CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,168 vulnerabilities with CWE-22
CVE-2023-42791
HIGH
Fortinet FortiManager Path Traversal via Crafted HTTP Requests
CVSS 8.8
CVE-2023-49508
MEDIUM
YetiForceCRM < 6.5.0 - Authenticated Path Traversal via LibraryLicense.php License Parameter
CVSS 6.5
CVE-2023-5123
HIGH
Grafana JSON Datasource < - Path Traversal
CVSS 8.0
CVE-2023-35003
MEDIUM
Intel(R) VROC <8.0.8.1001 - Privilege Escalation
CVSS 6.7
CVE-2023-6294
HIGH
Popup Builder < 4.2.6 - Authenticated Server-Side Request Forgery via Unvalidated Parameter
CVSS 7.2
CVE-2023-40264
MEDIUM
Unify OpenScape Voice Trace Manager V8 < R0.9.11 - Authenticated Path Traversal
CVSS 4.3
CVE-2023-40266
CRITICAL
Unify OpenScape Xpressions WebAssistant 7.0-7r1_fr5_hf42_p911 - Path Traversal
CVSS 9.8
CVE-2023-6989
CRITICAL
Shield Security < 18.5.10 - Unauthenticated Local File Inclusion via render_action_template Parameter
CVSS 9.8
CVE-2023-7216
MEDIUM
GNU cpio - Path Traversal via Symlink Handling
CVSS 5.3
CVE-2023-52138
HIGH
Engrampa < 1.26.2 - Path Traversal and Remote Code Execution via CPIO Archive Symlink Handling
CVSS 8.2
CVE-2023-7077
CRITICAL
Sharp NEC Displays - Remote Code Execution via HTTP Request Parameter Injection
CVSS 9.8
CVE-2023-45027
MEDIUM
QNAP QTS, QuTS hero, and QuTScloud - Authenticated Path Traversal and Sensitive Data Exposure
CVSS 5.5
CVE-2023-45026
MEDIUM
QNAP QTS, QuTS hero, and QuTScloud - Authenticated Path Traversal and Sensitive Data Exposure
CVSS 5.5
CVE-2023-39611
HIGH
Software FX Chart FX 7.0.4962.20829 - Path Traversal and Arbitrary File Read
CVSS 7.5
CVE-2023-38019
HIGH
IBM SOAR QRadar Plugin App 1.0-5.0.3 - Path Traversal via URL Request
CVSS 8.1
CVE-2023-5390
MEDIUM
Honeywell ControlEdge Unit Operations Controller Firmware - Path Traversal
CVSS 5.3
CVE-2023-30970
MEDIUM
Gotham Table service & Forward App - Path Traversal
CVSS 6.5
CVE-2023-41474
MEDIUM
Ivanti Avalanche <6.3.4.153 - Path Traversal
CVSS 6.5
CVE-2023-52076
HIGH
Atril Document Viewer <1.26.2 - Path Traversal
CVSS 8.5
CVE-2023-50785
LOW
ManageEngine ADAudit Plus < 7270 - Authenticated Path Traversal
CVSS 2.7
CVE-2023-44395
MEDIUM
Autolab < 2.12.0 - Path Traversal in Assessment Functionality
CVSS 4.9
CVE-2023-35020
MEDIUM
IBM Sterling Control Center 6.3.0 - Path Traversal via URL Request
CVSS 5.4
CVE-2023-5097
HIGH
HYPR Workforce Access <8.7 - Path Traversal
CVSS 7.0
CVE-2023-2252
LOW
Directorist < 7.5.4 - Local File Inclusion via CSV Import File Parameter
CVSS 2.7
CVE-2023-6623
CRITICAL
Essential Blocks <4.4.3 - Code Injection
CVSS 9.8
Details
Vulnerabilities
9,168
Exploit Likelihood
High