CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,256 vulnerabilities with CWE-22
CVE-2020-15639
CRITICAL
Marvell QConvergeConsole < 5.5.00.73 - Path Traversal & RCE via FlashValidatorServiceImpl
CVSS 9.8
CVE-2020-16245
CRITICAL
Advantech iView < 5.7 - Path Traversal and Arbitrary File Write
CVSS 9.8
CVE-2020-17385
HIGH
Cellopoint CelloOS <4.1.10 - Path Traversal
CVSS 7.5
CVE-2020-7377
HIGH
Metasploit 4.12.40-6.0.3 - Path Traversal and Arbitrary File Write via Telpho10 Credential Dump Module
CVSS 8.1
CVE-2020-7376
HIGH
Metasploit 4.11.7-6.0.3 - Path Traversal and Arbitrary File Write via get_keychains Method
CVSS 7.1
CVE-2020-19877
MEDIUM
DBHcms 1.2.0 - Unauthenticated Path Traversal
CVSS 5.3
CVE-2020-8227
MEDIUM
Nextcloud Desktop Client <2.6.4 - Info Disclosure
CVSS 6.8
CVE-2020-15858
MEDIUM
Thales DIS BGS5 EHSx PDSx ELS61 ELS81 PLS62 Firmware - Path Traversal
CVSS 6.2
CVE-2020-24571
HIGH
NexusQA NexusDB <4.50.23 - Path Traversal
CVSS 7.5
CVE-2020-24368
HIGH
Icinga Web2 <2.6.4-2.8.2 - Path Traversal
CVSS 7.5
CVE-2020-8209
HIGH
Citrix XenMobile <10.12 - Info Disclosure
CVSS 7.5
CVE-2020-9708
MEDIUM
Adobe Git Server < 1.3.1 - Path Traversal via resolveRepositoryPath
CVSS 5.9
CVE-2020-15141
LOW
openapi-python-client <0.5.3 - Path Traversal
CVSS 3.0
CVE-2020-8913
HIGH
Android Play Core Library < 1.7.2 - Local Arbitrary Code Execution via SplitCompat.install Endpoint
CVSS 8.8
CVE-2020-13376
CRITICAL
SecurEnvoy SecurMail 9.3.503 - Command Injection
CVSS 9.0
CVE-2020-5609
CRITICAL
CENTUM CS 3000 <R3.09.50 - Path Traversal
CVSS 9.8
CVE-2020-16116
LOW
KDE Ark < 20.08.0 - Path Traversal via Crafted Archive
CVSS 3.3
CVE-2020-16136
HIGH
tgstation-server 4.4.0-4.4.1 - Authenticated Path Traversal via Log Download Endpoint
CVSS 7.7
CVE-2020-3383
HIGH
Cisco Data Center Network Manager < 11.4(1) - Authenticated Path Traversal and Arbitrary File Write via Archive Utility
CVSS 8.8
CVE-2020-8222
MEDIUM
Pulse Connect Secure <9.1R8 - Path Traversal
CVSS 6.8
CVE-2020-8221
MEDIUM
Pulse Connect Secure <9.1R8 - Path Traversal
CVSS 4.9
CVE-2020-9689
MEDIUM
Magento < 2.3.5-p2 - Path Traversal and Arbitrary Code Execution
CVSS 6.5
CVE-2020-14490
HIGH
OpenClinic GA 5.09.02 and 5.89.05b - Path Traversal and Arbitrary File Execution
CVSS 8.8
CVE-2020-5614
MEDIUM
KonaWiki < 3.1.0 - Path Traversal
CVSS 5.3
CVE-2020-5377
CRITICAL
Dell EMC OpenManage Server Administrator < 9.4 - Unauthenticated Path Traversal via Web API Request
CVSS 9.1
Details
Vulnerabilities
9,256
Exploit Likelihood
High