Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2021-09-14 CVE-2021-38163 Path Traversal vulnerability in SAP Netweaver
SAP NetWeaver (Visual Composer 7.0 RT) versions - 7.30, 7.31, 7.40, 7.50, without restriction, an attacker authenticated as a non-administrative user can upload a malicious file over a network and trigger its processing, which is capable of running operating system commands with the privilege of the Java Server process.
network
low complexity
sap CWE-22
8.8
2021-09-09 CVE-2021-25450 Path Traversal vulnerability in Google Android
Path traversal vulnerability in FactoryAirCommnadManger prior to SMR Sep-2021 Release 1 allows attackers to write file as system uid via remote socket.
low complexity
google CWE-22
6.5
2021-09-08 CVE-2021-1739 Path Traversal vulnerability in Apple products
A parsing issue in the handling of directory paths was addressed with improved path validation.
local
low complexity
apple CWE-22
5.5
2021-09-08 CVE-2021-1740 Path Traversal vulnerability in Apple products
A parsing issue in the handling of directory paths was addressed with improved path validation.
local
low complexity
apple CWE-22
5.5
2021-09-08 CVE-2021-1815 Path Traversal vulnerability in Apple products
A parsing issue in the handling of directory paths was addressed with improved path validation.
local
low complexity
apple CWE-22
5.5
2021-09-07 CVE-2021-39500 Path Traversal vulnerability in Eyoucms 1.5.4
Eyoucms 1.5.4 is vulnerable to Directory Traversal.
network
low complexity
eyoucms CWE-22
7.5
2021-09-07 CVE-2021-37728 Path Traversal vulnerability in multiple products
A remote path traversal vulnerability was discovered in Aruba Operating System Software version(s): Prior to 8.8.0.1, 8.7.1.4, 8.6.0.11, 8.5.0.13.
network
low complexity
arubanetworks siemens CWE-22
6.5
2021-09-07 CVE-2021-37729 Path Traversal vulnerability in multiple products
A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.3, 8.6.0.9, 8.5.0.12, 8.3.0.16, 6.5.4.19, 6.4.4.25.
network
low complexity
arubanetworks siemens CWE-22
6.5
2021-09-07 CVE-2021-37731 Path Traversal vulnerability in multiple products
A local path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.0-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.12, 8.3.0.16.
low complexity
arubanetworks siemens CWE-22
6.2
2021-09-07 CVE-2021-37733 Path Traversal vulnerability in multiple products
A remote path traversal vulnerability was discovered in Aruba SD-WAN Software and Gateways; Aruba Operating System Software version(s): Prior to 8.6.0.4-2.2.0.4; Prior to 8.7.1.1, 8.6.0.7, 8.5.0.11, 8.3.0.16.
network
low complexity
arubanetworks siemens CWE-22
4.9