CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,161 vulnerabilities with CWE-22
CVE-2024-27770
HIGH
Unitronics Unistream Unilogic <1.35.227 - Path Traversal
CVSS 8.8
CVE-2024-27768
CRITICAL
Unitronics Unistream Unilogic <1.35.227 - Path Traversal
CVSS 9.8
CVE-2024-2294
MEDIUM
Backuply - Backup, Restore, Migrate and Clone <= 1.2.7 - Directory Traversal via backup_name Parameter
CVSS 4.9
CVE-2024-25156
MEDIUM
GoAnywhere MFT <7.4.2 - Path Traversal
CVSS 6.5
CVE-2024-22398
MEDIUM
SonicWall Email Security Appliance - Path Traversal
CVSS 4.9
CVE-2024-27102
CRITICAL
Pterodactyl Wings < 1.11.9 - Path Traversal
CVSS 9.9
CVE-2024-1358
HIGH
Elementor Addon Elements < 1.12.12 - Authenticated Path Traversal via Render Function
CVSS 8.8
CVE-2024-25154
MEDIUM
FileCatalyst Direct <3.8.8 - Path Traversal
CVSS 5.3
CVE-2024-27317
HIGH
Pulsar Functions Worker - Path Traversal
CVSS 8.4
CVE-2024-21400
CRITICAL
Microsoft Confidential Containers < 0.3.3 - Elevation of Privilege via Path Traversal
CVSS 9.0
CVE-2024-1303
MEDIUM
Badger Meter Monitool < 4.7 - Authenticated Path Traversal via Download-File Functionality
CVSS 6.5
CVE-2024-27279
MEDIUM
a-blog cms <= 2.10.51 - Authenticated Path Traversal
CVSS 6.5
CVE-2024-27121
HIGH
Machine Automation Controller NJ Series/NX Series - Path Traversal
CVSS 7.2
CVE-2024-2318
MEDIUM
ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028 - Path Traversal via Service Port 9999 File Download
CVSS 4.3
CVE-2024-23216
HIGH
macOS < 12.7.4, < 13.6.5, < 14.4 - Arbitrary File Write via Path Handling Issue
CVSS 7.1
CVE-2024-0818
CRITICAL
paddlepaddle < 2.6.0 - Arbitrary File Overwrite via Path Traversal
CVSS 9.1
CVE-2024-28222
CRITICAL
Veritas NetBackup < 8.1.2 and NetBackup Appliance < 3.1.2 - Unauthenticated Path Traversal and Arbitrary File Write
CVSS 9.8
CVE-2024-28151
MEDIUM
Jenkins HTML Publisher Plugin <= 1.32 - Path Traversal via Symbolic Link Handling
CVSS 4.3
CVE-2024-27765
HIGH
jeewms < 3.7 - Path Traversal via cgformTemplateController
CVSS 7.5
CVE-2024-27764
CRITICAL
jeewms < 3.7 - Path Traversal via AuthInterceptor Component
CVSS 9.8
CVE-2024-25614
MEDIUM
ArubaOS 8.10.0.0-8.10.0.9 - Arbitrary File Deletion via CLI
CVSS 5.5
CVE-2024-25164
HIGH
idurar 2.0.0 - Unauthenticated Path Traversal via Download Functionality
CVSS 7.5
CVE-2024-27199
HIGH
KEV
TeamCity < 2023.11.4 - Authentication Bypass
CVSS 7.3
CVE-2024-28088
HIGH
langchain < 0.1.12 and langchain-core < 0.1.30 - Path Traversal via load_chain Path Parameter
CVSS 8.1
CVE-2024-24307
HIGH
Product Designer < 1.178.36 - Path Traversal via ajaxProcessCropImage()
CVSS 7.5
Details
Vulnerabilities
9,161
Exploit Likelihood
High