Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2019-08-15 | CVE-2019-12791 | Path Traversal vulnerability in Vestacp Control Panel 0.9.824 A directory traversal vulnerability in the v-list-user script in Vesta Control Panel 0.9.8-24 allows remote attackers to escalate from regular registered users to root via the password reset form. | 8.8 |
| 2019-08-15 | CVE-2018-14672 | Path Traversal vulnerability in Yandex Clickhouse In ClickHouse before 18.12.13, functions for loading CatBoost models allowed path traversal and reading arbitrary files through error messages. | 5.3 |
| 2019-08-15 | CVE-2019-14788 | Path Traversal vulnerability in Tribulant Newsletters wp-admin/admin-ajax.php?action=newsletters_exportmultiple in the Tribulant Newsletters plugin before 4.6.19 for WordPress allows directory traversal with resultant remote PHP code execution via the subscribers[1][1] parameter in conjunction with an exportfile=../ value. | 8.8 |
| 2019-08-13 | CVE-2019-12479 | Path Traversal vulnerability in Twentytwenty.Storage Project Twentytwenty.Storage 2.11.0 An issue was discovered in 20|20 Storage 2.11.0. | 9.1 |
| 2019-08-13 | CVE-2019-14530 | Path Traversal vulnerability in Open-Emr Openemr An issue was discovered in custom/ajax_download.php in OpenEMR before 5.0.2 via the fileName parameter. | 8.8 |
| 2019-08-09 | CVE-2019-14798 | Path Traversal vulnerability in 10Web Photo Gallery The 10Web Photo Gallery plugin before 1.5.25 for WordPress has Authenticated Local File Inclusion via directory traversal in the wp-admin/admin-ajax.php?action=shortcode_bwg tagtext parameter. | 4.9 |
| 2019-08-09 | CVE-2019-14312 | Path Traversal vulnerability in Aptana Jaxer 1.0.3.4547 Aptana Jaxer 1.0.3.4547 is vulnerable to a local file inclusion vulnerability in the wikilite source code viewer. | 6.5 |
| 2019-08-06 | CVE-2019-14701 | Path Traversal vulnerability in Microdigital products An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. | 7.5 |
| 2019-08-06 | CVE-2019-14700 | Path Traversal vulnerability in Microdigital products An issue was discovered on MicroDigital N-series cameras with firmware through 6400.0.8.5. | 7.5 |
| 2019-08-05 | CVE-2019-14521 | Path Traversal vulnerability in Emca Energy Logserver 6.1.2 The api/admin/logoupload Logo File upload feature in EMCA Energy Logserver 6.1.2 allows attackers to send any kind of file to any location on the server via path traversal in the filename parameter. | 7.5 |