CWE-23
Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
462 vulnerabilities with CWE-23
CVE-2020-7377
HIGH
Metasploit 4.12.40-6.0.3 - Path Traversal and Arbitrary File Write via Telpho10 Credential Dump Module
CVSS 8.1
CVE-2020-7376
HIGH
Metasploit 4.11.7-6.0.3 - Path Traversal and Arbitrary File Write via get_keychains Method
CVSS 7.1
CVE-2020-5410
HIGH
KEV
Spring Cloud Config <2.2.3 & <2.1.9 - Path Traversal
CVSS 7.5
CVE-2020-12026
HIGH
Advantech WebAccess < 8.4.4 and 9.0.0 - Path Traversal and Arbitrary File Write
CVSS 8.8
CVE-2020-12010
HIGH
Advantech WebAccess < 8.4.4 and 9.0.0 - Authenticated Path Traversal via Specially Crafted File
CVSS 7.1
CVE-2020-12006
CRITICAL
Advantech WebAccess < 8.4.4 - Authenticated Path Traversal and Arbitrary File Write
CVSS 9.8
CVE-2020-10631
CRITICAL
WebAccess/NMS <3.0.2 - Path Traversal
CVSS 9.8
CVE-2020-10619
CRITICAL
WebAccess/NMS <3.0.2 - Path Traversal
CVSS 9.1
CVE-2020-7008
HIGH
VISAM VBASE Editor 11.5.0.2 and VBASE Web-Remote Module - Path Traversal via URL Input
CVSS 7.5
CVE-2020-5284
MEDIUM
Next.js < 9.3.2 - Path Traversal in Dist Directory
CVSS 4.4
CVE-2020-5280
HIGH
http4s < 0.18.26 - Path Traversal via URI Normalization Bypass
CVSS 7.6
CVE-2020-8865
MEDIUM
Horde Groupware Webmail Edition 5.2.22 - RCE
CVSS 6.3
CVE-2020-5405
MEDIUM
Spring Cloud Config <2.2.2 & <2.1.7 - Path Traversal
CVSS 6.5
CVE-2020-5237
HIGH
1UP Oneupuploaderbundle < 1.9.3 - Path Traversal
CVSS 8.8
CVE-2019-19287
MEDIUM
Siemens XHQ < 6.1.0.0 - Unauthenticated Path Traversal
CVSS 6.5
CVE-2019-17640
CRITICAL
Eclipse Vert.x 3.4.0-3.9.4 - Path Traversal via StaticHandler on Windows
CVSS 9.8
CVE-2019-18338
HIGH
SINVR 3 Central Control Server < V1.5.0 - Authenticated Path Traversal via XML Communication Protocol
CVSS 7.7
CVE-2019-13944
MEDIUM
Siemens EN100 Ethernet Module - Unauthenticated Path Traversal via Web Server
CVSS 5.3
CVE-2019-3976
HIGH
MikroTik RouterOS < 6.44.5 and < 6.45.6 - Authenticated Directory Traversal via Upgrade Package Name Field
CVSS 8.8
CVE-2019-0074
MEDIUM
Juniper Junos OS - Authenticated Path Traversal in NFX150, QFX10K, EX9200, MX, and PTX Series with NG-RE
CVSS 5.5
CVE-2019-13408
HIGH
Advan VD-1 Firmware < 230 - Unauthenticated Path Traversal via ExportSettings.cgi Download Parameter
CVSS 7.5
CVE-2019-11826
HIGH
Synology Moments <1.3.0-0691 - Path Traversal
CVSS 8.0
CVE-2019-11822
MEDIUM
Synology Photo Station <6.8.11-3489, <6.3-2977 - Path Traversal
CVSS 4.3
CVE-2019-3943
HIGH
MikroTik RouterOS < 6.42.12, < 6.43.12, < 6.44beta75 - Authenticated Path Traversal via HTTP or Winbox Interface
CVSS 8.1
CVE-2018-12476
MEDIUM
SUSE Linux Enterprise Server 15, openSUSE Factory - Path Traversal
CVSS 4.3
Details
Vulnerabilities
462