CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,135 vulnerabilities with CWE-22
CVE-2025-12000
MEDIUM
WPFunnels <3.6.2 - Privilege Escalation
CVSS 6.5
CVE-2025-64485
MEDIUM
CVAT 2.4.0-2.48.1 - Authenticated Path Traversal and Arbitrary File Write via File Share Mount
CVE-2025-64433
MEDIUM
KubeVirt < 1.5.3 - Path Traversal and Arbitrary File Read via PVC Disk Mount
CVSS 6.5
CVE-2025-60574
HIGH
tQuadra CMS 4.2.1117 - Local File Inclusion via Styles Path
CVSS 7.5
CVE-2025-7719
MEDIUM
GE Vernova Smallworld <5.3.5 - Path Traversal
CVE-2025-57698
HIGH
AstrBot 3.5.22 - Path Traversal via Plugin Install-Upload Filename Handling
CVSS 7.5
CVE-2025-57712
MEDIUM
Qsync Central 5.0.0.0-5.0.0.2 - Authenticated Path Traversal
CVSS 6.5
CVE-2025-64346
MEDIUM
archives < 1.0.1 - Path Traversal and Remote Code Execution via Malicious Archive Extraction
CVE-2025-64184
HIGH
Dosage < 3.2 - Path Traversal via HTTP Content-Type Header
CVSS 8.8
CVE-2025-62630
HIGH
Advantech DeviceOn iEdge < 2.0.2 - Path Traversal and Remote Code Execution via Configuration File Upload
CVSS 8.8
CVE-2025-59171
HIGH
Advantech DeviceOn iEdge < 2.0.2 - Path Traversal and Remote Code Execution via Configuration File Upload
CVSS 7.5
CVE-2025-58423
HIGH
Advantech DeviceOn iEdge <= 2.0.2 - Directory Traversal and DoS
CVSS 8.8
CVE-2025-34238
MEDIUM
Advantech WebAccess/VPN < 1.1.5 - Authenticated Path Traversal via AjaxStandaloneVpnClientsController
CVSS 6.5
CVE-2025-12490
HIGH
Netgate pfSense CE - Path Traversal
CVSS 8.8
CVE-2025-22397
MEDIUM
Dell iDRAC9 and iDRAC10 - Path Traversal
CVSS 6.7
CVE-2025-60242
HIGH
Anatoly Download Counter <1.4 - Path Traversal
CVSS 7.5
CVE-2025-20374
MEDIUM
Cisco Unified Contact Center Express - Authenticated Path Traversal via Web UI
CVSS 4.9
CVE-2025-64108
HIGH
Cursor < 2.0 - Path Traversal and Remote Code Execution via NTFS Path Quirks
CVSS 8.8
CVE-2025-64107
HIGH
Cursor < 2.0 - Path Traversal and Remote Code Execution via Backslash Bypass
CVSS 8.8
CVE-2025-12493
CRITICAL
ShopLentor < 3.2.5 - Unauthenticated Local File Inclusion via load_template Function
CVSS 9.8
CVE-2025-43382
MEDIUM
macOS <15.7.2, <26.1, <14.8.2 - Info Disclosure
CVSS 5.5
CVE-2025-50735
HIGH
NextChat < 2.16.0 - Path Traversal via WebDAV Proxy
CVSS 7.5
CVE-2025-12626
MEDIUM
jeecgboot jeewx-boot <641ab52c3e1845fec39996d7794c33fb40dad1dd - Pa...
CVSS 4.3
CVE-2025-8385
MEDIUM
Zombify WordPress <1.7.5 - Path Traversal
CVSS 6.8
CVE-2025-10897
HIGH
WooCommerce Designer Pro <1.9.28 - Info Disclosure
CVSS 8.6
Details
Vulnerabilities
9,135
Exploit Likelihood
High