CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,220 vulnerabilities with CWE-22
CVE-2022-2969
HIGH
Delta Industrial Automation DIALink < 1.5.0.0 Beta 4 - Path Traversal
CVSS 8.1
CVE-2022-29837
MEDIUM
Western Digital My Cloud Home/Duo & SanDisk ibi <8.12.0-178 Path Traversal & Arbitrary File Write
CVSS 4.7
CVE-2022-4031
LOW
Simple:Press <6.8 - Privilege Escalation
CVSS 3.8
CVE-2022-4030
HIGH
Simple:Press < 6.8.0 - Path Traversal and Arbitrary File Deletion via Avatar File Parameter
CVSS 8.1
CVE-2022-3361
MEDIUM
Ultimate Member <2.5.0 - Path Traversal
CVSS 4.3
CVE-2022-25848
HIGH
static-dev-server - Path Traversal
CVSS 7.5
CVE-2022-44635
HIGH
Apache Fineract < 1.8.1 - Authenticated Remote Code Execution via Path Traversal in File Upload
CVSS 8.8
CVE-2022-45921
HIGH
FusionAuth < 1.41.3 - Path Traversal and Arbitrary File Read
CVSS 7.5
CVE-2022-41158
HIGH
eyoom_builder < 4.5.3 - Remote Code Execution via Cookie Path Traversal
CVSS 7.2
CVE-2022-41712
MEDIUM
Frappe 14.10.0 - Path Traversal via Import File Parameter
CVSS 6.5
CVE-2022-40977
HIGH
Pilz PASvisu Server <1.12.0 - Path Traversal
CVSS 7.5
CVE-2022-40976
MEDIUM
Pilz - Path Traversal
CVSS 5.5
CVE-2022-44749
MEDIUM
KNIME Analytics Platform 3.2.0-4.6.4 - Path Traversal and Arbitrary File Write via ZIP Archive Extraction
CVSS 5.5
CVE-2022-44748
HIGH
KNIME Server 4.3.0-4.13.6 - Authenticated Path Traversal and Arbitrary File Write via ZIP Archive Extraction
CVSS 7.1
CVE-2022-45866
MEDIUM
qpress < 11.3 - Path Traversal via .. in .qp File
CVSS 5.3
CVE-2022-44280
MEDIUM
Automotive Shop Management System v1.0 - File Deletion
CVSS 6.5
CVE-2022-4065
MEDIUM
cbeust testng <7.5.1,7.7.1 - Path Traversal
CVSS 5.5
CVE-2022-41840
HIGH
Welcart eCommerce <2.7.7 - Path Traversal
CVSS 7.5
CVE-2022-39178
MEDIUM
webvendome - Internal Server IP and Full Path Disclosure via GET Request
CVSS 5.3
CVE-2022-38165
CRITICAL
F-Secure Policy Manager <2022-08-10 - File Write
CVSS 9.8
CVE-2022-3090
HIGH
Red Lion Controls Crimson <3.0-3.2.0044.0 - Path Traversal
CVSS 7.5
CVE-2022-41920
MEDIUM
Lancet < 1.3.4 and 2.0.0-2.1.10 - Path Traversal via ZipSlip in fileutil Package
CVSS 6.3
CVE-2022-42892
MEDIUM
syngo Dynamics < VA40G HF01 - Unauthenticated Directory Listing via Web Service Operation
CVSS 5.3
CVE-2022-44006
CRITICAL
BACKCLICK Professional <5.9.63 - RCE
CVSS 9.8
CVE-2022-44008
MEDIUM
BACKCLICK Professional <5.9.63 - Info Disclosure
CVSS 6.5
Details
Vulnerabilities
9,220
Exploit Likelihood
High