CWE-22

A vulnerability, which was classified as problematic, was found in DFIRKuiper Kuiper 2.3.4. This affects the function un

IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse d

A vulnerability was found in kphrx pleroma. It has been classified as problematic. This affects the function Pleroma.Emo

A vulnerability has been identified in SCALANCE LPE9403 (All versions < V2.1). A path traversal vulnerability was found

Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to uploa

Spotipy is a light weight Python library for the Spotify Web API. In versions prior to 2.22.1, if a malicious URI is pas

LRM contains a directory traversal vulnerability that can allow a malicious actor to upload outside the intended directo

Bytecode Viewer (BCV) is a Java/Android reverse engineering suite. Versions of the package prior to 2.11.0 are vulnerabl

This issue affects: Secomea GateManager Version 9.6.621421014 and all prior versions. Improper Limitation of a Pathname

Piano LED Visualizer is software that allows LED lights to light up as a person plays a piano connected to a computer. V

Flux is an open and extensible continuous delivery solution for Kubernetes. Path Traversal in the kustomize-controller v

A directory traversal vulnerability exists in the unzipDirectory functionality of WWBN AVideo 11.6 and dev master commit

A directory traversal vulnerability exists in the HelpdeskActions.aspx edittemplate functionality of Lansweeper lansweep

A directory traversal vulnerability exists in the AssetActions.aspx addDoc functionality of Lansweeper lansweeper 10.1.1

HwPCAssistant has a Path Traversal vulnerability .Successful exploitation of this vulnerability may write any file.

A directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an unauthenticated individual root l

The package zip-local before 0.3.5 are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) which can le

The Essential Addons for Elementor WordPress plugin before 5.0.5 does not validate and sanitise some template data befor

Path Traversal in NPM w-zip prior to 1.0.12.

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists that could cause modification

ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or ima

A directory traversal vulnerability was found in the ClairCore engine of Clair. An attacker can exploit this by supplyin

It was discovered that the SteelCentral AppInternals Dynamic Sampling Agent's (DSA) PluginServlet has directory traversa

An issue was discovered in PONTON X/P Messenger before 3.11.2. Due to path traversal in private/SchemaSetUpload.do for u

Path Traversal in GitHub repository prasathmani/tinyfilemanager prior to 2.4.7.

An issue was discovered in Pascom Cloud Phone System before 7.20.x. A configuration error between NGINX and a backend To

The Narnoo Distributor WordPress plugin through 2.5.1 fails to validate and sanitize the lib_path parameter before it is

Delta Electronics DIAEnergie (All versions prior to 1.8.02.004) is vulnerable to path traversal attacks, which may allow

CMSimple 5.4 is vulnerable to Directory Traversal. The vulnerability exists when a user changes the file name to malicio

An issue was discovered in ThoughtWorks GoCD before 21.3.0. An attacker who has compromised a GoCD agent can upload a ma

Certain WSO2 products allow unrestricted file upload with resultant remote code execution. The attacker must use a /file

The Admin Word Count Column WordPress plugin through 2.2 does not validate the path parameter given to readfile(), which

The Cab fare calculator WordPress plugin before 1.0.4 does not validate the controller parameter before using it in requ

ZoneMinder before 1.36.13 allows remote code execution via an invalid language. Ability to create a debug log file at an

Zoho ManageEngine Access Manager Plus before 4302, Password Manager Pro before 12007, and PAM360 before 5401 are vulnera

MicroStrategy Enterprise Manager 2022 allows authentication bypass by triggering a login failure and then entering the U

Dpkg::Source::Archive in dpkg, the Debian package management system, before version 1.21.8, 1.20.10, 1.19.8, 1.18.26 is

An issue in Webbank WeCube v3.2.2 allows attackers to execute a directory traversal via a crafted ZIP file.

In Real Player 20.0.7.309 and 20.0.8.310, external::Import() allows download of arbitrary file types and Directory Trave

iSpy v7.2.2.0 is vulnerable to remote command execution via path traversal.

The leafInfo.match() function in Beego v2.0.3 and below uses path.join() to deal with wildcardvalues which can lead to c

A path traversal vulnerability in loader.php of CWP v0.9.8.1122 allows attackers to execute arbitrary code via a crafted

The adriankoczuruek/ceneo-web-scrapper repository through 2021-03-15 on GitHub allows absolute path traversal because th

A local file inclusion (LFI) vulnerability in the component codemirror.php of Portal do Software Publico Brasileiro i3ge

A path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in t

Zimbra Collaboration Suite (ZCS) 8.8.15 and 9.0 has mboximport functionality that receives a ZIP archive and extracts fi

Directory Traversal vulnerability ZDBQAREFSUBDIR parameter in /zropusermgmt API in Zoho ManageEngine Analytics Plus befo

Apache OFBiz uses the Birt project plugin (https://eclipse.github.io/birt-website/) to create data visualizations and re

An issue was discovered in Zimbra Collaboration (ZCS) 8.8.15 and 9.0. An attacker can upload arbitrary files through ama