CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,136 vulnerabilities with CWE-22
CVE-2025-58438
CRITICAL
internetarchive <5.5.0 - Path Traversal
CVE-2025-9566
HIGH
Red Hat Enterprise Linux 10 - Path Traversal via Podman Kube Play Command
CVSS 8.1
CVE-2025-48395
MEDIUM
Eaton NMC G2 < 2.2.0 - Authenticated Path Traversal via CLI Limited Shell
CVSS 4.7
CVE-2025-48550
MEDIUM
Android - Local Denial of Service via Path Traversal in SliceManagerTest
CVSS 5.5
CVE-2025-41035
MEDIUM
appRain CMF 4.0.5 - Authenticated Path Traversal via Download Endpoint
CVSS 6.5
CVE-2025-58355
HIGH
Soft Serve <0.9.1 - Command Injection
CVSS 7.7
CVE-2025-7039
LOW
Red Hat Enterprise Linux - Path Traversal via Integer Overflow in Temporary File Creation
CVSS 3.7
CVE-2025-7975
HIGH
Anritsu ShockLine < 2025.4.2 - Remote Code Execution via CHX File Parsing Path Traversal
CVSS 7.8
CVE-2025-58162
MEDIUM
Mobile Security Framework 4.4.0 - Authenticated Path Traversal and Arbitrary File Write via Malicious APK Upload
CVSS 6.5
CVE-2025-58161
MEDIUM
Mobile Security Framework 4.4.0 - Authenticated Directory Traversal via Download Route
CVSS 4.3
CVE-2025-9801
MEDIUM
SimStudioAI sim < 0.3.40 - Path Traversal via filePath Argument
CVSS 5.4
CVE-2025-58158
HIGH
Harness Open Source <3.3.0 - Command Injection
CVSS 8.8
CVE-2025-52861
HIGH
VioStor <5.1.6-20250621 - Path Traversal
CVE-2025-33038
MEDIUM
Qsync Central <4.5.0.7 - Path Traversal
CVSS 6.5
CVE-2025-33037
MEDIUM
Qsync Central <4.5.0.7 - Path Traversal
CVSS 6.5
CVE-2025-33036
MEDIUM
Qsync Central <4.5.0.7 - Path Traversal
CVSS 6.5
CVE-2025-33033
MEDIUM
Qsync Central <4.5.0.7 - Path Traversal
CVSS 6.5
CVE-2025-33032
MEDIUM
QNAP QTS and QuTS hero - Authenticated Path Traversal
CVSS 4.9
CVE-2025-30271
MEDIUM
QNAP QTS and QuTS hero - Authenticated Path Traversal
CVSS 6.5
CVE-2025-30270
MEDIUM
QNAP QTS and QuTS hero - Authenticated Path Traversal
CVSS 6.5
CVE-2025-9650
MEDIUM
yeqifu carRental <3fabb7eae93d209426638863980301d6f99866b3 - Path T...
CVSS 5.4
CVE-2025-9217
MEDIUM
Slider Revolution <6.7.36 - Path Traversal
CVSS 6.5
CVE-2025-54029
HIGH
WooCommerce csv import export <2.0.6 - Path Traversal
CVSS 7.7
CVE-2025-53588
HIGH
UPC/EAN/GTIN Code Generator <2.0.2 - Path Traversal
CVSS 7.7
CVE-2025-58072
HIGH
DOS Co., Ltd. SS1 <= 16.0.0.10 and SS1 Cloud <= 2.1.3 - Unauthenticated Path Traversal
CVSS 7.5
Details
Vulnerabilities
9,136
Exploit Likelihood
High