CWE-22

Sunlogin Sunflower Simplified (aka Sunflower Simple and Personal) 1.0.1.43315 is vulnerable to a path traversal issue. A

Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3.

Path traversal vulnerability in SS1 Ver.13.0.0.40 and earlier and Rakuraku PC Cloud Agent Ver.2.1.8 and earlier allows a

Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows at

In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathna

In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer

An issue in the component /network_config/nsg_masq.cgi of DCN (Digital China Networks) DCBI-Netlog-LAB v1.0 allows attac

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Ivanti Avalanche 6.3.3

Directory Traversal vulnerability found in B3log Wide allows a an attacker to escalate privileges via symbolic links.

BiblioCraft before 2.4.6 does not sanitize path-traversal characters in filenames, allowing restricted write access to a

In Apache Linkis <=1.3.1, due to the Manager module engineConn material upload does not check the zip path, This is a

The Hummingbird WordPress plugin before 3.4.2 does not validate the generated file path for page cache files before writ

Timmystudios Fast Typing Keyboard v1.275.1.162 allows unauthorized apps to overwrite arbitrary files in its internal sto

Directory Traversal vulnerability found in T-ME Studios Change Color of Keypad v.1.275.1.277 allows a remote attacker to

A vulnerability in the Wi-Fi file transfer module of Shanling M5S Portable Music Player with Shanling MTouch OS v4.3 and

In imo.im 2022.11.1051, a path traversal vulnerability delivered via an unsanitized deeplink can force the application t

CLTPHP <=6.0 is vulnerable to Improper Input Validation.

WebPlus Pro v1.4.7.8.4-01 is vulnerable to Incorrect Access Control.

MicroEngine Mailform version 1.1.0 to 1.1.8 contains a path traversal vulnerability. If the product's file upload functi

Directory traversal vulnerability in MW WP Form versions v4.4.2 and earlier allows a remote unauthenticated attacker to

Directory traversal vulnerability in Snow Monkey Forms versions v5.0.6 and earlier allows a remote unauthenticated attac

An issue was discovered in AudioCodes Device Manager Express through 7.8.20002.47752. Remote code execution can be achie

Fox-IT DataDiode (aka Fox DataDiode) 3.4.3 suffers from a path traversal vulnerability with resultant arbitrary writing

Keyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to o

In Percona Monitoring and Management (PMM) server 2.x before 2.37.1, the authenticate function in auth_server.go does no

The WP Directory Kit plugin for WordPress is vulnerable to Local File Inclusion in versions up to, and including, 1.1.9

Directory traversal vulnerability in ujcms 6.0.2 allows attackers to move files via the rename feature.

cmseasy v7.7.7.7 20230520 was discovered to contain a path traversal vulnerability via the add_action method at lib/admi

Onlyoffice Community Server before v12.5.2 was discovered to contain a remote code execution (RCE) vulnerability via the

A path traversal vulnerability in the Trend Micro Apex One and Apex One as a Service could allow an unauthenticated atta

Multiple Services such as VHS(Video History Server) and VCD(Video Clip Distributor) and Clips2 were discovered to be vul

Directory Traversal vulnerability found in Cryptoprof WCMS v.0.3.2 allows a remote attacker to execute arbitrary code vi

Gibbon v25.0.0 is vulnerable to a Local File Inclusion (LFI) where it's possible to include the content of several files

The Syncfusion EJ2 Node File Provider 0102271 is vulnerable to filesystem-server.js directory traversal. As a result, an

The Syncfusion EJ2 ASPCore File Provider 3ac357f is vulnerable to Models/PhysicalFileProvider.cs directory traversal. As

Apache Shiro, before 1.12.0 or 2.0.0-alpha-3, may be susceptible to a path traversal attack that results in an authentic

An issue was discovered in Vocera Report Server and Voice Server 5.x through 5.8. There is Path Traversal via the "resto

ZKTeco BioTime 8.5.5 through 9.x before 9.0.1 (20240617.19506) allows authenticated attackers to create or overwrite arb

PaperCut NG and PaperCut MF before 22.1.3 on Windows allow path traversal, enabling attackers to upload, read, or delete

An unauthenticated attacker could achieve the code execution through a RemoteControl server.

Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows re

The Rockwell Automation Thinmanager Thinserver is impacted by an improper input validation vulnerability.  Due to an imp

In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server.

IceWarp Mail Server v10.4.5 was discovered to contain a local file inclusion (LFI) vulnerability via the component /cale

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Auth

This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant. Auth

NATS nats-server 2.2.0 through 2.7.4 allows directory traversal because of an unintended path to a management action fro

web\ViewAction in Yii (aka Yii2) 2.x before 2.0.5 allows attackers to execute any local .php file via a relative path in

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php.

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php.