CWE-22

OpenOLAT is a web-based learning management system (LMS). A path traversal vulnerability exists in versions prior to 15.

squashfs_opendir in unsquash-2.c in Squashfs-Tools 4.5 allows Directory Traversal, a different vulnerability than CVE-20

Improper Access Control in Jfinal CMS v4.7.1 and earlier allows remote attackers to obtain sensitive information or caus

The OMGF WordPress plugin before 4.5.4 does not enforce path validation, authorisation and CSRF checks in the omgf_ajax_

HHVM supports the use of an "admin" server which accepts administrative requests over HTTP. One of those request handler

A vulnerability in the web-based management interface of Cisco Firepower Management Center (FMC) Software could allow an

OpenOlat is a web-basedlearning management system. A path traversal vulnerability exists in OpenOlat prior to versions 1

Specially-crafted command line arguments can lead to arbitrary file deletion in the del .cnt|.log file delete command. A

Jenkins 2.274 and earlier, LTS 2.263.1 and earlier allows users with Agent/Configure permission to choose agent names th

The affected product is vulnerable to directory traversal due to mishandling of provided backup folder structure.

An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability container volume management

Dell EMC OpenManage Enterprise (OME) versions prior to 3.4 contain an arbitrary file overwrite vulnerability. A remote a

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Clou

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Clou

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Clou

The Baseboard Management Controller(BMC) in HPE Cloudline CL5800 Gen9 Server; HPE Cloudline CL5200 Gen9 Server; HPE Clou

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversa

The Baseboard Management Controller (BMC) firmware in HPE Apollo 70 System prior to version 3.0.14.0 has a path traversa

Acrobat Reader DC versions versions 2020.013.20074 (and earlier), 2020.001.30018 (and earlier) and 2017.011.30188 (and e

When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10

Microsoft Exchange Server Remote Code Execution Vulnerability

Deutsche Post Mailoptimizer 4.3 before 2020-11-09 allows Directory Traversal via a crafted ZIP archive to the Upload fea

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus T

A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vu

A path traversal vulnerability exists in Esri ArcGIS Earth versions 1.11.0 and below which allows arbitrary file creatio

Multiple directory traversal and buffer overflow vulnerabilities were discovered in yTNEF, and in Evolution's TNEF parse

Improper limitation of a pathname to a restricted directory ('Path Traversal') in cgi component in Synology DiskStation

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition (Def.exe) V

CTparental before 4.45.07 is affected by a code execution vulnerability in the CTparental admin panel. Because The file

Nagios XI before version 5.8.5 is vulnerable to local privilege escalation because getprofile.sh does not validate the d

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was fou

mySCADA myDESIGNER 8.20.0 and below allows Directory Traversal attacks when importing project files. If an attacker can

LCDS LAquis SCADA through 4.3.1.1085 is vulnerable to a control bypass and path traversal. If an attacker can get a vict

Acrobat Reader for Android versions 21.8.0 (and earlier) are affected by a Path traversal vulnerability. An unauthentica

Babel.Locale in Babel before 2.9.1 allows attackers to load arbitrary locale .dat files (containing serialized Python ob

spring-boot-actuator-logview in a library that adds a simple logfile viewer as spring boot actuator endpoint. It is mave

Directory traversal vulnerability in class-simple_job_board_resume_download_handler.php in the Simple Board Job plugin 2

OneDev is an all-in-one devops platform. In OneDev before version 4.0.3 there is a critical "zip slip" vulnerability. Th

Keymaker is a Mastodon Community Finder based Matrix Community serverlist page Server. In Keymaker before version 0.2.0,

ORAS is open source software which enables a way to push OCI Artifacts to OCI Conformant registries. ORAS is both a CLI

A local file inclusion vulnerability exists in the installation functionality of Advantech WebAccess/SCADA 9.0.1. A spec

Jellyfin is a Free Software Media System. In Jellyfin before version 10.7.1, with certain endpoints, well crafted reques

go-ipfs is an open-source golang implementation of IPFS which is a global, versioned, peer-to-peer filesystem. In go-ipf

Improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability in file management componen

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP1). An attacker with access to the webserver of

OpenOlat is a web-based e-learning platform for teaching, learning, assessment and communication, an LMS, a learning man

A vulnerability has been identified in OpenPCS 7 V8.2 (All versions), OpenPCS 7 V9.0 (All versions < V9.0 Upd4), OpenPCS

BaserCMS is an open source content management system with a focus on Japanese language support. In affected versions use

SAF-T Framework Transaction SAFTN_G allows an attacker to exploit insufficient validation of path information provided b