Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2024-07-24 CVE-2024-40422 Path Traversal vulnerability in Stitionai Devika 1.0
The snapshot_path parameter in the /api/get-browser-snapshot endpoint in stitionai devika v1 is susceptible to a path traversal attack.
network
low complexity
stitionai CWE-22
critical
9.1
2024-07-22 CVE-2024-41704 Path Traversal vulnerability in Librechat 0.7.4
LibreChat through 0.7.4-rc1 does not validate the normalized pathnames of images.
network
low complexity
librechat CWE-22
critical
9.8
2024-07-17 CVE-2024-23466 SolarWinds Access Rights Manager (ARM) is susceptible to a Directory Traversal Remote Code Execution vulnerability.
low complexity
CWE-22
critical
9.6
2024-07-17 CVE-2024-23467 The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
low complexity
CWE-22
critical
9.6
2024-07-17 CVE-2024-23468 The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
low complexity
CWE-22
7.6
2024-07-17 CVE-2024-23472 SolarWinds Access Rights Manager (ARM) is susceptible to Directory Traversal vulnerability.
low complexity
CWE-22
critical
9.6
2024-07-17 CVE-2024-23474 The SolarWinds Access Rights Manager was found to be susceptible to an Arbitrary File Deletion and Information Disclosure vulnerability.
low complexity
CWE-22
7.6
2024-07-17 CVE-2024-23475 The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
low complexity
CWE-22
critical
9.6
2024-07-17 CVE-2024-28993 The SolarWinds Access Rights Manager was susceptible to a Directory Traversal and Information Disclosure Vulnerability.
low complexity
CWE-22
7.6
2024-07-15 CVE-2024-6746 Path Traversal vulnerability in Easyspider 0.6.2
A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows.
low complexity
easyspider CWE-22
8.8