CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Related To CWE-22

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2019-1010205 22 Dir. Trav. 2019-07-23 2019-07-26
5.0
 None Remote Low Not required Partial None None
LINAGORA hublin latest (commit 72ead897082403126bf8df9264e70f0a9de247ff) is affected by: Directory Traversal. The impact is: The vulnerability allows an attacker to access any file (with a fixed extension) on the server. The component is: A web-view renderer; details here: https://lgtm.com/projects/g/linagora/hublin/snapshot/af9f1ce253b4ee923ff8da8f9d908d02a8e95b7f/files/backend/webserver/views.js?sort=name&dir=ASC&mode=heatmap&showExcluded=false#xb24eb0101d2aec21:1. The attack vector is: Attacker sends a specially crafted HTTP request.
2 CVE-2019-17399 22 Dir. Trav. 2019-10-09 2019-10-11
7.5
 None Remote Low Not required Partial Partial Partial
The Shack Forms Pro extension before 4.0.32 for Joomla! allows path traversal via a file attachment.
3 CVE-2019-17314 22 Dir. Trav. 2019-10-07 2019-10-09
6.5
 None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Configurator module by an Admin user.
4 CVE-2019-17313 22 Dir. Trav. 2019-10-07 2019-10-09
6.5
 None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the Studio module by a Developer user.
5 CVE-2019-17312 22 Dir. Trav. 2019-10-07 2019-10-09
6.5
 None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the file function by a Regular user.
6 CVE-2019-17311 22 Dir. Trav. 2019-10-07 2019-10-09
6.5
 None Remote Low Single system Partial Partial Partial
SugarCRM before 8.0.4 and 9.x before 9.0.2 allows directory traversal in the attachment function by a Regular user.
7 CVE-2019-17199 22 Dir. Trav. 2019-10-05 2019-10-10
5.0
 None Remote Low Not required Partial None None
www/getfile.php in WPO WebPageTest 19.04 on Windows allows Directory Traversal (for reading arbitrary files) because of an unanchored regular expression, as demonstrated by the a.jpg\.. substring.
8 CVE-2019-17187 22 Dir. Trav. 2019-10-08 2019-10-11
5.0
 None Remote Low Not required Partial None None
/var/WEB-GUI/cgi-bin/downloadfile.cgi on FiberHome HG2201T 1.00.M5007_JS_201804 devices allows pre-authentication Directory Traversal for reading arbitrary files.
9 CVE-2019-17180 22 DoS Dir. Trav. 2019-10-04 2019-10-15
7.2
 None Local Low Not required Complete Complete Complete
Valve Steam Client before 2019-09-12 allows placing or appending partially controlled filesystem content, as demonstrated by file modifications on Windows in the context of NT AUTHORITY\SYSTEM. This could lead to denial of service, elevation of privilege, or unspecified other impact.
10 CVE-2019-17175 22 Dir. Trav. 2019-10-04 2019-10-08
5.0
 None Remote Low Not required Partial None None
joyplus-cms 1.6.0 allows manager/admin_pic.php?rootpath= absolute path traversal.
11 CVE-2019-17109 22 Dir. Trav. 2019-10-09 2019-10-11
4.0
 None Remote Low Single system None Partial None
Koji through 1.18.0 allows remote Directory Traversal, with resultant Privilege Escalation.
12 CVE-2019-17073 22 Dir. Trav. 2019-10-01 2019-10-04
5.5
 None Remote Low Single system None Partial Partial
emlog through 6.0.0beta allows remote authenticated users to delete arbitrary files via admin/template.php?action=del&tpl=../ directory traversal.
13 CVE-2019-16903 22 Dir. Trav. 2019-09-26 2019-09-26
5.0
 None Remote Low Not required Partial None None
Platinum UPnP SDK 1.2.0 allows Directory Traversal in Core/PltHttpServer.cpp because it checks for /.. where it should be checking for ../ instead.
