CWE-23
Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
417 vulnerabilities with CWE-23
CVE-2021-41242
HIGH
OpenOlat <15.5.12-16.0.5 - Path Traversal
CVSS 8.1
CVE-2021-20040
HIGH
SonicWall SMA 200/210/400/410/500v Firmware - Unauthenticated Path Traversal via Upload Function
CVSS 7.5
CVE-2021-43176
HIGH
GOautodial <3c3a979 - Code Injection
CVSS 8.8
CVE-2021-43555
HIGH
mySCADA myDESIGNER <8.20.0 - Path Traversal
CVSS 7.3
CVE-2021-22870
MEDIUM
GitHub Enterprise Server <3.3 - Path Traversal
CVSS 6.5
CVE-2021-34594
MEDIUM
Beckhoff TF6100 and TS6100 Firmware < 4.3.48.0 - Path Traversal and Arbitrary File Manipulation
CVSS 6.5
CVE-2021-41178
HIGH
Nextcloud <20.0.13, 21.0.5, 22.2.0 - Path Traversal
CVSS 8.8
CVE-2021-41127
HIGH
rasa < 2.8.10 - Path Traversal and Arbitrary File Write via Malicious Model Tarball
CVSS 7.3
CVE-2021-41152
HIGH
OpenOlat < 15.5.8 - Path Traversal via Folder Component File Download
CVSS 7.7
CVE-2021-40870
CRITICAL
KEV
Aviatrix Controller <6.5-1804.1922 - Code Injection
CVSS 9.8
CVE-2021-32825
LOW
bblfshd < 2021-08-11 - Path Traversal and Arbitrary File Write via Unsafe Symbolic Link Handling
CVSS 2.7
CVE-2021-22674
MEDIUM
WebAccess/SCADA <8.4.5-9.0.1 - Path Traversal
CVSS 6.5
CVE-2021-32954
MEDIUM
Advantech WebAccess/SCADA <9.0.1 - Path Traversal
CVSS 6.5
CVE-2021-24035
CRITICAL
WhatsApp and WhatsApp Business < 2.21.8.13 - Path Traversal via Archive Extraction
CVSS 9.1
CVE-2021-28798
HIGH
QNAP QTS 4.3.2.0144-4.3.3.1624 and QuTS hero < h4.5.2.1638 - Relative Path Traversal
CVSS 8.8
CVE-2021-29488
MEDIUM
SABnzbd < 3.0.0 - Path Traversal via Malicious PAR2 Files
CVSS 4.3
CVE-2021-29101
HIGH
ArcGIS GeoEvent Server <= 10.8.1 - Unauthenticated Path Traversal
CVSS 7.5
CVE-2021-29100
HIGH
Esri ArcGIS Earth < 1.11.0 - Path Traversal and Arbitrary File Write via Crafted File Upload
CVSS 7.8
CVE-2020-25150
HIGH
B. Braun SpaceCom < L81 & Data Module CompactPlus A10-A11 - Authenticated Path Traversal & Arbitrary File Write
CVSS 7.6
CVE-2020-25176
CRITICAL
Schneider-electric Easergy T300 Firmware < 2.7.1 - Path Traversal
CVSS 9.1
CVE-2020-27304
CRITICAL
CivetWeb 1.8-1.14 - Path Traversal via File Upload Form Handler
CVSS 9.8
CVE-2020-4039
HIGH
fossasia/susi.ai < 2020-05-13 - Path Traversal and Arbitrary File Manipulation
CVSS 8.6
CVE-2020-7861
HIGH
AnySupport <2019.3.21.0 - Path Traversal
CVSS 8.4
CVE-2020-8570
CRITICAL
Kubernetes Java Client <10.0.0 - Path Traversal
CVSS 9.1
CVE-2020-17518
HIGH
Apache Flink <1.11.3-1.12.0 - Path Traversal
CVSS 7.5
Details
Vulnerabilities
417