CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,233 vulnerabilities with CWE-22
CVE-2021-28207
MEDIUM
ASUS BMC Firmware - Authenticated Path Traversal via Get Help File Function
CVSS 4.9
CVE-2021-28206
MEDIUM
ASUS BMC Firmware - Authenticated Path Traversal via Record Video File Function
CVSS 4.9
CVE-2021-28205
MEDIUM
ASUS BMC Firmware - Authenticated Path Traversal via Delete SOL Video File Function
CVSS 4.9
CVE-2021-3374
MEDIUM
RStudio Shiny Server < 1.5.16 - Path Traversal via Encoded Slash
CVSS 5.3
CVE-2021-20078
CRITICAL
ManageEngine OpManager < 125346 - Remote Denial of Service via Spark Gateway Path Traversal
CVSS 9.1
CVE-2021-27276
HIGH
NETGEAR ProSAFE Network Management System 1.6.0.26 - Path Traversal
CVSS 7.1
CVE-2021-27275
HIGH
NETGEAR ProSAFE Network Management System 1.6.0.26 - Info Disclosure
CVSS 8.3
CVE-2021-27272
HIGH
NETGEAR ProSAFE Network Management System 1.6.0.26 - File Deletion
CVSS 7.1
CVE-2021-29417
CRITICAL
gitjacker < 0.1.0 - Remote Code Execution via Directory Traversal
CVSS 9.8
CVE-2021-20206
HIGH
container_network_interface < 0.8.1 - Path Traversal via Plugin Type Field
CVSS 7.2
CVE-2021-25367
LOW
Samsung Notes <4.2.00.22 - Path Traversal
CVSS 3.7
CVE-2021-1436
MEDIUM
Cisco IOS XE SD-WAN - Authenticated Path Traversal via CLI
CVSS 4.4
CVE-2021-1435
HIGH
Cisco IOS XE - Authenticated Remote Code Execution via Web UI Command Injection
CVSS 7.2
CVE-2021-1385
MEDIUM
Cisco IOS and IOS XE - Authenticated Path Traversal via IOx API URI
CVSS 6.5
CVE-2021-21402
HIGH
Jellyfin < 10.7.1 - Unauthenticated Arbitrary File Read via Path Traversal
CVSS 7.7
CVE-2021-21357
HIGH
TYPO3 < 8.7.40, 9.5.25, 10.4.14, 11.1.1 - Authenticated Path Traversal and Arbitrary File Write via Form Designer Module
CVSS 8.3
CVE-2021-20218
HIGH
Redhat Kubernetes-client < 4.7.2 - Path Traversal
CVSS 7.4
CVE-2021-23357
LOW
Tyk - Path Traversal and Arbitrary File Deletion via Management API APIID Parameter
CVSS 3.3
CVE-2021-20669
MEDIUM
GROWI <= 4.2.2 - Authenticated Path Traversal via Specially Crafted URL
CVSS 4.7
CVE-2021-20668
LOW
GROWI <= 4.2.2 - Authenticated Path Traversal via Specially Crafted URL
CVSS 2.7
CVE-2021-26294
HIGH
AfterLogic Aurora and WebMail Pro < 7.7.9 - Unauthenticated Path Traversal via CalDAV Server Endpoint
CVSS 7.5
CVE-2021-26814
HIGH
Wazuh 4.0.0-4.0.3 - Authenticated Remote Code Execution via /manager/files API
CVSS 8.8
CVE-2021-28042
HIGH
Deutsche Post Mailoptimizer <4.3 - Path Traversal
CVSS 7.8
CVE-2021-26293
CRITICAL
AfterLogic Aurora and WebMail Pro < 8.5.3 - Path Traversal and Arbitrary File Write via DAV Server
CVSS 9.8
CVE-2021-26028
MEDIUM
Joomla! 3.0.0-3.9.24 - Path Traversal and Arbitrary File Write via Archive Zip Extraction
CVSS 5.5
Details
Vulnerabilities
9,233
Exploit Likelihood
High