CWE-22

DELL EMC Avamar Server, versions 19.1, 19.2, 19.3, contain an OS Command Injection Vulnerability in Fitness Analyzer. A

A path traversal vulnerability in the Moxa MXview Network Management software Versions 3.x to 3.2.2 may allow an attacke

Metabase is an open source data analytics platform. In affected versions a security issue has been discovered with the c

condor_credd in HTCondor before 8.9.11 allows Directory Traversal outside the SEC_CREDENTIAL_DIRECTORY_OAUTH directory,

An issue was discovered in JUMP AMS 3.6.0.04.009-2487. A JUMP SOAP endpoint permitted the writing of arbitrary files to

SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated

A vulnerability has been identified in SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.0 (All versions < V9.0 SP3 UC

Directory traversal vulnerability in post-edit.php in MiniCMS V1.10 allows remote attackers to include and execute arbit

A directory traversal vulnerability in file upload function of Gotenberg through 6.2.1 allows an attacker to upload and

The R programming language’s default package manager CRAN is affected by a path traversal vulnerability that can lead to

Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT

A potential security vulnerability has been identified in the HPE Moonshot Provisioning Manager v1.20. The HPE Moonshot

The vSphere Client (HTML5) contains a remote code execution vulnerability in a vCenter Server plugin. A malicious actor

A file extension handling issue was found in [server] module of ONLYOFFICE DocumentServer v4.2.0.71-v5.6.0.21. The file

An issue was discovered in AfterLogic Aurora through 8.5.3 and WebMail Pro through 8.5.3, when DAV is enabled. They allo

gitjacker before 0.1.0 allows remote attackers to execute arbitrary code via a crafted .git directory because of directo

A path traversal vulnerability in the web interfaces of Buffalo WSR-2533DHPL2 firmware version <= 1.02 and WSR-2533DHP3

Zoho ManageEngine Eventlog Analyzer through 12147 is vulnerable to unauthenticated directory traversal via an entry in a

Multiple path traversal vulnerabilities exist in smbserver.py in Impacket through 0.9.22. An attacker that connects to a

Path Traversal in HongCMS v4.0.0 allows remote attackers to view, edit, and delete arbitrary files via a crafted POST re

elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect e

An issue was discovered in Cleo LexiCom 5.5.0.0. Within the AS2 message, the sender can specify a filename. This filenam

SerenityOS before commit 3844e8569689dd476064a0759d704bc64fb3ca2c contains a directory traversal vulnerability in tar/un

Lack of authentication or validation in motor_load_more, motor_gallery_load_more, motor_quick_view and motor_project_qui

An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when

unarr.go in go-unarr (aka Go bindings for unarr) 0.1.1 allows Directory Traversal via ../ in a pathname within a TAR arc

In Eclipse Theia 0.1.1 to 0.2.0, it is possible to exploit the default build to obtain remote code execution (and XXE) v

OpenSIS Community Edition version <= 7.6 is affected by a local file inclusion vulnerability in DownloadWindow.php via t

The vCenter Server contains an arbitrary file upload vulnerability in the Analytics service. A malicious actor with netw

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal leading to RCE via external form by adding a regul

ECOA BAS controller suffers from an arbitrary file write and path traversal vulnerability. Using the POST parameters, un

Galera WebTemplate 1.0 is affected by a directory traversal vulnerability that could reveal information from /etc/passwd

A flaw was found in a change made to path normalization in Apache HTTP Server 2.4.49. An attacker could use a path trave

It was found that the fix for CVE-2021-41773 in Apache HTTP Server 2.4.50 was insufficient. An attacker could use a path

Projectsend version r1295 is affected by a directory traversal vulnerability. Because of lacking sanitization input for

An arbitrary file upload and directory traversal vulnerability exists in the file upload functionality of DownloadFileSe

The CivetWeb web library does not validate uploaded filepaths when running on an OS other than Windows, when using the b

Gridpro Request Management for Windows Azure Pack before 2.0.7912 allows Directory Traversal for remote code execution,

A remote unauthenticated directory traversal security vulnerability has been identified in HPE iLO Amplifier Pack versio

Agent processes are able to completely bypass file path filtering by wrapping the file operation in an agent file path i

FilePath#renameTo and FilePath#moveAllChildrenTo in Jenkins 2.318 and earlier, LTS 2.303.2 and earlier only check 'read'

tripexpress v1.1 is affected by a path manipulation vulnerability in file system/helpers/dompdf/load_font.php. The varia

ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php.

matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php.

Zip Slip vulnerability in Pluck-CMS Pluck 4.7.15 allows an attacker to upload specially crafted zip files, resulting in

An Improper Input Validation vulnerability in DataImportHandler of Apache Solr allows an attacker to provide a Windows U

Emerson XWEB 300D EVO 3.0.7--3ee403 is affected by: unauthenticated arbitrary file deletion due to path traversal. An at

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the curr

loklak is an open-source server application which is able to collect messages from various sources, including twitter. T