET /../../../../… |
CVE-2018-5430 | High | 8.8 | 2018-04-17 | The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition, TIBCO JasperReports Server for ActiveMa… |
CVE-2017-6020 | Medium | 5.3 | 2018-04-17 | Leao Consultoria e Desenvolvimento de Sistemas (LCDS) LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to en… |
CVE-2018-10122 | High | 7.5 | 2018-04-16 | QingDao Nature Easy Soft Chanzhi Enterprise Portal System (aka chanzhieps) pro1.6 allows remote attackers to read arbitrary files via directory traversal seque… |
CVE-2014-2069 | High | 7.5 | 2018-04-16 | Absolute path traversal vulnerability in Eshtery CMS allows remote attackers to read arbitrary files via a full pathname in the file parameter to FileManager.a… |
CVE-2018-10083 | High | 7.5 | 2018-04-13 | CMS Made Simple (CMSMS) through 2.2.7 contains an arbitrary file deletion vulnerability in the admin dashboard via directory traversal sequences in the val par… |
CVE-2018-1079 | High | 8.7 | 2018-04-12 | pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The REST interface of the pcsd service did… |
CVE-2018-9118 | High | 7.5 | 2018-04-12 | exports/download.php in the 99 Robots WP Background Takeover Advertisements plugin before 4.1.5 for WordPress has Directory Traversal via a .. in the filename… |
CVE-2018-9038 | Medium | 6.5 | 2018-04-10 | Monstra CMS 3.0.4 allows remote attackers to delete files via an admin/index.php?id=filesmanager&delete_dir=./&path=uploads/ request. |
CVE-2018-9851 | High | 7.5 | 2018-04-08 | In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to read any file via a modified pathname in an Admin-Tpl request, as d… |
CVE-2018-9850 | High | 7.5 | 2018-04-08 | In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\DataAction.class.php allows remote attackers to delete any file via directory traversal sequences in the id parame… |
CVE-2018-9331 | High | 7.5 | 2018-04-07 | An issue was discovered in zzcms 8.2. user/adv.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg parameter… |
CVE-2018-1271 | Medium | 5.9 | 2018-04-06 | Spring Framework, versions 5.0 prior to 5.0.5 and versions 4.3 prior to 4.3.15 and older unsupported versions, allow applications to configure Spring MVC to se… |
CVE-2018-9205 | High | 7.5 | 2018-04-04 | Vulnerability in avatar_uploader v7.x-1.0-beta8 , The code in view.php doesn't verify users or sanitize the file path. |
CVE-2018-8780 | Critical | 9.1 | 2018-04-03 | In Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before 2.5.1, and 2.6.0-preview1, the Dir.open, Dir.new, Dir.entries and Dir.empty? method… |
CVE-2018-6914 | High | 7.5 | 2018-04-03 | Directory traversal vulnerability in the Dir.mktmpdir method in the tmpdir library in Ruby before 2.2.10, 2.3.x before 2.3.7, 2.4.x before 2.4.4, 2.5.x before… |
CVE-2018-6660 | Medium | 6.2 | 2018-04-02 | Directory Traversal vulnerability in McAfee ePolicy Orchestrator (ePO) 5.3.2, 5.3.1, 5.3.0 and 5.9.0 allows administrators to use Windows alternate data stream… |
CVE-2018-9159 | Medium | 5.3 | 2018-03-31 | In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by fil… |
CVE-2018-7171 | High | 7.5 | 2018-03-30 | Directory traversal vulnerability in Twonky Server 7.0.11 through 8.5 allows remote attackers to share the contents of arbitrary directories via a .. (dot dot)… |
CVE-2018-3822 | Critical | 9.8 | 2018-03-30 | X-Pack Security versions 6.2.0, 6.2.1, and 6.2.2 are vulnerable to a user impersonation attack via incorrect XML canonicalization and DOM traversal. An attacke… |
CVE-2018-9117 | Medium | 5.3 | 2018-03-29 | WireMock before 2.16.0 contains a vulnerability that allows a remote unauthenticated attacker to access local files beyond the application directory via a spec… |
CVE-2018-9110 | Critical | 9.1 | 2018-03-28 | Studio 42 elFinder before 2.1.37 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to do… |
CVE-2018-9109 | Critical | 9.1 | 2018-03-28 | Studio 42 elFinder before 2.1.36 has a directory traversal vulnerability in elFinder.class.php with the zipdl() function that can allow a remote attacker to do… |
