CWE-25

13 CVEs classified under CWE-25. Browse by severity and year.

Top CVEs for CWE-25
CVESeverityScorePublishedSummary
CVE-2025-68916Critical9.12025-12-24Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.
CVE-2026-68959High8.52026-08-25SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows sy…
CVE-2023-52076High8.52024-01-25Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists…
CVE-2023-52138High8.22024-02-05Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve…
CVE-2022-20818High7.82022-09-30Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities ar…
CVE-2022-20775High7.82022-09-30A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to i…
CVE-2023-6947High7.72024-12-10The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.26. This mak…
CVE-2024-2442High7.52024-03-19 Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the sy…
CVE-2023-6919High7.52024-01-26Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard…
CVE-2023-6118High7.52023-11-23Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1.
CVE-2026-23877Medium4.32026-01-19Swing Music is a self-hosted music player for local audio files. Prior to version 2.1.4, Swing Music's `list_folders()` function in the `/folder/dir-browser` e…
CVE-2025-0225Medium4.32025-01-05A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is an unk…
CVE-2025-58286Low3.32025-10-11Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
All CVEs classified under CWE-25 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-68959High8.52026-08-25SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows sy…
CVE-2026-23877Medium4.32026-01-19Swing Music is a self-hosted music player for local audio files. Prior to version 2.1.4, Swing Music's `list_folders()` function in the `/folder/dir-browser` e…
CVE-2025-68916Critical9.12025-12-24Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.
CVE-2025-58286Low3.32025-10-11Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
CVE-2025-0225Medium4.32025-01-05A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is an unk…
CVE-2023-6947High7.72024-12-10The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.26. This mak…
CVE-2024-2442High7.52024-03-19 Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the sy…
CVE-2023-52138High8.22024-02-05Engrampa is an archive manager for the MATE environment. Engrampa is found to be vulnerable to a Path Traversal vulnerability that can be leveraged to achieve…
CVE-2023-6919High7.52024-01-26Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal. This issue affects VGuard…
CVE-2023-52076High8.52024-01-25Atril Document Viewer is the default document reader of the MATE desktop environment for Linux. A path traversal and arbitrary file write vulnerability exists…
CVE-2023-6118High7.52023-11-23Path Traversal: '/../filedir' vulnerability in Neutron IP Camera allows Absolute Path Traversal. This issue affects IP Camera: before b1130.1.0.1.
CVE-2022-20818High7.82022-09-30Multiple vulnerabilities in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. These vulnerabilities ar…
CVE-2022-20775High7.82022-09-30A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to gain elevated privileges. This vulnerability is due to i…