Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2021-08-04 | CVE-2021-24010 | Path Traversal vulnerability in Fortinet Fortisandbox Improper limitation of a pathname to a restricted directory vulnerabilities in FortiSandbox 3.2.0 through 3.2.2, and 3.1.0 through 3.1.4 may allow an authenticated user to obtain unauthorized access to files and data via specifially crafted web requests. | 6.5 |
2021-08-04 | CVE-2021-36168 | Path Traversal vulnerability in Fortinet Fortiportal A Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Fortinet FortiPortal 6.x before 6.0.5, FortiPortal 5.3.x before 5.3.6 and any FortiPortal before 6.2.5 allows authenticated attacker to disclosure information via crafted GET request with malicious parameter values. | 6.5 |
2021-08-04 | CVE-2021-35397 | Path Traversal vulnerability in Drogon A path traversal vulnerability in the static router for Drogon from 1.0.0-beta14 to 1.6.0 could allow an unauthenticated, remote attacker to arbitrarily read files. | 7.5 |
2021-08-03 | CVE-2020-19304 | Path Traversal vulnerability in Metinfo 7.0.0 An issue in /admin/index.php?n=system&c=filept&a=doGetFileList of Metinfo v7.0.0 allows attackers to perform a directory traversal and access sensitive information. | 7.5 |
2021-08-03 | CVE-2020-19305 | Path Traversal vulnerability in Metinfo 7.0.0 An issue in /app/system/column/admin/index.class.php of Metinfo v7.0.0 causes the indeximg parameter to be deleted when the column is deleted, allowing attackers to escalate privileges. | 9.8 |
2021-08-03 | CVE-2021-32016 | Path Traversal vulnerability in Jump-Technology Asset Management 3.6.0.04.0092487 An issue was discovered in JUMP AMS 3.6.0.04.009-2487. | 8.8 |
2021-08-03 | CVE-2021-32018 | Path Traversal vulnerability in Jump-Technology Asset Management 3.6.0.04.0092487 An issue was discovered in JUMP AMS 3.6.0.04.009-2487. | 6.5 |
2021-08-03 | CVE-2021-32814 | Path Traversal vulnerability in Skytable Skytable is a NoSQL database with automated snapshots and TLS. | 8.1 |
2021-08-03 | CVE-2021-36156 | Path Traversal vulnerability in Grafana Loki An issue was discovered in Grafana Loki through 2.2.1. | 5.3 |
2021-08-03 | CVE-2021-36157 | Path Traversal vulnerability in Linuxfoundation Cortex An issue was discovered in Grafana Cortex through 1.9.0. | 5.3 |