14 CVE-2019-16868 22 Dir. Trav. 2019-09-25 2019-09-26
7.5
 None Remote Low Not required Partial Partial Partial
emlog through 6.0.0beta has an arbitrary file deletion vulnerability via an admin/data.php?action=dell_all_bak request with directory traversal sequences in the bak[] parameter.
15 CVE-2019-16680 22 Dir. Trav. 2019-09-21 2019-09-25
4.3
 None Remote Medium Not required None Partial None
An issue was discovered in GNOME file-roller before 3.29.91. It allows a single ./../ path traversal via a filename contained in a TAR archive, possibly overwriting a file during extraction.
16 CVE-2019-16679 22 Dir. Trav. File Inclusion 2019-09-21 2019-09-23
4.0
 None Remote Low Single system Partial None None
Gila CMS before 1.11.1 allows admin/fm/?f=../ directory traversal, leading to Local File Inclusion.
17 CVE-2019-16511 22 Dir. Trav. 2019-09-19 2019-09-20
5.8
 None Remote Medium Not required None Partial Partial
An issue was discovered in DTF in FireGiant WiX Toolset before 3.11.2. Microsoft.Deployment.Compression.Cab.dll and Microsoft.Deployment.Compression.Zip.dll allow directory traversal during CAB or ZIP archive extraction, because the full name of an archive file (even with a ../ sequence) is concatenated with the destination path.
18 CVE-2019-16198 22 Dir. Trav. 2019-10-03 2019-10-09
4.0
 None Remote Low Single system Partial None None
KSLabs KSWEB 3.93 allows ../ directory traversal, as demonstrated by the hostFile parameter.
19 CVE-2019-16132 22 Dir. Trav. 2019-09-08 2019-09-10
5.5
 None Remote Low Single system None Partial Partial
An issue was discovered in OKLite v1.2.25. framework/admin/tpl_control.php allows remote attackers to delete arbitrary files via a title directory-traversal pathname followed by a crafted substring.
20 CVE-2019-16123 22 Dir. Trav. 2019-09-08 2019-09-09
5.0
 None Remote Low Not required Partial None None
In Kartatopia PilusCart 1.4.1, the parameter filename in the file catalog.php is mishandled, leading to ../ Local File Disclosure.
21 CVE-2019-16105 22 Dir. Trav. 2019-09-08 2019-09-09
4.0
 None Remote Low Single system Partial None None
Silver Peak EdgeConnect SD-WAN before 8.1.7.x allows ..%2f directory traversal via a rest/json/configdb/download/ URI.
22 CVE-2019-15952 22 Exec Code +Priv Dir. Trav. 2019-09-05 2019-09-06
6.5
 None Remote Low Single system Partial Partial Partial
An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the Pages privilege can conduct a path traversal attack (../) to include .html files that are outside the permitted directory. Also, if a page contains a template directive, then the directive will be server side processed. Thus, if a user can control the content of a .html file, then they can inject a payload with a malicious template directive to gain Remote Command Execution. The exploit will work only with the .html extension.
23 CVE-2019-15822 22 Dir. Trav. 2019-08-30 2019-09-03
7.5
 None Remote Low Not required Partial Partial Partial
The wps-child-theme-generator plugin before 1.2 for WordPress has classes/helpers.php directory traversal.
24 CVE-2019-15714 22 Dir. Trav. 2019-08-28 2019-09-04
5.0
 None Remote Low Not required Partial None None
cli/lib/main.js in Entropic before 2019-06-13 does not reject / and \ in command names, which might allow a directory traversal attack in unusual situations.
25 CVE-2019-15630 22 Dir. Trav. 2019-08-30 2019-09-05
5.0
 None Remote Low Not required Partial None None
Directory Traversal in APIkit, HTTP connector, and OAuth2 Provider components in MuleSoft Mule Runtime 3.2.0 and higher released before August 1 2019, MuleSoft Mule Runtime 4.1.0 and higher released before August 1 2019, and all versions of MuleSoft API Gateway released before August 1 2019 allow remote attackers to read files accessible to the Mule process.
