CWE-22

Grafana is an open-source platform for monitoring and observability. Grafana versions 8.0.0-beta1 through 8.3.0 (except

KNIME Server before 4.13.4 allows directory traversal in a request for a client profile.

A relative path traversal vulnerability in the SMA100 upload funtion allows a remote unauthenticated attacker to upload

A relative path traversal [CWE-23] vulnerabiltiy in FortiOS versions 7.0.0 and 7.0.1 and FortiProxy verison 7.0.0 may al

Directory traversal vulnerability in /admin/includes/* directory for PHPGURUKUL Employee Record Management System 1.2 Th

The True Ranker plugin <= 2.2.2 for WordPress allows arbitrary files, including sensitive configuration files such as wp

HD-Network Real-time Monitoring System 2.0 allows ../ directory traversal to read /etc/shadow via the /language/lang s_L

All versions of package http-server-node are vulnerable to Directory Traversal via use of --path-as-is.

Chain Sea ai chatbot system’s specific file download function has path traversal vulnerability. The function has imprope

An issue was discovered in the rust-embed crate before 6.3.0 for Rust. A ../ directory traversal can sometimes occur in

A flaw was found in mbsync before v1.3.5 and v1.4.1. Validations of the mailbox names returned by IMAP LIST/LSUB do not

A flaw was found in the fabric8 kubernetes-client in version 4.2.0 and after. This flaw allows a malicious pod/container

OctoRPKI does not escape a URI with a filename containing "..", this allows a repository to create a file, (ex. rsync://

This affects all versions of package calipso. It is possible for a malicious module to overwrite files on an arbitrary f

Rasa is an open source machine learning framework to automate text-and voice-based conversations. In affected versions a

mySCADA myDESIGNER Versions 8.20.0 and prior fails to properly validate contents of an imported project file, which may

This vulnerability allows remote attackers to create arbitrary files on affected installations of SolarWinds Orion Platf

A directory traversal issue in the Utils/Unzip module in Microweber through 1.1.20 allows an authenticated attacker to g

Racom's MIDGE Firmware 4.4.40.105 contains an issue that allows attackers to arbitrarily access and delete files via an

Path Traversal vulnerability when changing timezone using web GUI of Nozomi Networks Guardian, CMC allows an authenticat

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to inject arbitrary

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus T

Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by a Path Tra

A remote directory traversal vulnerability was discovered in Aruba ClearPass Policy Manager version(s): ClearPass Policy

The Keybase Client for Windows before version 5.7.0 contains a path traversal vulnerability when checking the name of a

The All-in-One Video Gallery WordPress plugin before 2.5.0 does not sanitise and validate the tab parameter before using

A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.11), Teamcenter Active Work

A directory traversal vulnerability exists in the Web Manager FsCopyFile functionality of Lantronix PremierWave 2050 8.9

A directory traversal vulnerability exists in the Web Manager FsMove functionality of Lantronix PremierWave 2050 8.9.0.0

A directory traversal vulnerability exists in the Web Manager FsTFtp functionality of Lantronix PremierWave 2050 8.9.0.0

A directory traversal vulnerability exists in the CMA CLI setenv command of Garrett Metal Detectors’ iC Module CMA Versi

This affects the package pimcore/pimcore before 6.8.8. A Local FIle Inclusion vulnerability exists in the downloadCsvAct

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Networ

This vulnerability allows remote attackers to delete arbitrary files on affected installations of NETGEAR ProSAFE Networ

Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker

An improper access control vulnerability has been reported to affect earlier versions of Music Station. If exploited, th

Dell SupportAssist Client Consumer versions 3.9.13.0 and any versions prior to 3.9.13.0 contain an arbitrary file deleti

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer compone

A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in the UpdateServer compone

In Docker before versions 9.03.15, 20.10.3 there is a vulnerability involving the --userns-remap option in which access

There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download p

Zope is an open-source web application server. In Zope versions prior to 4.6 and 5.2, users can access untrusted modules

Dell NetWorker, versions 18.x and 19.x contain a Path traversal vulnerability. A NetWorker server user with remote acces

Backstage is an open platform for building developer portals. In affected versions A malicious actor could read sensitiv

Path traversal vulnerability in GroupSession Free edition ver5.1.1 and earlier, GroupSession byCloud ver5.1.1 and earlie

BTCPay Server through 1.0.7.0 suffers from directory traversal, which allows an attacker with admin privileges to achiev

As a result of an unquoted service path vulnerability present in the Kiwi CatTools Installation Wizard, a local attacker

fs/nfsd/nfs3xdr.c in the Linux kernel through 5.10.8, when there is an NFS export of a subdirectory of a filesystem, all