CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,220 vulnerabilities with CWE-22
CVE-2022-29093
HIGH
Dell SupportAssist Client Consumer <3.10.4-Commercial <3.1.1 - Priv...
CVSS 7.1
CVE-2022-24278
HIGH
convert-svg-core <0.6.4 - Path Traversal
CVSS 7.5
CVE-2022-1993
HIGH
Gogs < 0.12.9 - Path Traversal
CVSS 8.1
CVE-2022-1992
CRITICAL
Gogs < 0.12.9 - Path Traversal
CVSS 9.1
CVE-2022-24840
CRITICAL
django-s3file < 5.5.1 - Path Traversal in AWS S3 Bucket
CVSS 9.1
CVE-2022-0779
MEDIUM
User Meta WordPress Plugin < 2.4.4 - Path Traversal via um_show_uploaded_file AJAX Action
CVSS 6.5
CVE-2022-28478
MEDIUM
SeedDMS <6.0.17, <5.1.24 - Path Traversal
CVSS 6.5
CVE-2022-32275
HIGH
Grafana 8.4.3 - Path Traversal via Snapshot URI
CVSS 7.5
CVE-2022-31483
CRITICAL
HID Mercury Intelligent Controllers <1.271 - Privilege Escalation
CVSS 9.1
CVE-2022-32270
CRITICAL
RealPlayer 20.0.7.309 and 20.0.8.310 - Remote Code Execution via Directory Traversal in Import Function
CVSS 9.8
CVE-2022-29597
MEDIUM
Solutions Atlantic Regulatory Reporting System v500 - Authenticated Local File Inclusion via ShowDocument.aspx
CVSS 6.5
CVE-2022-30804
MEDIUM
elitecms 1.01 - Unauthenticated Arbitrary File Deletion via delete_image.php
CVSS 6.5
CVE-2022-28945
CRITICAL
Webbank WeCube <3.2.2 - Path Traversal
CVSS 9.8
CVE-2022-1661
HIGH
Keysight N6854A and N6841A RF Firmware < 2.4.0 - Path Traversal
CVSS 7.5
CVE-2022-23082
HIGH
CureKit 1.0.1-1.1.3 - Path Traversal via isFileOutsideDir Input Sanitization Bypass
CVSS 7.5
CVE-2022-30508
MEDIUM
dedecms v5.7.93 - Arbitrary File Deletion via upload.php delete parameter
CVSS 6.5
CVE-2022-1664
CRITICAL
dpkg 1.14.17-1.18.25 - Directory Traversal via Crafted Source Package Extraction
CVSS 9.8
CVE-2022-29253
LOW
XWiki Platform <12.10.3,14.0 - Path Traversal
CVSS 2.7
CVE-2022-30427
HIGH
ginadmin < 2022-05-10 - Path Traversal
CVSS 7.5
CVE-2022-30321
HIGH
HashiCorp go-getter < 1.5.11, 2.0.2 - Path Traversal and Command Injection
CVSS 8.6
CVE-2022-1850
HIGH
filegator < 7.8.0 - Path Traversal
CVSS 8.1
CVE-2022-31268
HIGH
Gitblit 1.9.3 - Path Traversal via /resources//../
CVSS 7.5
CVE-2022-1359
MEDIUM
Cambium Networks cnMaestro - Arbitrary File Write via Path Traversal in On-Premise Route
CVSS 5.7
CVE-2022-29332
MEDIUM
D-LINK DIR-825 AC1200 R2 - Path Traversal
CVSS 6.5
CVE-2022-1721
HIGH
drawio < 18.0.5 - Path Traversal via WellKnownServlet
CVSS 7.5
Details
Vulnerabilities
9,220
Exploit Likelihood
High