CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,225 vulnerabilities with CWE-22
CVE-2021-22022
MEDIUM
VMware vRealize Operations Manager 8.0.0-8.4.x - Arbitrary File Read via API
CVSS 4.9
CVE-2021-40153
HIGH
squashfs-tools 4.5 - Path Traversal and Arbitrary File Write via unsquash-1.c Directory Entry
CVSS 8.1
CVE-2021-38612
HIGH
NASCENT RemKon Device Manager <4.0.0.0 - Path Traversal
CVSS 7.5
CVE-2021-23430
HIGH
startserver - Path Traversal via Unsanitized Input
CVSS 7.5
CVE-2021-24549
MEDIUM
AceIDE < 2.6.2 - Authenticated Path Traversal via Unsanitized User Input
CVSS 4.9
CVE-2021-22933
MEDIUM
Pulse Connect Secure <9.1R12 - Privilege Escalation
CVSS 6.5
CVE-2021-38758
HIGH
Online Catering Reservation System 1.0 - Path Traversal
CVSS 7.5
CVE-2021-24363
MEDIUM
Photo Gallery by 10Web < 1.5.75 - Path Traversal via Uploaded File Placement
CVSS 4.9
CVE-2021-23423
MEDIUM
bikeshed < 3.0.0 - Path Traversal via Untrusted Source File Processing
CVSS 5.5
CVE-2021-26086
MEDIUM
KEV
Atlassian Jira Server/Data Center Path Traversal via /WEB-INF/web.xml
CVSS 5.3
CVE-2021-27402
MEDIUM
Mitel MiCollab <9.2 FP2 - Path Traversal
CVSS 6.5
CVE-2021-37347
HIGH
Nagios XI < 5.8.5 - Local Privilege Escalation via getprofile.sh Directory Argument
CVSS 7.8
CVE-2021-37343
HIGH
Nagios XI Autodiscovery Webshell Upload
CVSS 8.8
CVE-2021-31731
MEDIUM
KiteCMS 1.1.1 - Authenticated Path Traversal and Arbitrary File Write via Template File Edit
CVSS 6.5
CVE-2021-37367
HIGH
CTparental < 4.45.07 - Remote Code Execution via Directory Traversal in bl_categories_help.php
CVSS 7.8
CVE-2021-22674
MEDIUM
WebAccess/SCADA <8.4.5-9.0.1 - Path Traversal
CVSS 6.5
CVE-2021-21501
HIGH
ServiceComb 1.0.0-1.x.x - Path Traversal
CVSS 7.5
CVE-2021-38197
CRITICAL
Go bindings for unarr 0.1.1 - Path Traversal
CVSS 9.8
CVE-2021-38136
MEDIUM
Corero SecureWatch Managed Services 9.7.2.0020 - Path Traversal
CVSS 6.5
CVE-2021-34638
MEDIUM
WordPress Download Manager <= 3.1.24 - Authenticated Directory Traversal and Cross-Site Scripting via Download Template
CVSS 6.5
CVE-2021-36168
MEDIUM
Fortinet FortiPortal <6.0.5-6.2.5 - Path Traversal
CVSS 6.5
CVE-2021-24010
HIGH
FortiSandbox 3.1.0-3.1.4 and 3.2.0-3.2.2 - Authenticated Path Traversal via Crafted Web Requests
CVSS 8.1
CVE-2021-35397
HIGH
drogon 1.0.0-beta14-1.6.0 - Unauthenticated Path Traversal in Static Router
CVSS 7.5
CVE-2021-32804
HIGH
node-tar <6.1.1,5.0.6,4.4.14,3.3.2 - File Creation/Overwrite
CVSS 8.2
CVE-2021-32803
HIGH
node-tar <6.1.2-3.2.3 - File Creation/Overwrite
CVSS 8.2
Details
Vulnerabilities
9,225
Exploit Likelihood
High