CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Salesforce Tableau Serve

Grav is a file-based Web platform. Prior to 1.8.0-beta.27, A low privilege user account with page editing privilege can

Path traversal vulnerability in the virtualization base module. Successful exploitation of this vulnerability may affect

Path traversal vulnerability in the virtualization file module. Successful exploitation of this vulnerability may affect

Microhard Systems IPn4G 1.1.0 contains an authentication bypass vulnerability in the hidden system-editor.sh script that

In Progress® Telerik® Document Processing Libraries, versions prior to 2025 Q1 (2025.1.205), unzipping an archive can le

Xorcom CompletePBX is vulnerable to a path traversal via the Diagnostics reporting module, which will allow reading of a

Directory traversal vulnerability in Fanvil x210 V2 2.12.20 allows unauthenticated attackers on the local network to sto

A vulnerability exists in NGINX Ingress Controller's nginx.org/rewrite-target annotation validation. Note: Software v

A Path Traversal vulnerability exists in the eosphoros-ai/db-gpt version 0.6.0 at the API endpoint `/v1/resource/file/de

The GLPI Inventory Plugin handles various types of tasks for GLPI agents, including network discovery and inventory (SNM

VMware Cloud Foundation contains a directory traversal vulnerability. A malicious actor with network access to port 443

A directory traversal vulnerability was discovered in White Star Software Protop version 4.4.2-2024-11-27, specifically

The Counter live visitors for WooCommerce plugin for WordPress is vulnerable to arbitrary file deletion due to insuffici

MapTiler Tileserver-php v2.0 is vulnerable to Directory Traversal. The renderTile function within tileserver.php is resp

Possible path traversal vulnerability and denial-of-service in the ComboServlet in Liferay Portal 7.4.0 through 7.4.3.10

IBM AIX 7.2, and 7.3 and IBM VIOS 3.1, and 4.1 NIM server (formerly known as NIM master) service (nimesis) could allow a

esm.sh is a nobuild content delivery network(CDN) for modern web development. Prior to version 136, the esm.sh CDN servi

A vulnerability has been identified in GoldPanKit eva-server v4.1.0. It affects the path parameter of the /api/resource/

The SecureDrop Client is a desktop application for journalists to communicate with sources and work with submissions on

Improper Limitation of a Pathname to a Restricted Directory in DevTools in Google Chrome on Windows prior to 134.0.6998.

Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file deletion process

The Countdown, Coming Soon, Maintenance – Countdown & Clock plugin for WordPress is vulnerable to Local File Inclusion i

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in aytechnet DyaPress ERP/C

The InstaWP Connect – 1-click WP Staging & Migration plugin for WordPress is vulnerable to Local File Inclusion in all v

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in pickupp WooCommerce Pick

A Path Traversal "Zip Slip" vulnerability has been identified in mholt/archiver in Go. This vulnerability allows using a

The Avatar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in a f

Quick Agent V3 and Quick Agent V2 contain an issue with improper limitation of a pathname to a restricted directory ('Pa

The WP User Frontend Pro plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path val

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WebGeniusLab Seofy Core

ServiceStack FindType Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attacker

The Vikinger theme for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in th

The Extensions For CF7 (Contact form 7 Database, Conditional Fields and Redirection) plugin for WordPress is vulnerable

The hiWeb Export Posts plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and inclu

The Kallyas theme for WordPress is vulnerable to arbitrary folder deletion due to insufficient file path validation in t

The WooCommerce Purchase Orders plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file p

There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube

A path traversal vulnerability was discovered in the Time Machine functionality due to missing validation of two input p

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Version

The Directorist: AI-Powered Business Directory Plugin with Classified Ads Listings plugin for WordPress is vulnerable to

An issue in the size query parameter (/views/file.py) of Austrian Archaeological Institute Openatlas before v8.12.0 allo

Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability. The /goods/deleteGoods

SpinetiX Fusion Digital Signage 3.4.8 and lower contains an authenticated path traversal vulnerability that allows attac

A path traversal vulnerability was discovered in the Import Arc data archive functionality due to insufficient validatio

Advantech WebAccess/SCADA is vulnerable to directory traversal, which may allow an attacker to delete arbitrary files.

Cursor is a code editor built for programming with AI. In versions 0.45.0 through 0.48.6, the Cursor app introduced a re

Alpine iLX-507 Command Injection Remote Code Execution. This vulnerability allows network-adjacent attackers to execute

The User Meta – User Profile Builder and User management plugin plugin for WordPress is vulnerable to arbitrary file del

Mattermost versions 10.8.x <= 10.8.3, 10.5.x <= 10.5.8, 9.11.x <= 9.11.17, 10.10.x <= 10.10.1, 10.9.x <= 10.9.3 fail to