CWE-23
Relative Path Traversal
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize sequences such as ".." that can resolve to a location that is outside of that directory.
462 vulnerabilities with CWE-23
CVE-2018-13299
MEDIUM
Synology Calendar < 2.2.2-0532 - Authenticated Path Traversal and Arbitrary File Write via Attachment Uploader
CVSS 4.3
CVE-2018-18990
MEDIUM
LCDS Laquis SCADA < 4.1.0.4150 - Path Traversal
CVSS 5.3
CVE-2018-12473
LOW
Open Build Service <70d1aa4cc4- Path Traversal
CVSS 3.1
CVE-2018-14795
HIGH
Emerson DeltaV 11.3.1 12.3.1 13.3.0 13.3.1 R5 - Path Traversal
CVSS 8.8
CVE-2018-10615
HIGH
GE MDS PulseNET <3.2.1 - Path Traversal
CVSS 8.1
CVE-2018-5448
MEDIUM
Medtronic 2090 CareLink Programmer Firmware - Path Traversal
CVSS 4.8
CVE-2017-9664
CRITICAL
ABB SREA-01 <3.31.5 & SREA-50 <3.32.8 - Info Disclosure
CVSS 9.8
CVE-2017-0918
HIGH
Gitlab CE <10.3 - Path Traversal, RCE
CVSS 8.8
CVE-2017-13996
HIGH
LOYTEC LVIS-3ME <6.2.0 - Path Traversal
CVSS 8.8
CVE-2016-20023
MEDIUM
CKSource CKFinder <2.5.0.1 - File Download
CVSS 5.0
CVE-2012-6069
CRITICAL
CODESYS Runtime System - Path Traversal and Arbitrary File Write via File Transfer Functionality
CVSS 10.0
CVE-2012-5972
SpecView < 2.5 Build 853 - Path Traversal via URI
Details
Vulnerabilities
462