CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,220 vulnerabilities with CWE-22
CVE-2022-47027
CRITICAL
Timmystudios Fast Typing Keyboard <1.275.1.162 - Code Injection
CVSS 9.8
CVE-2022-42470
HIGH
FortiClient 6.0.0-6.0.10 - Unauthenticated Path Traversal via Named Pipe
CVSS 7.8
CVE-2022-43771
MEDIUM
Hitachi Vantara Pentaho Business Analytics Server <9.4.0.0-9.3.0.1 ...
CVSS 6.5
CVE-2022-23522
HIGH
mindsdb < 22.11.4.3 - Path Traversal via TarSlip in shutil.unpack_archive
CVSS 8.5
CVE-2022-36982
HIGH
Ivanti Avalanche 6.3.3.101-6.3.3.102 - Unauthenticated Path Traversal in AgentTaskHandler
CVSS 7.5
CVE-2022-36981
CRITICAL
Ivanti Avalanche 6.3.3.101-6.3.4 - Remote Code Execution via Path Traversal in DeviceLogResource
CVSS 9.8
CVE-2022-2560
CRITICAL
EnterpriseDT CompleteFTP 22.1.0 Server - Path Traversal
CVSS 9.1
CVE-2022-48361
MEDIUM
Huawei EMUI - Path Traversal in Always On Display Theme Files
CVSS 5.3
CVE-2022-32199
MEDIUM
ScriptCase < 9.9.008 - Authenticated Arbitrary File Deletion via db_convert.php File Parameter
CVSS 6.5
CVE-2022-3146
MEDIUM
tripleo-ansible - Unauthenticated Sensitive Information Exposure via Insecure File Permissions
CVSS 5.5
CVE-2022-3101
MEDIUM
tripleo-ansible - Information Disclosure via Insecure File Permissions
CVSS 5.5
CVE-2022-47595
MEDIUM
WP Go Maps < 9.0.15 - Path Traversal
CVSS 4.9
CVE-2022-31474
HIGH
iThemes BackupBuddy <8.7.4.1 - Path Traversal
CVSS 7.5
CVE-2022-42476
HIGH
FortiProxy 1.1.0-1.1.5 - Privilege Escalation via CLI Request Path Traversal
CVSS 8.2
CVE-2022-41328
MEDIUM
KEV
Fortinet FortiOS <7.2.3-6.4.11 - Path Traversal
CVSS 6.7
CVE-2022-3162
MEDIUM
kubernetes <1.22.15 and 1.25.0-1.25.4 - Unauthorized Custom Resource Access via Path Traversal
CVSS 6.5
CVE-2022-41722
HIGH
filepath.Clean - Path Traversal
CVSS 7.5
CVE-2022-48362
HIGH
ManageEngine Desktop Central < 10.1.2137.2 - Path Traversal & RCE via AgentLogUploadServlet
CVSS 8.8
CVE-2022-41216
HIGH
Cloudflow 2.0.0-2.3.1 - Local File Inclusion via Path Traversal
CVSS 8.3
CVE-2022-44299
MEDIUM
SiteServerCMS 7.1.3 - Info Disclosure
CVSS 4.9
CVE-2022-33892
HIGH
Intel(R) Quartus Prime - Privilege Escalation
CVSS 7.3
CVE-2022-41335
HIGH
Fortinet FortiOS <7.2.2 - Path Traversal
CVSS 8.8
CVE-2022-30300
MEDIUM
FortiWeb 6.3.6-6.3.18, 7.0.0-7.0.1 - Authenticated Path Traversal via HTTP GET Request
CVSS 6.5
CVE-2022-30299
MEDIUM
FortiWeb 6.0.0-6.0.7, 6.1-6.3.19, 6.4, 7.0.0-7.0.1 - Authenticated Path Traversal via API
CVSS 5.3
CVE-2022-38731
MEDIUM
Qaelum DOSE 18.08-21.1 - Directory Traversal via loadimages name parameter
CVSS 4.3
Details
Vulnerabilities
9,220
Exploit Likelihood
High