Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2020-05-13 | CVE-2020-12832 | Path Traversal vulnerability in Simplefilelist Simple-File-List WordPress Plugin Simple File List before 4.2.8 is prone to a vulnerability that lets attackers delete arbitrary files because the application fails to properly verify user-supplied input. | 9.8 |
| 2020-05-12 | CVE-2020-8159 | Path Traversal vulnerability in multiple products There is a vulnerability in actionpack_page-caching gem < v1.2.1 that allows an attacker to write arbitrary files to a web server, potentially resulting in remote code execution if the attacker can write unescaped ERB to a view. | 9.8 |
| 2020-05-11 | CVE-2020-7647 | Path Traversal vulnerability in Jooby All versions before 1.6.7 and all versions after 2.0.0 inclusive and before 2.8.2 of io.jooby:jooby and org.jooby:jooby are vulnerable to Directory Traversal via two separate vectors. | 5.3 |
| 2020-05-11 | CVE-2020-5834 | Path Traversal vulnerability in Symantec Endpoint Protection Manager Symantec Endpoint Protection Manager, prior to 14.3, may be susceptible to a directory traversal attack that could allow a remote actor to determine the size of files in the directory. | 5.3 |
| 2020-05-09 | CVE-2020-12765 | Path Traversal vulnerability in Solis Miolo 2.0 Solis Miolo 2.0 allows index.php?module=install&action=view&item= Directory Traversal. | 5.3 |
| 2020-05-09 | CVE-2020-12764 | Path Traversal vulnerability in Solis Gnuteca 3.8 Gnuteca 3.8 allows file.php?folder=/&file= Directory Traversal. | 5.3 |
| 2020-05-08 | CVE-2020-11531 | Path Traversal vulnerability in Zohocorp products The DataEngine Xnode Server application in Zoho ManageEngine DataSecurity Plus prior to 6.0.1 does not validate the database schema name when handling a DR-SCHEMA-SYNC request. | 8.8 |
| 2020-05-08 | CVE-2020-12737 | Path Traversal vulnerability in Maxum Rumpus An issue was discovered in Maxum Rumpus before 8.2.12 on macOS. | 6.5 |
| 2020-05-08 | CVE-2020-12026 | Path Traversal vulnerability in Advantech Webaccess Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. | 8.8 |
| 2020-05-08 | CVE-2020-12010 | Path Traversal vulnerability in Advantech Webaccess Advantech WebAccess Node, Version 8.4.4 and prior, Version 9.0.0. | 7.1 |