CWE-73
High likelihoodExternal Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
396 vulnerabilities with CWE-73
CVE-2025-65115
HIGH
Remote Code Execution Vulnerability in JP1/IT Desktop Management 2 and JP1/NETM/DM
CVSS 8.8
CVE-2025-61879
HIGH
Infoblox NIOS <9.0.7 - Privilege Escalation
CVSS 7.7
CVE-2025-54162
MEDIUM
Qnap File Station < 5.5.6.5190 - Path Traversal
CVSS 4.9
CVE-2025-64712
CRITICAL
Pypi Unstructured < 0.18.18 - Path Traversal
CVSS 9.8
CVE-2025-53912
CRITICAL
MedDream PACS Premium <7.3.6.870 - Info Disclosure
CVSS 9.6
CVE-2025-66292
HIGH
DPanel <1.9.2 - Path Traversal
CVSS 8.1
CVE-2025-66003
HIGH
smb4k <4.0.5 - Local Root Exploit
CVE-2025-14059
MEDIUM
EmailKit plugin <1.6.1 - Path Traversal
CVSS 6.5
CVE-2025-68428
HIGH
Parall Jspdf < 4.0.0 - Path Traversal
CVSS 7.5
CVE-2025-62842
HIGH
HBS 3 Hybrid Backup Sync <26.2.0.938 - Path Traversal
CVSS 7.8
CVE-2025-12654
LOW
WPvivid Backup & Migration <0.9.120 - Path Traversal
CVSS 2.7
CVE-2025-68478
HIGH
Langflow <1.7.0 - Path Traversal
CVSS 7.1
CVE-2025-68155
HIGH
@vitejs/plugin-rs <0.5.8 - Info Disclosure
CVSS 7.5
CVE-2025-66449
HIGH
ConvertX <0.16.0 - Code Injection
CVSS 8.8
CVE-2025-13320
MEDIUM
WP User Manager <2.9.12 - Privilege Escalation
CVSS 6.8
CVE-2025-65473
CRITICAL
EasyImages <2.8.6 - Code Injection
CVSS 9.1
CVE-2025-67461
MEDIUM
Zoom Rooms for macOS <6.6.0 - Info Disclosure
CVSS 5.0
CVE-2025-59516
HIGH
Windows Storage VSP Driver - Privilege Escalation
CVSS 7.8
CVE-2025-65799
MEDIUM
usememos memos <0.25.2 - Path Traversal
CVSS 4.3
CVE-2025-12529
HIGH
WordPress Cost Calculator Builder <3.6.3 - RCE
CVSS 8.8
CVE-2025-66257
CRITICAL
DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter - Pat...
CVSS 9.1
CVE-2025-66254
CRITICAL
DB Electronica Telecomunicazioni S.p.A. Mozart FM Transmitter - Una...
CVSS 9.1
CVE-2025-13380
MEDIUM
AI Engine for WordPress: ChatGPT - Arbitrary File Read
CVSS 6.5
CVE-2025-30201
HIGH
Wazuh <4.13.0 - Privilege Escalation
CVSS 7.7
CVE-2025-11973
MEDIUM
简数采集器 WordPress Plugin <=2.6.3 - Info Disclosure
CVSS 4.9
Details
Vulnerabilities
396
Exploit Likelihood
High