26 CVE-2019-15520 22 Dir. Trav. 2019-08-23 2019-08-27
5.0
 None Remote Low Not required Partial None None
comelz Quark before 2019-03-26 allows directory traversal to locations outside of the project directory.
27 CVE-2019-15519 22 Dir. Trav. 2019-08-23 2019-08-30
10.0
 None Remote Low Not required Complete Complete Complete
Power-Response before 2019-02-02 allows directory traversal (up to the application's main directory) via a plugin.
28 CVE-2019-15518 22 Dir. Trav. 2019-08-23 2019-08-27
5.0
 None Remote Low Not required Partial None None
Swoole before 4.2.13 allows directory traversal in swPort_http_static_handler.
29 CVE-2019-15517 22 Dir. Trav. 2019-08-23 2019-08-27
4.9
 None Local Low Not required Complete None None
jc21 Nginx Proxy Manager before 2.0.13 allows %2e%2e%2f directory traversal.
30 CVE-2019-15516 22 Dir. Trav. 2019-08-23 2019-08-27
5.0
 None Remote Low Not required Partial None None
Cuberite before 2019-06-11 allows webadmin directory traversal via ....// because the protection mechanism simply removes one ../ substring.
31 CVE-2019-15326 22 Dir. Trav. 2019-08-22 2019-08-23
5.0
 None Remote Low Not required None Partial None
The import-users-from-csv-with-meta plugin before 1.14.2.1 for WordPress has directory traversal.
32 CVE-2019-15323 22 Dir. Trav. 2019-08-22 2019-09-06
5.0
 None Remote Low Not required Partial None None
The ad-inserter plugin before 2.4.20 for WordPress has path traversal.
33 CVE-2019-14994 22 Dir. Trav. 2019-09-19 2019-09-23
4.3
 None Remote Medium Not required Partial None None
The Customer Context Filter in Atlassian Jira Service Desk Server and Jira Service Desk Data Center before version 3.9.16, from version 3.10.0 before version 3.16.8, from version 4.0.0 before version 4.1.3, from version 4.2.0 before version 4.2.5, from version 4.3.0 before version 4.3.4, and version 4.4.0 allows remote attackers with portal access to view arbitrary issues in Jira Service Desk projects via a path traversal vulnerability. Note that when the 'Anyone can email the service desk or raise a request in the portal' setting is enabled, an attacker can grant themselves portal access, allowing them to exploit the vulnerability.
34 CVE-2019-14914 22 Dir. Trav. 2019-09-20 2019-09-23
7.5
 None Remote Low Not required Partial Partial Partial
An issue was discovered in PRiSE adAS 1.7.0. The path is not properly escaped in the medatadata_del method, leading to an arbitrary file read and deletion via Directory Traversal.
35 CVE-2019-14798 22 Dir. Trav. File Inclusion 2019-08-09 2019-08-14
4.0
 None Remote Low Single system Partial None None
The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory traversal in the wp-admin/admin-ajax.php?action=shortcode_bwg tagtext parameter.
36 CVE-2019-14788 22 Exec Code Dir. Trav. 2019-08-15 2019-08-22
6.5
 None Remote Low Single system Partial Partial Partial
wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resultant remote PHP code execution via the subscribers[1][1] parameter in conjunction with an exportfile=../ value.
37 CVE-2019-14751 22 Dir. Trav. 2019-08-22 2019-08-29
5.0
 None Remote Low Not required None Partial None
NLTK Downloader before 3.4.5 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in an NLTK package (ZIP archive) that is mishandled during extraction.
38 CVE-2019-14701 22 DoS Dir. Trav. 2019-08-06 2019-08-13
5.0
 None Remote Low Not required None None Partial
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. An attacker can trigger read operations on an arbitrary file via Path Traversal in the TZ parameter, but cannot retrieve the data that is read. This causes a denial of service if the filename is, for example, /dev/random.
