CWE-22
High likelihoodImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.
9,142 vulnerabilities with CWE-22
CVE-2024-13535
MEDIUM
Actionwear products sync <= 2.3.2 - Unauthenticated Full Path Disclosure via composer-setup.php
CVSS 5.3
CVE-2024-56477
MEDIUM
IBM Power Hardware Management Console V10.3.1050.0 - Path Traversal
CVSS 6.5
CVE-2024-13791
MEDIUM
Bit Assist < 1.5.2 - Authenticated Path Traversal via downloadResponseFile()
CVSS 4.9
CVE-2024-47266
LOW
Synology Active Backup <2.7.1-3234 - Path Traversal
CVSS 2.7
CVE-2024-47264
MEDIUM
Synology Active Backup for Business <2.7.1-3234 - Path Traversal
CVSS 4.9
CVE-2024-10763
CRITICAL
Campress <= 1.35 - Unauthenticated Local File Inclusion via campress_woocommerce_get_ajax_products
CVSS 9.8
CVE-2024-51376
HIGH
yeqifu carRental <1.0 - Path Traversal
CVSS 7.5
CVE-2024-34521
LOW
Mavenir SCE App <PORTAL-LBS-R_1_0_24_0 - Path Traversal
CVSS 3.5
CVE-2024-6097
MEDIUM
Progress Telerik Reporting < 19.0.25.211 - Local Path Traversal via Absolute Path
CVSS 5.3
CVE-2024-11343
HIGH
Telerik Document Processing <2025.1.205 - Path Traversal
CVSS 8.3
CVE-2024-57777
MEDIUM
lanproxy 0.1 and before - Path Traversal
CVSS 5.1
CVE-2024-36508
MEDIUM
Fortinet FortiManager <7.4.2, FortiAnalyzer <7.2.5 - Path Traversal
CVSS 6.0
CVE-2024-11771
MEDIUM
Ivanti Cloud Services Appliance < 5.0.5 - Unauthenticated Path Traversal
CVSS 5.3
CVE-2024-13059
HIGH
mintplex-labs/anything-llm <1.3.1 - Path Traversal
CVSS 7.2
CVE-2024-8685
MEDIUM
Revolution Pi <2022-07-28-revpi-buster - Path Traversal
CVSS 4.3
CVE-2024-57248
MEDIUM
Gleamtech FileVista 9.2.0.0 - Path Traversal and Arbitrary File Upload
CVSS 6.3
CVE-2024-55214
MEDIUM
dhtmlx file_explorer 8.4.6 - Path Traversal via File Download Functionality
CVSS 6.5
CVE-2024-55213
MEDIUM
dhtmlx file_explorer 8.4.6 - Path Traversal via File Listing Function
CVSS 6.5
CVE-2024-52883
HIGH
AudioCodes One Voice Operations Center < 8.4.582 - Unauthenticated Path Traversal
CVSS 7.5
CVE-2024-54909
HIGH
GoldPanKit eva-server <4.1.0 - Path Traversal
CVSS 8.1
CVE-2024-53586
MEDIUM
WebFileSys <2.31.0 - Path Traversal
CVSS 5.3
CVE-2024-48019
MEDIUM
Apache Doris 2.1.0-2.1.7 - Path Traversal and Arbitrary File Read
CVSS 5.4
CVE-2024-57451
HIGH
ChestnutCMS <= 1.5.0 - Directory Traversal in FileController#getFileList
CVSS 7.5
CVE-2024-57669
HIGH
Zrlog backup-sql-file.jar 3.0.31 - Path Traversal via BackupController.java
CVSS 7.5
CVE-2024-51534
HIGH
Dell PowerProtect DD <8.3.0.0, 7.10.1.50, 7.13.1.20 - Path Traversal
CVSS 7.1
Details
Vulnerabilities
9,142
Exploit Likelihood
High