CWE-22

An issue was discovered in EMC Avamar Server 7.1.x, 7.2.x, 7.3.x, 7.4.x, 7.5.0; EMC NetWorker Virtual Edition (NVE) 9.0.

Winmail Server through 6.2 allows remote code execution by authenticated users who leverage directory traversal in a net

This vulnerability allows remote attackers to execute code by overwriting arbitrary files on vulnerable installations of

This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of Ne

This vulnerability allows remote attackers to execute code by creating arbitrary files on vulnerable installations of Ne

A directory traversal vulnerability in HPE Intelligent Management Center (IMC) PLAT 7.3 E0504P02 could allow remote code

ABAP File Interface in, SAP BASIS, from 7.00 to 7.02, from 7.10 to 7.11, 7.30, 7.31, 7.40, from 7.50 to 7.52, allows an

Huawei eSpace 7910 V200R003C30; eSpace 7950 V200R003C30; eSpace 8950 V200R003C00; V200R003C30 have a directory traversal

A directory traversal flaw in SquirrelMail 1.4.22 allows an authenticated attacker to exfiltrate (or potentially delete)

Gitlab Community Edition version 10.3 is vulnerable to a path traversal issue in the GitLab CI runner component resultin

The Spring web flows of TIBCO Software Inc.'s TIBCO JasperReports Server, TIBCO JasperReports Server Community Edition,

A flaw was found in source-to-image function as shipped with Openshift Enterprise 3.x. An improper path validation of ta

A directory traversal vulnerability in Trend Micro Endpoint Application Control 2.0 could allow a remote attacker to exe

Unrestricted file upload (RCE) in express-cart module before 1.1.7 allows a privileged user to gain access in the hostin

An issue was discovered in the cantata-mounter D-Bus service in Cantata through 2.3.1. The mount target path check in mo

WordPress through 4.9.6 allows Author users to execute arbitrary code by leveraging directory traversal in the wp-admin/

Harmonic NSG 9000 devices allow remote authenticated users to conduct directory traversal attacks, as demonstrated by "P

A vulnerability has been identified in Automation License Manager 5 (All versions < 5.3.4.4), Automation License Manager

Directory traversal in portal/import_template.php in versions of OpenEMR before 5.0.1.4 allows a remote attacker authent

DeltaV Versions 11.3.1, 12.3.1, 13.3.0, 13.3.1, and R5 is vulnerable due to improper path validation which may allow an

A flaw was found in RPC request using gfs3_mknod_req supported by glusterfs server. An authenticated attacker could use

LimeSurvey version 3.14.4 and earlier contains a directory traversal in file upload that allows upload of webshell vulne

An issue was discovered in JTBC(PHP) 3.0.1.6. It allows remote attackers to execute arbitrary PHP code by using a /conso

An "Unrestricted Upload of File with Dangerous Type" issue with directory traversal in navigate_upload.php in Naviwebs N

LAquis SCADA Versions 4.1.0.3870 and prior has a path traversal vulnerability, which may allow remote code execution.

In Attachment of Attachment.java and getFilePath of EmlAttachmentProvider.java, there is a possible Elevation of Privile

Apache Hadoop 3.1.0, 3.0.0-alpha to 3.0.2, 2.9.0 to 2.9.1, 2.8.0 to 2.8.4, 2.0.0-alpha to 2.7.6, 0.23.0 to 0.23.11 is ex

Data Center Operation allows for the upload of a zip file from its user interface to the server. A carefully crafted, ma

Data Center Expert, versions 7.5.0 and earlier, allows for the upload of a zip file from its user interface to the serve

log-user-session version 0.7 and earlier contains a Directory Traversal vulnerability in Main SUID-binary /usr/local/bin

In cryptctl before version 2.0 a malicious server could send RPC requests that could overwrite files outside of the cryp

pcs before version 0.9.164 and 0.10 is vulnerable to a privilege escalation via authorized user malicious REST call. The

A security vulnerability was identified in 3PAR Service Processor (SP) prior to SP-4.4.0.GA-110(MU7). The vulnerability

A flaw was found in openstack-tripleo-common as shipped with Red Hat Openstack Enterprise 10 and 11. The sudoers file as

A data modification vulnerability exists in Jenkins 2.153 and earlier, LTS 2.138.3 and earlier in User.java, IdStrategy.

This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest

An issue was discovered in Reprise License Manager 11.0. This vulnerability is a Path Traversal where the attacker, by c

Directory traversal vulnerability in SecurEnvoy SecurMail before 9.2.501 allows remote authenticated users to read e-mai

Cloud Foundry Cloud Controller, versions prior to 1.52.0, contains information disclosure and path traversal vulnerabili

Directory traversal may lead to files being exfiltrated or deleted on the GE MDS PulseNET and MDS PulseNET Enterprise ve

A path traversal vulnerability exists in Jenkins 2.120 and older, LTS 2.107.2 and older in FilePath.java, SoloFilePathFi

A directory traversal issue was found in reposync, a part of yum-utils, where reposync fails to sanitize paths in remote

A vulnerability in Cisco Data Center Network Manager software could allow an authenticated, remote attacker to conduct d

Directory traversal vulnerability in Cybozu Garoon 3.5.0 to 4.6.3 allows authenticated attackers to read arbitrary files

In Go before 1.10.6 and 1.11.x before 1.11.3, the "go get" command is vulnerable to directory traversal when executed wi

The "program extension upload" feature in OpenCart through 3.0.2.0 has a six-step process (upload, install, unzip, move,

The vulnerability exists within processing of editscript.php in Schneider Electric U.motion Builder software versions pr

Gitlab Community and Enterprise Editions version 10.3.3 is vulnerable to an Insecure Temporary File in the project impor

Huawei home gateway products HiRouter-CD20 and WS5200 with the versions before HiRouter-CD20-10 1.9.6 and the versions b

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, remote