39 CVE-2019-14700 22 Dir. Trav. 2019-08-06 2019-08-13
5.0
 None Remote Low Not required Partial None None
An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. There is disclosure of the existence of arbitrary files via Path Traversal in HTTPD. This occurs because the filename specified in the TZ parameter is accessed with a substantial delay if that file exists.
40 CVE-2019-14530 22 Dir. Trav. 2019-08-13 2019-08-19
4.0
 None Remote Low Single system Partial None None
An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. An attacker can download any file (that is readable by the user www-data) from server storage. If the requested file is writable for the www-data user and the directory /var/www/openemr/sites/default/documents/cqm_qrda/ exists, it will be deleted from server.
41 CVE-2019-14521 22 Dir. Trav. 2019-08-05 2019-08-13
5.0
 None Remote Low Not required None Partial None
The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of file to any location on the server via path traversal in the filename parameter.
42 CVE-2019-14452 22 Dir. Trav. 2019-07-30 2019-08-05
5.0
 None Remote Low Not required None Partial None
Sigil before 0.9.16 is vulnerable to a directory traversal, allowing attackers to write arbitrary files via a ../ (dot dot slash) in a ZIP archive entry that is mishandled during extraction.
43 CVE-2019-14418 22 Dir. Trav. 2019-07-29 2019-10-09
6.5
 None Remote Low Single system Partial Partial Partial
An issue was discovered in Veritas Resiliency Platform (VRP) before 3.4 HF1. When uploading an application bundle, a directory traversal vulnerability allows a VRP user with sufficient privileges to overwrite any file in the VRP virtual machine. A malicious VRP user could use this to replace existing files to take control of the VRP virtual machine.
44 CVE-2019-14362 22 Dir. Trav. 2019-07-28 2019-08-14
5.5
 None Remote Low Single system Partial Partial None
Openbravo ERP before 3.0PR19Q1.3 is affected by Directory Traversal. This vulnerability could allow remote authenticated attackers to replace a file on the server via the getAttachmentDirectoryForNewAttachment inpKey value.
45 CVE-2019-14322 22 Dir. Trav. 2019-07-28 2019-08-06
5.0
 None Remote Low Not required Partial None None
In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names (such as C:) in Windows pathnames.
46 CVE-2019-14312 22 Dir. Trav. File Inclusion 2019-08-09 2019-08-19
4.0
 None Remote Low Single system Partial None None
Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. This vulnerability allows a remote attacker to read internal files on the server via a tools/sourceViewer/index.html?filename=../ URI.
47 CVE-2019-13635 22 Dir. Trav. 2019-07-30 2019-08-13
6.4
 None Remote Low Not required Partial Partial None
The WP Fastest Cache plugin through 0.8.9.5 for WordPress allows wpFastestCache.php and inc/cache.php Directory Traversal.
48 CVE-2019-13623 22 Exec Code Dir. Trav. 2019-07-16 2019-08-12
6.8
 None Remote Medium Not required Partial Partial Partial
In NSA Ghidra through 9.0.4, path traversal can occur in RestoreTask.java (from the package ghidra.app.plugin.core.archive) via an archive with an executable file that has an initial ../ in its filename. This allows attackers to overwrite arbitrary files in scenarios where an intermediate analysis result is archived for sharing with other persons. To achieve arbitrary code execution, one approach is to overwrite some critical Ghidra modules, e.g., the decompile module.
49 CVE-2019-13584 22 Dir. Trav. 2019-07-17 2019-08-01
5.0
 None Remote Low Not required Partial None None
The remote admin webserver on FANUC Robotics Virtual Robot Controller 8.23 allows Directory Traversal via a forged HTTP request.
50 CVE-2019-13532 22 Dir. Trav. 2019-09-13 2019-10-09
5.0
 None Remote Low Not required Partial None None
CODESYS V3 web server, all versions prior to 3.5.14.10, allows an attacker to send specially crafted http or https requests which may allow access to files outside the restricted working directory of the controller.
Total number of vulnerabilities : 2968   Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.