Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2020-04-13 | CVE-2020-11738 | Path Traversal vulnerability in Snapcreek Duplicator The Snap Creek Duplicator plugin before 1.3.28 for WordPress (and Duplicator Pro before 3.8.7.1) allows Directory Traversal via ../ in the file parameter to duplicator_download or duplicator_init. | 7.5 |
2020-04-12 | CVE-2020-11705 | Path Traversal vulnerability in Provideserver Provide FTP Server 13.1 An issue was discovered in ProVide (formerly zFTPServer) through 13.1. | 9.8 |
2020-04-10 | CVE-2015-9546 | Path Traversal vulnerability in Google Android 4.4 An issue was discovered on Samsung mobile devices with KK(4.4) and later software through 2015-06-16. | 4.8 |
2020-04-09 | CVE-2020-10631 | Path Traversal vulnerability in Advantech Webaccess/Nms 2.0.3 An attacker could use a specially crafted URL to delete or read files outside the WebAccess/NMS's (versions prior to 3.0.2) control. | 9.8 |
2020-04-09 | CVE-2020-10619 | Path Traversal vulnerability in Advantech Webaccess/Nms 2.0.3 An attacker could use a specially crafted URL to delete files outside the WebAccess/NMS's (versions prior to 3.0.2) control. | 9.1 |
2020-04-08 | CVE-2020-10977 | Path Traversal vulnerability in Gitlab GitLab EE/CE 8.5 to 12.9 is vulnerable to a an path traversal when moving an issue between projects. | 5.5 |
2020-04-08 | CVE-2020-10366 | Path Traversal vulnerability in Logicaldoc LogicalDoc before 8.3.3 allows /servlet.gupld Directory Traversal, a different vulnerability than CVE-2020-9423 and CVE-2020-10365. | 7.5 |
2020-04-07 | CVE-2020-6974 | Path Traversal vulnerability in Honeywell Notifier Webserver 3.50 Honeywell Notifier Web Server (NWS) Version 3.50 is vulnerable to a path traversal attack, which allows an attacker to bypass access to restricted directories. | 9.8 |
2020-04-06 | CVE-2020-11596 | Path Traversal vulnerability in Cipplanner Cipace 6.80 A Directory Traversal issue was discovered in CIPPlanner CIPAce 9.1 Build 2019092801. | 7.5 |
2020-04-03 | CVE-2020-7008 | Path Traversal vulnerability in Visam Vbase Editor and Vbase Web-Remote VISAM VBASE Editor version 11.5.0.2 and VBASE Web-Remote Module may allow input passed in the URL that is not properly verified before use, which may allow an attacker to read arbitrary files from local resources. | 7.5 |