Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2024-11-18 CVE-2020-26071 A vulnerability in the CLI of Cisco SD-WAN Software could allow an authenticated, local attacker to create or overwrite arbitrary files on an affected device, which could result in a denial of service (DoS) condition. The vulnerability is due to insufficient input validation for specific commands.
local
low complexity
CWE-22
8.4
2024-11-18 CVE-2024-41971 A low privileged remote attacker can overwrite an arbitrary file on the filesystem leading to a DoS and data loss.
network
low complexity
CWE-22
8.1
2024-11-18 CVE-2024-11309 Path Traversal vulnerability in Trcore DVC
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
network
low complexity
trcore CWE-22
7.5
2024-11-18 CVE-2024-11310 Path Traversal vulnerability in Trcore DVC
The DVC from TRCore has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
network
low complexity
trcore CWE-22
7.5
2024-11-16 CVE-2024-9935 The PDF Generator Addon for Elementor Page Builder plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.7.5 via the rtw_pgaepb_dwnld_pdf() function.
network
low complexity
CWE-22
7.5
2024-11-15 CVE-2024-44625 Path Traversal vulnerability in Gogs
Gogs <=0.13.0 is vulnerable to Directory Traversal via the editFilePost function of internal/route/repo/editor.go.
network
low complexity
gogs CWE-22
8.8
2024-11-15 CVE-2024-41784 Path Traversal vulnerability in IBM Sterling Secure Proxy
IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse directories on the system.
network
low complexity
ibm CWE-22
7.5
2024-11-15 CVE-2024-11239 Path Traversal vulnerability in Landray EKP 12.0.9.R.20160325
A vulnerability has been found in Landray EKP up to 16.0 and classified as critical.
network
low complexity
landray CWE-22
4.3
2024-11-15 CVE-2024-11238 Path Traversal vulnerability in Landray EKP 12.0.9.R.20160325
A vulnerability, which was classified as critical, was found in Landray EKP up to 16.0.
network
low complexity
landray CWE-22
5.3
2024-11-14 CVE-2024-11210 Path Traversal vulnerability in Eyoucms 1.5.1
A vulnerability was found in EyouCMS 1.51.
network
low complexity
eyoucms CWE-22
5.4