CWE-22

A vulnerability in the FTP service of Western Digital My Cloud OS 5 devices running firmware versions prior to 5.26.119

The High Availability functionality of Yugabyte Anywhere can be abused to write arbitrary

A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet Fort

NVIDIA DGX-1 BMC contains a vulnerability in the IPMI handler, where an attacker with the appropriate level of authoriza

Path traversal for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potenti

Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was fo

Autolab is a course management service that enables auto-graded programming assignments. A Tar slip vulnerability was fo

Multiple vulnerabilities in the Zscaler Client Connector Installer and Uninstaller for Windows prior to 3.6 allowed exec

Path transversal in some Intel(R) NUC Kits NUC7i3DN, NUC7i5DN, NUC7i7DN HDMI firmware update tool software before versio

Path transversal in some Intel(R) NUC Uniwill Service Driver for Intel(R) NUC M15 Laptop Kits - LAPRC510 & LAPRC710 Uniw

Path transversal in some Intel(R) NUC Kits & Mini PCs - NUC8i7HVK & NUC8HNK USB Type C power delivery controller install

Path transversal in some Intel(R) NUC P14E Laptop Element Audio Install Package software before version 156 for Windows

Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vu

flarum is a forum software package for building communities. In versions prior to 1.7.0 an admin account which has alrea

ChangingTec ServiSign component has a path traversal vulnerability. An unauthenticated LAN attacker can exploit this vul

Vitals ESP upload function has a path traversal vulnerability. A remote attacker with general user privilege can exploit

NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can access arbitrary files, which may

Autolab is a course management service, initially developed by a team of students at Carnegie Mellon University, that en

A directory traversal vulnerability exists in the httpd downfile.cgi functionality of Siretta QUARTZ-GOLD G5.0.1.5-21072

A directory traversal vulnerability exists in the m2m DELETE_FILE cmd functionality of Siretta QUARTZ-GOLD G5.0.1.5-2107

In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not fi

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists that could

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in a funct

lmxcms v1.41 was discovered to contain an arbitrary file deletion vulnerability via BackdbAction.class.php.

An issue was discovered in dotCMS core 4.x through 22.10.2. An authenticated directory traversal vulnerability in the do

Versions of the package glance before 3.0.9 are vulnerable to Directory Traversal that allows users to read files outsid

A relative path traversal vulnerability [CWE-23] in FortiWeb 7.0.0 through 7.0.1, 6.3.6 through 6.3.18, 6.4 all versions

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when build

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as critical has been found in DrayTek Vigor 2960 1.5.1.4/1.5.

An authenticated path traversal vulnerability exists in the ArubaOS web-based management interface. Successful exploitat

Users authorized to list or watch one type of namespaced custom resource cluster-wide can read custom resources of a dif

** UNSUPPORTED WHEN ASSIGNED ** A vulnerability has been found in DrayTek Vigor 2960 1.5.1.4/1.5.1.5 and classified as c

A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0.

A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a direct

db_convert.php in ScriptCase through 9.9.008 is vulnerable to Arbitrary File Deletion by an admin via a directory traver

pgAdmin 4 versions prior to v6.19 contains a directory traversal vulnerability. A user of the product may change another

Missing access control in AnyMailing Joomla Plugin allows to list and access files containing sensitive information from

Hitachi Vantara Pentaho Business Analytics Server versions before 9.4.0.0 and 9.3.0.1, including 8.3.x, using the Penta

Multiple vulnerabilities in the web-based management interface of Cisco Prime Infrastructure and Cisco Evolved Programma

hap-wi/roxy-wi is a web interface for managing Haproxy, Nginx, Apache and Keepalived servers. A Path Traversal vulnerabi

pretalx 2.3.1 before 2.3.2 allows path traversal in HTML export (a non-default feature). Users were able to upload craft

Directory traversal and file enumeration vulnerability which allowed users to enumerate to different folders of the serv

CLTPHP <=6.0 is vulnerable to Directory Traversal.

Path Traversal in GitHub repository pimcore/pimcore prior to 10.5.21.

Pimcore is an open source data and experience management platform. Versions of Pimcore prior to 10.5.18 are vulnerable t

AgilePoint NX v8.0 SU2.2 & SU2.3 - Path traversal - Vulnerability allows path traversal and downloading files from the s

The n8n package 0.218.0 for Node.js allows Directory Traversal.

Synapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal.

Directory Traversal vulnerability in Site Core Experience Platform 10.2 and earlier allows authenticated remote attacker

When downloading files through the Save As dialog on Windows with suggested filenames containing environment variable na