CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,130 vulnerabilities with CWE-22
CVE-2025-70084
HIGH
OpenSatKit 2.2.1 - Path Traversal via FileUtil_GetFileInfo Function
CVSS 7.5
CVE-2025-69874
CRITICAL
nanotar <= 0.2.0 - Path Traversal and Arbitrary File Write via Crafted Tar Archive
CVSS 9.8
CVE-2025-64075
CRITICAL
Shenzhen Zhibotong Electronics ZBT WE2001 <23.09.27 - Path Traversal
CVSS 10.0
CVE-2025-68406
MEDIUM
Qsync Central 5.0.0.0-5.0.0.3 - Authenticated Path Traversal
CVSS 6.5
CVE-2025-66278
MEDIUM
File Station 5 <5.5.6.5190 - Path Traversal
CVSS 6.5
CVE-2025-62856
MEDIUM
QNAP File Station 5.5.6.4691-5.5.6.5190 - Authenticated Path Traversal
CVSS 4.4
CVE-2025-62855
MEDIUM
QNAP File Station 5.5.6.4691-5.5.6.5190 - Authenticated Path Traversal
CVSS 4.4
CVE-2025-62853
MEDIUM
QNAP File Station 5.5.6.4691-5.5.6.5165 - Authenticated Path Traversal
CVSS 6.5
CVE-2025-58470
MEDIUM
Qsync Central <5.0.0.4 - Path Traversal
CVSS 6.5
CVE-2025-54162
MEDIUM
QNAP File Station 5.5.6.4691-5.5.6.5067 - Authenticated Path Traversal
CVSS 4.9
CVE-2025-12757
MEDIUM
AXIS Camera Station Pro - Info Disclosure
CVSS 4.6
CVE-2025-15491
MEDIUM
Post Slides WP <1.0.1 - Path Traversal
CVSS 5.5
CVE-2025-69619
MEDIUM
Zipperapp MY Teditor - Path Traversal
CVSS 5.5
CVE-2025-64712
CRITICAL
unstructured < 0.18.18 - Path Traversal and Arbitrary File Write via MSG Attachment Processing
CVSS 9.8
CVE-2025-69618
MEDIUM
coto.world/coto 11.4.0 - Arbitrary File Overwrite via File Import Process
CVSS 6.5
CVE-2025-15487
MEDIUM
Code Explorer <1.4.6 - Path Traversal
CVSS 4.9
CVE-2025-69621
HIGH
Comic Book Reader <1.0.95 - Code Injection
CVSS 8.1
CVE-2025-69620
MEDIUM
office_reader - Path Traversal and Denial of Service via Internal Storage File Write
CVSS 5.0
CVE-2025-65077
HIGH
Lexmark - Path Traversal
CVE-2025-63372
MEDIUM
Articentgroup Zip Rar Extractor Tool <1.345.93.0 - Path Traversal
CVSS 4.3
CVE-2025-61658
MEDIUM
Wikimedia Foundation CheckUser <1.43.4-1.44.1 - Info Disclosure
CVSS 4.3
CVE-2025-61654
NONE
Wikimedia Foundation Thanks <1.43.4-1.44.1 - Info Disclosure
CVE-2025-61653
LOW
Wikimedia Foundation TextExtracts <1.39.14-1.44.1 - Info Disclosure
CVE-2025-61649
LOW
Wikimedia Foundation CheckUser - Info Disclosure
CVE-2025-61646
MEDIUM
MediaWiki <1.39.14-1.44.1 - Info Disclosure
CVSS 5.4
Details
Vulnerabilities
9,130
Exploit Likelihood
High