Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2019-06-17 CVE-2017-9382 Path Traversal vulnerability in Getvera Veraedge Firmware and Veralite Firmware
An issue was discovered on Vera VeraEdge 1.7.19 and Veralite 1.7.481 devices.
network
low complexity
getvera CWE-22
6.5
2019-06-17 CVE-2019-7315 Path Traversal vulnerability in Genieaccess Wip3Bvaf Firmware 3.0
Genie Access WIP3BVAF WISH IP 3MP IR Auto Focus Bullet Camera devices through 3.x are vulnerable to directory traversal via the web interface, as demonstrated by reading /etc/shadow.
network
low complexity
genieaccess CWE-22
7.5
2019-06-17 CVE-2018-20470 Path Traversal vulnerability in Sahipro Sahi PRO
An issue was discovered in Tyto Sahi Pro through 7.x.x and 8.0.0.
network
low complexity
sahipro CWE-22
7.5
2019-06-11 CVE-2019-12146 Path Traversal vulnerability in Ipswitch WS FTP Server
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1.
network
low complexity
ipswitch CWE-22
critical
9.1
2019-06-11 CVE-2019-12145 Path Traversal vulnerability in Ipswitch WS FTP Server
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1.
network
low complexity
ipswitch CWE-22
7.5
2019-06-11 CVE-2019-12144 Path Traversal vulnerability in Ipswitch WS FTP Server
An issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1.
network
low complexity
ipswitch CWE-22
critical
9.8
2019-06-11 CVE-2019-12143 Path Traversal vulnerability in Progress WS FTP Server
A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1.
network
low complexity
progress CWE-22
5.3
2019-06-07 CVE-2019-12477 Path Traversal vulnerability in Supra Stv-Lc40Lt0020F Firmware
Supra Smart Cloud TV allows remote file inclusion in the openLiveURL function, which allows a local attacker to broadcast fake video without any authentication via a /remote/media_control?action=setUri&uri= URI.
local
low complexity
supra CWE-22
5.5
2019-06-06 CVE-2019-8320 Path Traversal vulnerability in Rubygems
A Directory Traversal issue was discovered in RubyGems 2.7.6 and later through 3.0.2.
network
high complexity
rubygems CWE-22
7.4
2019-06-05 CVE-2019-9157 Path Traversal vulnerability in Gemalto Ezio DS3 Server 2.6.1
Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure.
low complexity
gemalto CWE-22
5.7