CVE-2018-1266 | High | 8.1 | 2018-03-27 | Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information disclosure and path traversal vulnerabilities. An authenticated malicious user c… |
CVE-2017-12815 | Critical | 10.0 | 2018-03-26 | Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulnerability. The archi… |
CVE-2018-1204 | Medium | 6.7 | 2018-03-26 | Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a pat… |
CVE-2018-9010 | High | 7.2 | 2018-03-25 | Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page paramete… |
CVE-2018-7719 | High | 7.5 | 2018-03-25 | Acrolinx Server before 5.2.5 on Windows allows Directory Traversal. |
CVE-2018-8969 | High | 7.5 | 2018-03-24 | An issue was discovered in zzcms 8.2. user/licence_save.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg p… |
CVE-2018-8968 | High | 7.5 | 2018-03-24 | An issue was discovered in zzcms 8.2. user/manage.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg or oldf… |
CVE-2018-8965 | High | 7.5 | 2018-03-24 | An issue was discovered in zzcms 8.2. user/ppsave.php allows remote attackers to delete arbitrary files via directory traversal sequences in the oldimg paramet… |
CVE-2018-1211 | High | 7.5 | 2018-03-23 | Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain speci… |
CVE-2018-0542 | High | 7.5 | 2018-03-22 | Directory traversal vulnerability in WebProxy version 1.7.8 allows an attacker to read arbitrary files via unspecified vectors. |
CVE-2018-8909 | High | 7.5 | 2018-03-22 | The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a filename of a recei… |
CVE-2018-3710 | High | 7.8 | 2018-03-21 | Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project import component resulting remote code execu… |
CVE-2017-0918 | High | 8.8 | 2018-03-21 | Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resulting in remote code execution. |
CVE-2014-2674 | High | 7.5 | 2018-03-19 | Directory traversal vulnerability in the Ajax Pagination (twitter Style) plugin 1.1 for WordPress allows remote attackers to read arbitrary files via a .. (dot… |
CVE-2018-7422 | High | 7.5 | 2018-03-19 | A Local File Inclusion vulnerability in the Site Editor plugin through 1.1.1 for WordPress allows remote attackers to retrieve arbitrary files via the ajax_pat… |
CVE-2014-3626 | High | 7.5 | 2018-03-19 | The Grails Resource Plugin often has to exchange URIs for resources with other internal components. Those other components will decode any URI passed to them… |
CVE-2018-8741 | High | 8.8 | 2018-03-17 | A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete) files from the hosting server, related… |
CVE-2017-14384 | Medium | 6.5 | 2018-03-16 | In Dell Storage Manager versions earlier than 16.3.20, the EMConfigMigration service is affected by a directory traversal vulnerability. A remote malicious use… |
CVE-2018-7706 | Medium | 6.5 | 2018-03-15 | Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read arbitrary e-mail messages via a .. (dot dot)… |
CVE-2018-7705 | High | 8.1 | 2018-03-15 | Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mail messages to arbitrary recipients via… |
CVE-2018-8712 | Critical | 9.8 | 2018-03-14 | An issue was discovered in Webmin 1.840 and 1.880 when the default Yes setting of "Can view any file as a log file" is enabled. As a result of weak default con… |
CVE-2018-2366 | Medium | 4.3 | 2018-03-14 | SAP Business Process Automation (BPA) By Redwood, 9.0, 9.1, allows an attacker to exploit insufficient validation of path information provided by users, thus c… |
CVE-2018-1000083 | Medium | 5.3 | 2018-03-13 | Ajenti version version 2 contains a Improper Error Handling vulnerability in Login JSON request that can result in The requisition leaks a path of the server… |
CVE-2018-1000079 | Medium | 5.5 | 2018-03-13 | RubyGems version Ruby 2.2 series: 2.2.9 and earlier, Ruby 2.3 series: 2.3.6 and earlier, Ruby 2.4 series: 2.4.3 and earlier, Ruby 2.5 series: 2.5.0 and earlier… |
