CWE-23

IBM Cognos Analytics 11.2.0 through 11.2.4 FP5 is vulnerable to local file inclusion vulnerability, allowing an attacker

PwnDoc is a penetration test reporting application. Prior to version 1.2.0, the backup restore functionality is vulnerab

An issue in Filemanager v2.5.0 and below allows attackers to execute a directory traversal via sending a crafted HTTP re

A path traversal vulnerability in Vedo Suite 2024.17 allows remote authenticated attackers to read arbitrary filesystem

An authorized remote attacker can access files and directories outside the intended web root, potentially exposing sensi

IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allo

The Slider Revolution plugin for WordPress is vulnerable to unauthorized access and modification of data due to a missin

WebITR developed by Uniong has an Arbitrary File Read vulnerability, allowing authenticated remote attackers to exploit

nncp before 8.12.0 allows path traversal (for reading or writing) during freqing and file saving via a crafted path in p

RaspAP raspap-webgui 3.3.1 is vulnerable to Directory Traversal in ajax/networking/get_wgkey.php. An authenticated attac

An 'Arbitrary File Deletion' in Samsung DMS(Data Management Server) allows attackers to delete arbitrary files from unin

aerc before 93bec0d allows directory traversal in commands/msgview/open.go because of direct path concatenation of the n

PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior

A relative path traversal vulnerability [CWE-23] in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5

A relative path traversal in Fortinet FortiRecorder [CWE-23] version 7.2.0 through 7.2.1 and before 7.0.4 allows a privi

In JetBrains TeamCity before 2025.07.2 path traversal was possible during project archive upload

Relative Path Traversal vulnerability in Apache Solr. Solr instances running on Windows are vulnerable to arbitrary fil

A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been rated as problematic. Affec

In JetBrains Rider before 2025.1.2 custom archive unpacker allowed arbitrary file overwrite during remote debug session

A vulnerability in the “Manages app data” functionality of the web application of ctrlX OS allows a remote authenticated

A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This v

A vulnerability has been found in Safetytest Cloud-Master Server up to 1.1.1 and classified as critical. This vulnerabil

N-central is vulnerable to a path traversal that allows unintended access to the Apache Tomcat WEB-INF directory. Custom

A vulnerability in the `runs/delete-batch` endpoint of aimhubio/aim version 3.19.3 allows for arbitrary file or director

A Relative Path Traversal vulnerability [CWE-23] in FortiClientEMS 7.4.0 through 7.4.1 and FortiClientEMS Cloud 7.4.0 th

The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to Directory Traversal in a

Opencast is a free, open-source platform to support the management of educational audio and video content. In version 18

Vite is a frontend tooling framework for JavaScript. Prior to versions 7.1.5, 7.0.7, 6.3.6, and 5.4.20, any HTML files o

A vulnerability was found in code-projects Email Logging Interface 2.0. Affected is an unknown function of the file sign

A Path Traversal vulnerability has been identified in the Email Security appliance allows an attacker to manipulate file

In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the corr

Bit Assist plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.5.2 via the down

Relative Path Traversal vulnerability in Cristián Lávaque s2Member s2member allows Path Traversal.This issue affects s2M

In JetBrains TeamCity before 2025.03.1 improper path validation in loggingPreset parameter was possible

The eHRD CTMS developed by Sunnet has an Arbitrary File Reading vulnerability, allowing remote attackers with administra

A Relative Path Traversal vulnerability [CWE-23] in FortiWeb 7.6.0 through 7.6.4, 7.4.0 through 7.4.8, 7.2.0 through 7.2

A relative path traversal vulnerability has been reported to affect Download Station. If a remote attacker gains an admi

A vulnerability in the sanitize_path function in parisneo/lollms-webui v10 - latest allows an attacker to bypass path sa

Multiple relative path traversal vulnerabilities [CWE-23] vulnerability in Fortinet FortiCamera 2.1 all versions, FortiC

A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has

A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). A

A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown c

A path traversal vulnerability exists in the latest version of stangirard/quivr. This vulnerability allows an attacker t

A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function re

Dell Secure Connect Gateway (SCG) 5.0 Application and Appliance version(s) 5.26.00.00 - 5.30.00.00, contain a Relative P

Yealink T21P_E2 Phone 52.84.0.15 is vulnerable to Directory Traversal. A remote normal privileged attacker can read arbi

The Assemblyline 4 Service Client interfaces with the API to fetch tasks and publish the result for a service in Assembl

app/Model/EventReport.php in MISP before 2.5.27 allows path traversal in view picture for a site-admin.

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerabilit

A relative path traversal vulnerability was discovered in Productivity Suite software version 4.4.1.19. The vulnerabilit