CWE-22

Aver Information Inc PTZApp2 v20.01044.48 allows attackers to access sensitive files via a crafted GET request.

In Delta Electronics InfraSuite Device Master versions prior to 1.0.5, an attacker could use URL decoding to retrieve sy

This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche 6.3.3.1

Directory Traversal vulnerability found in Pfsense v.2.1.3 and Pfsense Suricata v.1.4.6 pkg v.1.0.1 allows a remote atta

siteproxy v1.0 was discovered to contain a path traversal vulnerability via the component index.js.

Atropim 1.5.26 is vulnerable to Directory Traversal.

Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a  p

The Activity plugin before 3.1.1 for GLPI allows reading local files via directory traversal in the front/cra.send.php f

The Managentities plugin before 4.0.2 for GLPI allows reading local files via directory traversal in the inc/cri.class.p

A Local File inclusion vulnerability in test.php in spreadsheet-reader 0.5.11 allows remote attackers to include arbitra

In Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon Packet Investigator could l

mindsdb is a Machine Learning platform to help developers build AI solutions. In affected versions an unsafe extraction

Repetier Server through 1.4.10 allows ..%5c directory traversal for reading files that contain credentials, as demonstra

In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible

Git is a revision control system. Prior to versions 2.30.9, 2.31.8, 2.32.7, 2.33.8, 2.34.8, 2.35.8, 2.36.6, 2.37.7, 2.38

An issue in the component /dialog/select_media.php of DedeCMS v5.7.107 allows attackers to execute a directory traversal

tar/TarFileReader.cpp in Cauldron cbang before bastet-v8.1.17 has a directory traversal during extraction that allows th

3CX before 18 Update 2 Security Hotfix build 18.0.2.315 on Windows allows unauthenticated remote attackers to read certa

3CX before 18 Hotfix 1 build 18.0.3.461 on Windows allows unauthenticated remote attackers to read %WINDIR%\system32 fil

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Carlo Gavazzi Powersoft

Directory Traversal vulnerability in virtualreception Digital Receptie version win7sp1_rtm.101119-1850 6.1.7601.1.0.6579

Ghost before 5.42.1 allows remote attackers to read arbitrary files within the active theme's folder via /assets/built%2

WJJ Software - InnoKB Server, InnoKB/Console 2.2.1 - CWE-22: Path Traversal

A path traversal vulnerability exists in Avalanche version 6.3.x and below that when exploited could result in possible

All versions of the package m.static are vulnerable to Directory Traversal due to improper input sanitization of the pat

A directory traversal vulnerability in the /get-artifact API method of the mlflow platform up to v2.0.1 allows attackers

A path traversal issue was discovered on GL.iNet devices before 3.216. Through the file sharing feature, it is possible

PyMdown Extensions is a set of extensions for the `Python-Markdown` markdown project. In affected versions an arbitrary

savysoda Wifi HD Wireless Disk Drive 11 is vulnerable to Local File Inclusion.

The web interface of Symcon IP-Symcon before 6.3 (i.e., before 2023-05-12) allows a remote attacker to read sensitive fi

Prestashop customexporter <= 1.7.20 is vulnerable to Incorrect Access Control via modules/customexporter/downloads/downl

Directory Traversal vulnerability in Sitecore Experience Platform through 10.2 allows remote attackers to download arbit

ZLMediaKit 4.0 is vulnerable to Directory Traversal.

Warpinator before 1.6.0 allows remote file deletion via directory traversal in top_dir_basenames.

A directory traversal vulnerability on Mercury MAC1200R devices allows attackers to read arbitrary files via a web-stati

Prestashop salesbooster <= 1.10.4 is vulnerable to Incorrect Access Control via modules/salesbooster/downloads/download.

Incorrect Access Control in the module "My inventory" (myinventory) <= 1.6.6 from Webbax for PrestaShop, allows a guest

Directory traversal vulnerability in Starlette versions 0.13.5 and later and prior to 0.27.0 allows a remote unauthentic

An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req

An issue was discovered in the tshirtecommerce (aka Custom Product Designer) component 2.1.4 for PrestaShop. An HTTP req

OfflinePlayerService.exe in Harbinger Offline Player 4.0.6.0.2 allows directory traversal as LocalSystem via ..\ in a UR

Jeecg P3 Biz Chat 1.0.5 allows remote attackers to read arbitrary files through specific parameters.

Prestashop winbizpayment <= 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download

jfinal CMS 5.1.0 has an arbitrary file read vulnerability.

packages/backend/src/routers in Lightdash before 0.510.3 has insecure file endpoints, e.g., they allow .. directory trav

In Suricata before 6.0.13 (when there is an adversary who controls an external source of rules), a dataset filename, tha

NocoDB through 0.106.0 (or 0.109.1) has a path traversal vulnerability that allows an unauthenticated attacker to access

Directory traversal can occur in the Basecamp com.basecamp.bc3 application before 4.2.1 for Android, which may allow an

MultiMC Launcher <= 0.6.16 is vulnerable to Directory Traversal.

Talend Data Catalog before 8.0-20230221 contain a directory traversal vulnerability in HeaderImageServlet.