CWE-73

High likelihood

External Control of File Name or Path

Parent: CWE-642 - External Control of Critical State Data

The product allows user input to control or influence paths or file names that are used in filesystem operations.

396 vulnerabilities with CWE-73
CVE-2024-13984 CRITICAL
QiAnXin TianQing Management Center <=6.7.0.4130 - Path Traversal
CVE-2024-1244 CRITICAL
OSSEC HIDS <3.8.0 - Info Disclosure
CVE-2024-1243 HIGH
Wazuh < 4.8.0 - Remote Code Execution
CVSS 7.2
CVE-2024-51553 MEDIUM
ASPECT <3.* - Info Disclosure
CVSS 6.5
CVE-2024-57394 HIGH
Qianxin Tianqing Endpoint Security Ma... - Privilege Escalation
CVSS 8.8
CVE-2024-55372 CRITICAL
Wallos <=2.38.2 - File Upload
CVSS 9.8
CVE-2024-55371 CRITICAL
Wallos <= 2.38.2 - Code Injection
CVSS 9.8
CVE-2024-10210 HIGH
B&R APROL <4.4-005P - Info Disclosure
CVE-2024-13922 LOW
WooCommerce <2.6.0 - Privilege Escalation
CVSS 2.7
CVE-2024-8616 HIGH
h2o-3 <3.46.0 - Code Injection
CVSS 8.2
CVE-2024-6829 CRITICAL
aimhubio/aim <3.19.3 - Code Injection
CVSS 9.1
CVE-2024-11042 CRITICAL
invoke-ai/invokeai <5.0.2 - Privilege Escalation
CVSS 9.1
CVE-2024-10834 CRITICAL
eosphoros-ai/db-gpt <0.6.0 - Code Injection
CVSS 9.1
CVE-2024-12036 HIGH
CS Framework plugin - Path Traversal
CVSS 7.5
CVE-2024-51961 HIGH
ArcGIS Server <11.3 - Info Disclosure
CVSS 7.5
CVE-2024-22341 MEDIUM
IBM Watson Query on Cloud Pak for Data <4.9 - Info Disclosure
CVSS 5.3
CVE-2024-38657 MEDIUM
Ivanti Connect/Ivanti Policy <22.7R2.4/<22.7R1.3 - Path Traversal
CVSS 4.9
CVE-2024-47265 MEDIUM
Synology Active Backup <2.7.1-3234 - Path Traversal
CVSS 6.5
CVE-2024-12058 MEDIUM
Ivanti Connect/Ivanti Policy <22.7R2.6/<22.7R1.3 - Path Traversal
CVSS 6.8
CVE-2024-12267 MEDIUM
Contact Form 7 <1.3.8.5 - Info Disclosure
CVSS 5.3
CVE-2024-12861 MEDIUM
W2S - Migrate WooCommerce to Shopify <1.2.1 - Info Disclosure
CVSS 6.5
CVE-2024-43658 HIGH
Iocharger AC <25010801 - Path Traversal
CVE-2024-12875 MEDIUM
Awesomemotive Easy Digital Downloads < 3.3.3 - Path Traversal
CVSS 4.9
CVE-2024-12066 HIGH
SMSA Shipping(official) plugin - Path Traversal
CVSS 8.8
CVE-2024-4230 HIGH
Edgecross Basic Software <1.00 - Path Traversal
CVSS 7.8
Details
Vulnerabilities 396
Exploit Likelihood High