CWE-22

IBM Security Verify Access Docker 10.0.0 could allow a remote attacker to traverse directories on the system. An attacke

The Photo Gallery by 10Web – Mobile-Friendly Image Gallery WordPress plugin before 1.5.75 did not ensure that uploaded f

The AceIDE WordPress plugin through 2.6.2 does not sanitise or validate the user input which is appended to system paths

The vRealize Operations Manager API (8.x prior to 8.5) contains an arbitrary file read vulnerability. A malicious actor

A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Softw

A vulnerability has been identified in Teamcenter Active Workspace V4.3 (All versions < V4.3.10), Teamcenter Active Work

A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system has a Path Trav

A vulnerability exists within the FileManagerController.php function in FrogCMS 0.9.5 which allows an attacker to perfor

Auerswald COMpact 5500R devices before 8.2B allow Arbitrary File Disclosure. A sub-admin can read the cleartext Admin pa

A directory traversal vulnerability exists in the CMA CLI getenv command functionality of Garrett Metal Detectors’ iC Mo

In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "/

Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read a

HedgeDoc (formerly known as CodiMD) is an open-source collaborative markdown editor. An attacker can read arbitrary `.md

There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses exte

Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file a

A vulnerability in the CLI of Cisco IOS XE SD-WAN Software could allow an authenticated, local attacker to conduct path

message_bus is a messaging bus for Ruby processes and web clients. In versions prior to 3.3.7 users who deployed message

IBM Content Navigator 3.0.CD could allow a remote attacker to traverse directories on the system. An attacker could send

Directory traversal in coreframe/app/template/admin/index.php in WUZHI CMS 4.1.0 allows attackers to list files in arbit

Directory Traversal vulnerability exists in FusionPBX 4.5.7, which allows a remote malicious user to create folders via

Sonatype Nexus Repository Manager 3.x before 3.31.0 allows a remote authenticated attacker to get a list of blob files a

An issue was discovered in CommScope Ruckus IoT Controller 1.7.1.0 and earlier. The API allows Directory Traversal.

The directory list page parameter of the Orca HCM digital learning platform fails to filter special characters properly.

In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file re

SAP Business One version - 10, due to improper input validation, allows an authenticated User to gain access to director

SharpCompress is a fully managed C# library to deal with many compression types and formats. Versions prior to 0.29.0 ar

A path traversal vulnerability was identified in GitHub Enterprise Server that could be exploited when building a GitHub

A vulnerability in the web-based management interface of Cisco Unified Communications Manager (Unified CM), Cisco Unifie

It was discovered that on Windows operating systems specifically, Kibana was not validating a user supplied path, which

Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 contains

Grafana is an open-source platform for monitoring and observability. Grafana prior to versions 8.3.2 and 7.5.12 has a di

A directory traversal vulnerability exists in the Web Manager FSBrowsePage functionality of Lantronix PremierWave 2050 8

The Tutor LMS – eLearning and online course solution WordPress plugin before 1.8.8 is affected by a local file inclusion

Path Traversal vulnerability in Samsung Notes prior to version 4.2.00.22 allows attackers to access local files without

Node-Red is a low-code programming for event-driven applications built using nodejs. Node-RED 1.2.7 and earlier has a vu

All versions of package github.com/tyktechnologies/tyk/gateway are vulnerable to Directory Traversal via the handleAddOr

In Mahara before 20.04.5, 20.10.3, 21.04.2, and 21.10.0, adjusting the path component for the page help file allows atta

Path traversal vulnerability in GROWI versions v4.2.2 and earlier allows an attacker with administrator rights to read a

bloofoxCMS 0.5.2.1 is infected with Path traversal in the 'fileurl' parameter that allows attackers to read local files.

Gitlab Enterprise Edition (EE) 11.3 through 12.4.2 allows Directory Traversal.

A security vulnerability has been identified in HPE SimpliVity 380 Gen 9, HPE SimpliVity 380 Gen 10, HPE SimpliVity 380

In GitLab EE 11.3 through 12.5.3, 12.4.5, and 12.3.8, insufficient parameter sanitization for the Maven package registry

LiveZilla 5.0.1.4 has a Remote Code Execution vulnerability

Directory traversal vulnerability in Thomson Reuters for FATCA before 5.2 allows remote attackers to execute arbitrary f

Directory traversal vulnerability in the agentLogUploader servlet in ZOHO ManageEngine Desktop Central (DC) and Desktop

Directory traversal vulnerability in the GfdFileUploadServerlet servlet in Lexmark MarkVision Enterprise before 2.1 allo

dotCMS before 5.2.4 is vulnerable to directory traversal, leading to incorrect access control. It allows an attacker to

SuiteCRM through 7.11.11 allows Directory Traversal to include arbitrary .php files within the webroot via add_to_prospe

The CGIHTTPServer module in Python 2.7.5 and 3.3.4 does not properly handle URLs in which URL encoding is used for path

Directory Traversal in Safescan Timemoto and TA-8000 series version 1.0 allows unauthenticated remote attackers to execu