CWE-22

D-Link D-View TftpReceiveFileHandler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows

LG Simple Editor copySessionFolder Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows re

LG Simple Editor saveXml Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attac

LG Simple Editor cp Command Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote at

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache OFBiz.This issue

The WPZOOM Addons for Elementor (Templates, Widgets) plugin for WordPress is vulnerable to Local File Inclusion in all v

Douchat 4.0.5 suffers from an arbitrary file upload vulnerability via Public/Plugins/webuploader/server/preview.php.

F-logic DataCube3 v1.0 is vulnerable to File Upload via `/admin/transceiver_schedule.php.`

MileSight DeviceHub - CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') may allow

Directory Traversal vulnerability in CubeCart v.6.5.5 and before allows an attacker to execute arbitrary code via a craf

parisneo/lollms-webui is vulnerable to path traversal attacks that can lead to remote code execution due to insufficient

A path traversal and arbitrary file upload vulnerability exists in the parisneo/lollms-webui application, specifically w

The gaizhenbiao/chuanhuchatgpt application is vulnerable to a path traversal attack due to its use of an outdated gradio

A path traversal vulnerability exists in the 'cyber_security/codeguard' native personality of the parisneo/lollms-webui,

A path traversal vulnerability exists in the parisneo/lollms application, specifically within the `sanitize_path_from_en

A remote code execution (RCE) vulnerability exists in the '/install_extension' endpoint of the parisneo/lollms-webui app

The Toshiba printers provide several ways to upload files using the web interface without authentication. An attacker ca

The Toshiba printers provide several ways to upload files using the admin web interface. An attacker can remotely compro

Remote Command program allows an attacker to get Remote Code Execution by overwriting existing Python files containing e

Remote Command program allows an attacker to get Remote Code Execution. This vulnerability can be executed in combinatio

The Shariff Wrapper plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 4.6.13

The file upload plugin in Adminer and AdminerEvo allows an attacker to upload a file with a table name of “..” to the ro

An issue was discovered in VirtoSoftware Virto Bulk File Download 5.5.44 for SharePoint 2019. The Virto.SharePoint.FileD

An issue in VPL Jail System up to v4.0.2 allows attackers to execute a directory traversal via a crafted request to a pu

In WhatsUp Gold versions released before 2023.1.3, an unauthenticated Remote Code Execution vulnerability in Progress Wh

A vulnerability in the /v1/runs API endpoint of lightning-ai/pytorch-lightning v2.2.4 allows attackers to exploit path t

BC Security Empire before 5.9.3 is vulnerable to a path traversal issue that can lead to remote code execution. A remote

Directory Travel in PHPVibe v11.0.46 due to incomplete blacklist checksums and directory checks, which can lead to code

Directory Traversal vulnerability in xmind2testcase v.1.5 allows a remote attacker to execute arbitrary code via the web

The Filter & Grids WordPress plugin before 2.8.33 is vulnerable to Local File Inclusion via the post_layout parameter. T

LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images.

Directory Traversal vulnerability in Marimer LLC CSLA .Net before 8.0 allows a remote attacker to execute arbitrary code

GL-iNet products AR750/AR750S/AR300M/AR300M16/MT300N-V2/B1300/MT1300/SFT1200/X750 v4.3.11, MT3000/MT2500/AXT1800/AX1800/

openHAB, a provider of open-source home automation software, has add-ons including the visualization add-on CometVisu. P

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in OpenText OpenText Direct

An arbitrary file write issue in the exfiltration endpoint in BYOB (Build Your Own Botnet) 2.0 allows attackers to overw

An issue in EQ Enterprise Management System before v2.0.0 allows attackers to execute a directory traversal via crafted

The WP Job Portal – A Complete Recruitment System for Company or Job Board website plugin for WordPress is vulnerable to

A path traversal vulnerability exists in the Rockwell Automation affected product. If exploited, the threat actor could

Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the signup() function of the

Best House Rental Management System 1.0 contains an arbitrary file upload vulnerability in the update_account() function

Mecha CMS 3.0.0 is vulnerable to Directory Traversal. An attacker can construct cookies and URIs that bypass user identi

The WordPress File Upload plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 4.2

The Advanced Access Manager plugin for WordPress is vulnerable to Unauthenticated Arbitrary File Read in versions up to,

Kieback & Peter's DDC4000 series is vulnerable to a path traversal vulnerability, which may allow an unauthenticated att

A path traversal vulnerability exists in the latest version of gaizhenbiao/chuanhuchatgpt. The vulnerability arises from

Webswing 23.2.2 allows remote attackers to modify client-side JavaScript code to achieve path traversal, likely leading

The WooCommerce Support Ticket System plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient

The WPLMS Learning Management System for WordPress, WordPress LMS theme for WordPress is vulnerable to arbitrary file re

The WordPress User Extra Fields plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file p