Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2022-01-26 CVE-2021-32841 Path Traversal vulnerability in Sharpziplib Project Sharpziplib 1.3.0/1.3.1/1.3.2
SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library.
network
low complexity
sharpziplib-project CWE-22
5.3
2022-01-26 CVE-2021-32840 Path Traversal vulnerability in Sharpziplib Project Sharpziplib
SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library.
network
low complexity
sharpziplib-project CWE-22
critical
9.8
2022-01-26 CVE-2021-32842 Path Traversal vulnerability in Sharpziplib Project Sharpziplib
SharpZipLib (or #ziplib) is a Zip, GZip, Tar and BZip2 library.
network
low complexity
sharpziplib-project CWE-22
5.3
2022-01-26 CVE-2022-22932 Path Traversal vulnerability in Apache Karaf
Apache Karaf obr:* commands and run goal on the karaf-maven-plugin have partial path traversal which allows to break out of expected folder.
network
low complexity
apache CWE-22
5.3
2022-01-24 CVE-2020-17383 Path Traversal vulnerability in Telosalliance Z/Ip ONE Firmware
A directory traversal vulnerability on Telos Z/IP One devices through 4.0.0r grants an unauthenticated individual root level access to the device's file system.
network
low complexity
telosalliance CWE-22
critical
9.8
2022-01-21 CVE-2021-23631 Path Traversal vulnerability in Convert-Svg-Core Project Convert-Svg-Core
This affects all versions of package convert-svg-core; all versions of package convert-svg-to-png; all versions of package convert-svg-to-jpeg.
network
low complexity
convert-svg-core-project CWE-22
7.5
2022-01-21 CVE-2020-19858 Path Traversal vulnerability in Plutinosoft Platinum
Platinum Upnp SDK through 1.2.0 has a directory traversal vulnerability.
network
low complexity
plutinosoft CWE-22
7.5
2022-01-20 CVE-2022-23119 Path Traversal vulnerability in Trendmicro Deep Security Agent 20.0
A directory traversal vulnerability in Trend Micro Deep Security and Cloud One - Workload Security Agent for Linux version 20 and below could allow an attacker to read arbitrary files from the file system.
network
low complexity
trendmicro CWE-22
7.5
2022-01-20 CVE-2021-44737 Path Traversal vulnerability in Lexmark products
PJL directory traversal vulnerability in Lexmark devices through 2021-12-07 that can be leveraged to overwrite internal configuration files.
low complexity
lexmark CWE-22
8.8
2022-01-19 CVE-2021-46203 Path Traversal vulnerability in Taogogo Taocms 3.0.2
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.
network
low complexity
taogogo CWE-22
6.5