CVE-2018-1323 | High | 7.5 | 2018-03-12 | The IIS/ISAPI specific code in the Apache Tomcat JK ISAPI Connector 1.2.0 to 1.2.42 that normalised the requested path before matching it to the URI-worker map… |
CVE-2017-17223 | High | 8.8 | 2018-03-09 | Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal vulnerability. An authenticated, remot… |
CVE-2018-0525 | Medium | 5.3 | 2018-03-09 | Directory traversal vulnerability in Jubatus 1.0.2 and earlier allows remote attackers to read arbitrary files via unspecified vectors. |
CVE-2018-6810 | High | 7.5 | 2018-03-06 | Directory traversal vulnerability in NetScaler ADC 10.5, 11.0, 11.1, and 12.0, and NetScaler Gateway 10.5, 11.0, 11.1, and 12.0 allows remote attackers to trav… |
CVE-2017-16922 | Medium | 5.3 | 2018-03-05 | In com.wowza.wms.timedtext.http.HTTPProviderCaptionFile in Wowza Streaming Engine before 4.7.1, traversal of the directory structure and retrieval of a file ar… |
CVE-2018-1316 | High | 7.5 | 2018-03-05 | The ODE process deployment web service was sensible to deployment messages with forged names. Using a path for the name was allowing directory traversal, resul… |
CVE-2018-7654 | Medium | 6.5 | 2018-03-04 | On 3CX 15.5.6354.2 devices, the parameter "file" in the request "/api/RecordingList/download?file=" allows full access to files on the server via path traversa… |
CVE-2018-7586 | High | 7.5 | 2018-03-01 | In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured. |
CVE-2017-9270 | High | 8.7 | 2018-03-01 | In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryptctl key database. |
CVE-2017-14804 | Critical | 9.9 | 2018-03-01 | The build package before 20171128 did not check directory names during extraction of build results that allowed untrusted builds to write outside of the target… |
CVE-2018-2380 | Medium | 6.6 | 2018-03-01 | SAP CRM, 7.01, 7.02,7.30, 7.31, 7.33, 7.54, allows an attacker to exploit insufficient validation of path information provided by users, thus characters repres… |
CVE-2018-2367 | High | 8.8 | 2018-03-01 | ABAP File Interface in, SAP BASIS, from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an attacker to exploit insufficient valida… |
CVE-2015-5079 | High | 7.5 | 2018-02-28 | Directory traversal vulnerability in widgets/logs.php in BlackCat CMS before 1.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the dl… |
CVE-2017-9447 | High | 7.5 | 2018-02-28 | In the web interface of Parallels Remote Application Server (RAS) 15.5 Build 16140, a vulnerability exists due to improper validation of the file path when req… |
CVE-2018-7482 | High | 7.5 | 2018-02-28 | The K2 component 2.8.0 for Joomla! has Incorrect Access Control with directory traversal, allowing an attacker to download arbitrary files, as demonstrated by… |
CVE-2018-7467 | High | 7.5 | 2018-02-27 | AxxonSoft Axxon Next has Directory Traversal via an initial /css//..%2f substring in a URI. |
CVE-2018-7172 | Medium | 4.9 | 2018-02-27 | In index.php in WonderCMS before 2.4.1, remote attackers can delete arbitrary files via directory traversal. |
CVE-2018-7490 | High | 7.5 | 2018-02-26 | uWSGI before 2.0.17 mishandles a DOCUMENT_ROOT check during use of the --php-docroot option, allowing directory traversal. |
CVE-2017-16814 | Medium | 5.5 | 2018-02-26 | A Directory Traversal issue was discovered in the Foxit MobilePDF app before 6.1 for iOS. This occurs by abusing the URL + escape character during a Wi-Fi tran… |
CVE-2018-7486 | High | 7.2 | 2018-02-26 | Blue River Mura CMS before v7.0.7029 supports inline function calls with an [m] tag and [/m] end tag, without proper restrictions on file types or pathnames, w… |
CVE-2018-7434 | Medium | 5.3 | 2018-02-24 | zzcms 8.2 allows remote attackers to discover the full path via a direct request to 3/qq_connect2.0/API/class/ErrorCase.class.php or 3/ucenter_api/code/friend… |
CVE-2018-7442 | Critical | 9.1 | 2018-02-23 | An issue was discovered in Leptonica through 1.75.3. The gplotMakeOutput function does not block '/' characters in the gplot rootname argument, potentially lea… |
