CWE-22

A directory traversal vulnerability exists in the F5OS QKView utility that allows an authenticated attacker to read fil

A vulnerability was found in ZhongBangKeJi CRMEB 5.2.2. It has been declared as critical. This vulnerability affects the

Session version 1.17.5 allows obtaining internal application files and public files from the user's device without the

There is an arbitrary file deletion vulnerability in the CLI used by ArubaOS. Successful exploitation of this vulnerabil

A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow au

Directory Traversal vulnerability in Speedy11CZ MCRPX v.1.4.0 and before allows a local attacker to execute arbitrary co

A vulnerability was found in Qdrant up to 1.6.1/1.7.4/1.8.2 and classified as critical. This issue affects some unknown

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in RexTheme Product Feed Ma

A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authe

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Mon

This issue was addressed through improved state management. This issue is fixed in macOS Sonoma 14.5, macOS Ventura 13.6

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Elementor Elemento

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Son

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sonoma 14.4. An app may be ab

A vulnerability was found in elunez eladmin up to 2.7 and classified as critical. This issue affects some unknown proces

Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to pr

Okta Verify for Windows is vulnerable to privilege escalation through DLL hijacking. The vulnerability is fixed in Okta

A vulnerability has been identified in SINEC NMS (All versions < V3.0). The importCertificate function of the SINEC NMS

An issue in Super easy enterprise management system v.1.0.0 and before allows a local attacker to obtain the server abso

A improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiClientEMS versions 7.2

The issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15. An app may

This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15,

A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files

A vulnerability in the API of Cisco ISE could allow an authenticated, remote attacker to read and delete arbitrary files

An issue in the action_listcategories() function of Sangoma Asterisk v22/22.0.0/22.0.0-rc1/22.0.0-rc2/22.0.0-pre1 allows

IBM Sterling Control Center 6.3.0 could allow a remote attacker to traverse directories on the system. An attacker could

A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Aff

Thruk is a multibackend monitoring webinterface. Prior to 3.12, the Thruk web monitoring application presents a vulnera

The Pixee Java Code Security Toolkit is a set of security APIs meant to help secure Java code. `ZipSecurity#isBelowCurre

The WP Recipe Maker plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 9.1.

Path Traversal in Sonatype IQ Server from version 143 allows remote authenticated attackers to overwrite or delete files

An issue was discovered in HSC Mailinspector 5.2.17-3. A Path Traversal vulnerability (resulting in file deletion) exist

An issue in EnvisionWare Computer Access & Reservation Control SelfCheck v1.0 (fixed in OneStop 3.2.0.27184 Hotfix May 2

MyPower vc8100 V100R001C00B030 was discovered to contain an arbitrary file read vulnerability via the component /tcpdump

A vulnerability was found in Chengdu Everbrite Network Technology BeikeShop up to 1.5.5. Affected by this issue is the f

A vulnerability classified as critical was found in vedees wcms up to 0.3.2. Affected by this vulnerability is an unknow

A vulnerability was found in EyouCMS 1.51. It has been rated as critical. This issue affects the function editFile of th

A vulnerability has been found in Landray EKP up to 16.0 and classified as critical. This vulnerability affects the func

SiYuan is a personal knowledge management system. Prior to version 3.1.16, the `/api/asset/upload` endpoint in Siyuan is

An issue was discovered in GitLab affecting all versions starting 15.2 to 17.4.6, 17.5 prior to 17.5.4, and 17.6 prior t

A vulnerability, which was classified as critical, has been found in unknown-o download-station up to 1.1.8. This issue

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in D-Link DIR-859 1.06B01. It has been rated as critical. Affe

@hono/node-server is an adapter that allows users to run Hono applications on Node.js. Since v1.3.0, @hono/node-server h

Whoogle Search is a self-hosted metasearch engine. Versions 0.8.3 and prior have a limited file write vulnerability when

stereoscope is a go library for processing container images and simulating a squash filesystem. Prior to version 0.0.1,

An attacker could potentially exploit this vulnerability, leading to files being read from the Honeywell Experion Contro

A path traversal vulnerability was found in the CPIO utility. This issue could allow a remote unauthenticated attacker t

In JetBrains TeamCity before 2023.11.2 limited directory traversal was possible in the Kotlin DSL documentation