CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,222 vulnerabilities with CWE-22
CVE-2021-43734
HIGH
kkFileview 4.0.0 - Path Traversal and Arbitrary File Read
CVSS 7.5
CVE-2021-44111
MEDIUM
S-Cart < 6.7.2 - Path Traversal via sc-admin/backup Download
CVSS 4.4
CVE-2021-22804
HIGH
IGSS dc.exe <15.0.0.21243 - Info Disclosure
CVSS 7.5
CVE-2021-22748
HIGH
C-Bus Toolkit <1.15.9, C-Gate Server <2.11.7 - Path Traversal
CVSS 8.8
CVE-2021-45286
MEDIUM
ZZCMS 2021 - Path Traversal via Skin Parameter
CVSS 5.3
CVE-2021-29398
MEDIUM
NorthStar Club Management 6.3 - Unauthenticated Directory Traversal via fileManagerObjects.jsp
CVSS 5.3
CVE-2021-29395
HIGH
Northstar Club Management 6.3 - Unauthenticated Path Traversal via File Manager Download Endpoint
CVSS 7.5
CVE-2021-44977
HIGH
idreamsoft iCMS <=8.0.0 - Path Traversal and Arbitrary File Read
CVSS 7.5
CVE-2021-42753
HIGH
FortiWeb 5.8.0-6.3.15 - Authenticated Path Traversal and Arbitrary File Deletion
CVSS 8.1
CVE-2021-24761
MEDIUM
Error Log Viewer <1.1.2 - Path Traversal
CVSS 6.5
CVE-2021-23520
MEDIUM
juce < 6.1.5 - Arbitrary File Write via ZipFile::uncompressEntry
CVSS 5.5
CVE-2021-34805
HIGH
FAUST iServer < 9.0.019.019.7 - Path Traversal via URL-Encoded Directory Traversal
CVSS 7.5
CVE-2021-23484
CRITICAL
zip-local < 0.3.5 - Arbitrary File Write via Archive Extraction
CVSS 9.8
CVE-2021-32841
MEDIUM
SharpZipLib <1.3.3 - Path Traversal
CVSS 4.0
CVE-2021-32842
MEDIUM
SharpZipLib <1.3.3 - Path Traversal
CVSS 4.0
CVE-2021-32840
HIGH
SharpZipLib <1.3.3 - Path Traversal
CVSS 7.3
CVE-2021-23631
HIGH
convert-svg-core - Path Traversal via Crafted SVG File
CVSS 7.5
CVE-2021-44737
HIGH
Lexmark B2236 Firmware < mslsg.076.294 - Path Traversal via PJL
CVSS 8.8
CVE-2021-46203
MEDIUM
Taocms 3.0.2 - Arbitrary File Read via Path Parameter
CVSS 6.5
CVE-2021-46104
HIGH
webp_server_go <0.4.0 - Path Traversal
CVSS 7.5
CVE-2021-23514
MEDIUM
Crow < 0.3+4 - Path Traversal
CVSS 6.5
CVE-2021-28377
MEDIUM
Joomla! ChronoForums 2.0.11 - Local File Inclusion
CVSS 5.3
CVE-2021-28376
LOW
ChronoForms 7.0.7 - Path Traversal
CVSS 2.7
CVE-2021-37196
MEDIUM
Siemens COMOS Web < 10.2, 10.3 < 10.3.3.3, 10.4 < 10.4.1 - Path Traversal via Archive Extraction
CVSS 6.5
CVE-2021-44586
HIGH
dst-admin 1.3.0 - Unauthenticated Path Traversal and Arbitrary File Read
CVSS 7.5
Details
Vulnerabilities
9,222
Exploit Likelihood
High