CWE-73
High likelihoodExternal Control of File Name or Path
The product allows user input to control or influence paths or file names that are used in filesystem operations.
396 vulnerabilities with CWE-73
CVE-2025-6463
HIGH
Incsub Forminator < 1.44.3 - Remote Code Execution
CVSS 8.8
CVE-2025-33117
CRITICAL
IBM QRadar SIEM <7.5.0 Update Package 12 - Privilege Escalation
CVSS 9.1
CVE-2025-36506
MEDIUM
RICOH Streamline NX V3 PC Client <3.242.0 - Path Traversal
CVSS 6.5
CVE-2025-47956
MEDIUM
Windows Security App - Path Traversal
CVSS 5.5
CVE-2025-33053
HIGH
KEV
CVE-2025-33053 Exploit via Malicious .URL File and WebDAV
CVSS 8.8
CVE-2025-48067
MEDIUM
OctoPrint <1.11.1 - Info Disclosure
CVSS 5.4
CVE-2025-49138
MEDIUM
HAX CMS PHP <11.0.0 - Local File Inclusion
CVSS 6.5
CVE-2025-48783
HIGH
Soar Cloud HRD <7.3.2025.0408 - Path Traversal
CVSS 7.5
CVE-2025-48781
HIGH
Soar Cloud HRD <7.3.2025.0408 - Path Traversal
CVSS 7.5
CVE-2025-32802
MEDIUM
Kea <2.7.8 - Code Injection
CVSS 6.1
CVE-2025-4603
CRITICAL
eMagicOne Store Manager - Path Traversal
CVSS 9.1
CVE-2025-4602
MEDIUM
eMagicOne Store Manager for WooCommerce <1.2.5 - Info Disclosure
CVSS 5.9
CVE-2025-2409
CRITICAL
ASPECT <3.08.03 - Info Disclosure
CVSS 9.1
CVE-2025-3812
HIGH
WPBot Pro Wordpress Chatbot <13.6.2 - Privilege Escalation
CVSS 8.1
CVE-2025-26646
HIGH
.NET - Path Traversal
CVSS 8.0
CVE-2025-26684
MEDIUM
Microsoft Defender for Endpoint - Privilege Escalation
CVSS 6.7
CVE-2025-3419
HIGH
Eventin plugin <4.0.26 - Info Disclosure
CVSS 7.5
CVE-2025-46762
HIGH
Apache Parquet <1.15.0 - RCE
CVSS 8.1
CVE-2025-1056
MEDIUM
Gee-netics - Privilege Escalation
CVSS 6.1
CVE-2025-43951
CRITICAL
LabVantage <8.8.0.13 HF6 - Path Traversal
CVSS 9.8
CVE-2025-3103
HIGH
CLEVER - HTML5 Radio Player With History - Shoutcast and Icecast - ...
CVSS 7.5
CVE-2025-29709
CRITICAL
SourceCodester Company Website CMS 1.0 - File Upload
CVSS 9.8
CVE-2025-29708
CRITICAL
SourceCodester Company Website CMS 1.0 - File Upload
CVSS 9.8
CVE-2025-0124
LOW
Palo Alto Networks PAN-OS - Auth Bypass
CVSS 3.8
CVE-2025-29819
MEDIUM
Azure Portal Windows Admin Center - Info Disclosure
CVSS 6.2
Details
Vulnerabilities
396
Exploit Likelihood
High