CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,220 vulnerabilities with CWE-22
CVE-2022-20791
MEDIUM
Cisco Unified Communications Manager < 11.5(1.10000.6) & IM & Presence Service < 12.5(1) - Arbitrary File Read
CVSS 6.5
CVE-2022-31836
CRITICAL
beego < 2.0.3 and 1.12.0-1.12.11 and 2.0.0-2.0.3 - Path Traversal via leafInfo.match()
CVSS 9.8
CVE-2022-32551
HIGH
ManageEngine ServiceDesk Plus MSP < 10604 - Path Traversal via WEBINF/web.xml
CVSS 7.5
CVE-2022-28127
CRITICAL
Robustel R1510 Firmware 3.3.0 - Unauthenticated Arbitrary File Deletion via Web Server Remove API
CVSS 9.1
CVE-2022-33116
MEDIUM
GUnet Open eClass Platform <3.12.4 - Path Traversal
CVSS 6.5
CVE-2022-2106
LOW
Elcomplus SmartICS <2.3.4.0 - Path Traversal
CVSS 3.8
CVE-2022-1953
CRITICAL
Product Configurator for WooCommerce <1.2.32 - Path Traversal
CVSS 9.1
CVE-2022-29097
MEDIUM
Dell Wyse Management Suite < 3.6.1 - Path Traversal in Device API
CVSS 4.9
CVE-2022-30117
CRITICAL
Concrete CMS < 8.5.8 and 9.0.0-9.0.2 - Authenticated Path Traversal and Arbitrary File Delete via File Upload Endpoint
CVSS 9.1
CVE-2022-2120
HIGH
OFFIS DCMTK <3.6.7 - Path Traversal
CVSS 7.5
CVE-2022-2119
HIGH
OFFIS DCMTK <3.6.7 - Path Traversal
CVSS 7.5
CVE-2022-1518
CRITICAL
illumina local_run_manager 1.3-3.1 - Path Traversal via File Upload
CVSS 10.0
CVE-2022-34179
HIGH
Jenkins Embeddable Build Status Plugin <2.0.3 - Path Traversal
CVSS 7.5
CVE-2022-34177
HIGH
Jenkins Pipeline: Input Step Plugin <448.v37cea_9a_10a_70 - Privile...
CVSS 7.5
CVE-2022-31395
HIGH
Algo Communication Products Ltd. 8373 - Path Traversal
CVSS 8.8
CVE-2022-33995
HIGH
Drevolutions Remote Desktop Manager <2022.2 - Path Traversal
CVSS 7.5
CVE-2022-29774
CRITICAL
iSpy 7.2.2.0 - Remote Command Execution via Path Traversal
CVSS 9.8
CVE-2022-31062
MEDIUM
glpi_inventory < 1.0.2 - Local File Inclusion via Public Script
CVSS 5.3
CVE-2022-25856
HIGH
argo-events < 1.7.1 - Path Traversal in GitArtifactReader
CVSS 7.5
CVE-2022-31372
HIGH
Wiris Mathtype <7.28.0 - Path Traversal
CVSS 7.5
CVE-2022-32328
CRITICAL
Fast Food Ordering System 1.0 - Path Traversal and Arbitrary File Deletion via Master.php delete_img Parameter
CVSS 9.1
CVE-2022-29509
HIGH
T&D Data Server < 2.22 (Japanese) and < 2.30 (English) and THERMO RECORDER DATA SERVER < 2.13 - Path Traversal
CVSS 7.5
CVE-2022-1657
HIGH
Jupiter and JupiterX - Authenticated Path Traversal and Local File Inclusion via Control Panel Pane Action
CVSS 8.8
CVE-2022-26041
MEDIUM
generex rccmd < 4.26 - Authenticated Path Traversal and Arbitrary File Write
CVSS 6.5
CVE-2022-29094
HIGH
Dell SupportAssist Client Consumer <3.10.4 & Commercial <3.1.1 - Pr...
CVSS 7.1
Details
Vulnerabilities
9,220
Exploit Likelihood
High