CWE-73

396 vulnerabilities with CWE-73

CVE-2025-58769 LOW

Auth0-PHP <8.16.0 - Path Traversal

CVSS 3.3

CVE-2025-6237 CRITICAL

Invokeai <6.0.0a1 - Path Traversal

CVSS 9.8

CVE-2025-10058 HIGH

WP Import - Ultimate CSV XML Importer <7.27 - Privilege Escalation

CVSS 8.1

CVE-2025-8422 HIGH

Propovoice: All-in-One Client Management System <=1.7.6.7 - Arbitrary File Read

CVSS 7.5

CVE-2025-59049 HIGH

Mockoon Commons-server < 9.2.0 - Path Traversal

CVSS 7.5

CVE-2025-58762 CRITICAL

Tautulli <2.15.3 - RCE

CVSS 9.1

CVE-2025-55316 HIGH

Azure Arc - Privilege Escalation

CVSS 7.8

CVE-2025-10134 CRITICAL

Goza - Nonprofit Charity WordPress Theme <3.2.2 - Privilege Escalation

CVSS 9.1

CVE-2025-9920 MEDIUM

Campcodes Recruitment Management System 1.0 - File Inclusion

CVSS 4.7

CVE-2025-54945 CRITICAL

SUNNET Corporate Training Management System <10.11 - RCE

CVSS 9.8

CVE-2025-58158 HIGH

Harness Open Source <3.3.0 - Command Injection

CVSS 8.8

CVE-2025-9529 HIGH

Campcodes Payroll Management System 1.0 - File Inclusion

CVSS 7.3

CVE-2025-9048 HIGH

Wptobe-memberships <3.4.2 - Privilege Escalation

CVSS 8.1

CVE-2025-53363 MEDIUM

dpanel <1.7.2 - Info Disclosure

CVE-2025-55746 CRITICAL

Directus <11.9.3 - File Upload

CVSS 9.3

CVE-2025-20269 MEDIUM

Cisco EPNM/Prime Infrastructure - Info Disclosure

CVSS 6.5

CVE-2025-53769 MEDIUM

Windows Security App - Path Traversal

CVSS 5.5

CVE-2025-29866 HIGH

TAGFREE X-Free Uploader <1.0.1.0085 - Path Traversal

CVE-2025-54780 HIGH

GLPI glpi-screenshot-plugin <2.0.2 - Info Disclosure

CVSS 7.7

CVE-2025-4674 HIGH

Go - Code Injection

CVSS 8.6

CVE-2025-5393 CRITICAL

Alone - Charity Multipurpose Non-profit WordPress Theme <7.8.3 - Pa...

CVSS 9.1

CVE-2025-6691 HIGH

Brainstormforce Sureforms < 0.0.14 - Remote Code Execution

CVSS 8.1

CVE-2025-48385 HIGH

Git - SSRF

CVE-2025-49760 LOW

Microsoft Windows Storage - Spoofing via External Control of File Name or Path

CVSS 3.5

CVE-2025-49588 HIGH

Linkwarden <2.10.2 - Info Disclosure