CVE-2017-18196 | Low | 3.3 | 2018-02-23 | Leptonica 1.74.4 constructs unintended pathnames (containing duplicated path components) when operating on files in /tmp subdirectories, which might allow loca… |
CVE-2018-7300 | Critical | 9.8 | 2018-02-22 | Directory Traversal / Arbitrary File Write / Remote Code Execution in the User.setLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote at… |
CVE-2018-7296 | Medium | 5.3 | 2018-02-22 | Directory Traversal / Arbitrary File Read in User.getLanguage method in eQ-3 AG Homematic CCU2 2.29.2 and earlier allows remote attackers to read the first lin… |
CVE-2018-5716 | High | 8.1 | 2018-02-21 | An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by changing a field in the Web Request, can… |
CVE-2018-6356 | Medium | 6.5 | 2018-02-20 | Jenkins before 2.107 and Jenkins LTS before 2.89.4 did not properly prevent specifying relative paths that escape a base directory for URLs accessing plugin re… |
CVE-2014-3972 | Medium | 5.3 | 2018-02-19 | Directory traversal vulnerability in Apexis APM-J601-WS cameras with firmware before 17.35.2.49 allows remote attackers to read arbitrary files via unspecified… |
CVE-2017-15712 | Medium | 6.5 | 2018-02-19 | Vulnerability allows a user of Apache Oozie 3.1.3-incubating to 4.3.0 and 5.0.0-beta1 to expose private files on the Oozie server process. The malicious user c… |
CVE-2018-7212 | Medium | 5.3 | 2018-02-18 | An issue was discovered in rack-protection/lib/rack/protection/path_traversal.rb in Sinatra 2.x before 2.0.1 on Windows. Path traversal is possible via backsla… |
CVE-2017-14537 | Medium | 6.5 | 2018-02-16 | trixbox 2.8.0.4 has path traversal via the xajaxargs array parameter to /maint/index.php?packages or the lang parameter to /maint/modules/home/index.php. |
CVE-2017-8961 | High | 8.8 | 2018-02-15 | A directory traversal vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.3 E0504P02 could allow remote code execution. |
CVE-2017-8947 | Critical | 9.8 | 2018-02-15 | A Remote Code Execution vulnerability in HPE UCMDB version v10.10, v10.11, v10.20, v10.21, v10.22, v10.30, v10.31 was found. |
CVE-2017-12560 | Medium | 6.5 | 2018-02-15 | A Remote Denial of Service vulnerability in HPE Intelligent Management Center (iMC) PLAT version iMC Plat 7.3 E0504P2 was found. |
CVE-2017-12559 | Medium | 6.5 | 2018-02-15 | A Remote Denial of Service vulnerability in HPE Intelligent Management Center (iMC) PLAT version iMC Plat 7.3 E0504P2 was found. |
CVE-2018-1162 | High | 8.1 | 2018-02-08 | This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest NetVault Backup 11.2.0.13. Although aut… |
CVE-2018-0123 | Medium | 5.5 | 2018-02-08 | A Path Traversal vulnerability in the diagnostic shell for Cisco IOS and IOS XE Software could allow an authenticated, local attacker to use certain diagnostic… |
CVE-2018-1299 | High | 7.5 | 2018-02-06 | In Apache Allura before 1.8.0, unauthenticated attackers may retrieve arbitrary files through the Allura web application. Some webservers used with Allura, suc… |
CVE-2015-4461 | Medium | 6.5 | 2018-02-05 | Absolute path traversal vulnerability in eFront CMS 3.6.15.4 and earlier allows remote Professor users to obtain sensitive information via a full pathname in t… |
CVE-2017-17108 | Critical | 9.8 | 2018-02-03 | Path traversal vulnerability in the administrative panel in KonaKart eCommerce Platform version 8.7 and earlier could allow an attacker to download system file… |
CVE-2017-18038 | Medium | 5.3 | 2018-02-02 | The repository settings resource in Atlassian Bitbucket Server before version 5.6.0 allows remote attackers to read the first line of arbitrary files via a pat… |
CVE-2017-18037 | Medium | 6.5 | 2018-02-02 | The git repository tag rest resource in Atlassian Bitbucket Server from version 3.7.0 before 4.14.11 (the fixed version for 4.14.x), from version 5.0.0 before… |
CVE-2018-6397 | High | 7.5 | 2018-01-30 | Directory Traversal exists in the Picture Calendar 3.1.4 component for Joomla! via the list.php folder parameter. |