CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,221 vulnerabilities with CWE-22
CVE-2022-0673
MEDIUM
LemMinX < 0.19.0 - Path Traversal via External Schema File Cache Poisoning
CVSS 6.5
CVE-2022-25298
HIGH
webcc < 0.3.0 - Path Traversal
CVSS 7.5
CVE-2022-22914
HIGH
Ovidentia CMS 6.0 - Authenticated Path Traversal in FileManager
CVSS 7.5
CVE-2022-24983
HIGH
jqueryform/jqueryform < 2022-02-05 - Path Traversal via Unique ID Field
CVSS 7.5
CVE-2022-25188
MEDIUM
Jenkins Fortify Plugin < 20.2.34 - Path Traversal and Arbitrary File Write via Pipeline Step Parameters
CVSS 4.3
CVE-2022-25178
MEDIUM
Jenkins Pipeline < 552.vd9cc05b8a2e1 - Path Traversal via libraryResource Step
CVSS 6.5
CVE-2022-24977
CRITICAL
ImpressCMS < 1.4.2 - Unauthenticated Remote Code Execution via Directory Traversal in CKEditor Image Upload
CVSS 9.8
CVE-2022-24647
HIGH
CuppaCMS v1.0 - Arbitrary File Deletion via unlink() Function
CVSS 8.1
CVE-2022-24312
CRITICAL
Schneider-electric Interactive Graphical Scada System Data Server < 15.0.0.22020 - Path Traversal
CVSS 9.8
CVE-2022-24311
CRITICAL
Schneider-electric Interactive Graphical Scada System Data Server < 15.0.0.22020 - Path Traversal
CVSS 9.8
CVE-2022-23620
MEDIUM
XWiki < 13.6 - Path Traversal via SSX Document Reference Export
CVSS 6.8
CVE-2022-21999
HIGH
KEV
Windows Print Spooler - Privilege Escalation
CVSS 7.8
CVE-2022-21193
HIGH
TransmitMail 2.5.0-2.6.1 - Unauthenticated Path Traversal
CVSS 7.5
CVE-2022-22931
MEDIUM
Apache James < 3.6.2 - Path Traversal in Maildir Mailbox Store and Sieve File Repository
CVSS 4.3
CVE-2022-22679
MEDIUM
Synology DiskStation Manager 6.2-6.2.4-25556-3 - Authenticated Path Traversal and Arbitrary File Write
CVSS 6.5
CVE-2022-23609
HIGH
itunesrpc-remastered 3.1.0 - Arbitrary File Deletion via Unsanitized User Input
CVSS 8.3
CVE-2022-24348
HIGH
Argo CD <2.1.9 & <2.2.4 - Path Traversal
CVSS 7.7
CVE-2022-23357
CRITICAL
mozilocms 2.0 - Path Traversal via curent_dir Parameter
CVSS 9.1
CVE-2022-0401
CRITICAL
w-zip < 1.0.12 - Path Traversal
CVSS 9.8
CVE-2022-0320
CRITICAL
Essential Addons for Elementor <5.0.5 - Local File Inclusion
CVSS 9.8
CVE-2022-23602
HIGH
nim-lang/nimforum < 2.2.0 - Path Traversal via Include Directive
CVSS 7.7
CVE-2022-23409
MEDIUM
ethercreative/logs < 3.0.4 - Path Traversal via actionStream in Controller.php
CVSS 4.9
CVE-2022-22790
MEDIUM
SYNEL eharmony - Path Traversal via Name Parameter
CVSS 5.6
CVE-2022-22932
MEDIUM
Apache Karaf < 4.2.15 and 4.3.0-4.3.6 - Path Traversal via obr Commands and karaf-maven-plugin
CVSS 5.3
CVE-2022-23119
HIGH
Trend Micro Deep Security Agent < 20.0.0-3445 - Path Traversal
CVSS 7.5
Details
Vulnerabilities
9,221
Exploit Likelihood
High