Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2017-03-20 CVE-2017-6805 Path Traversal vulnerability in Mobatek Mobaxterm 9.4
Directory traversal vulnerability in the TFTP server in MobaXterm Personal Edition 9.4 allows remote attackers to read arbitrary files via a ..
network
low complexity
mobatek CWE-22
5.3
2017-03-17 CVE-2014-8704 Path Traversal vulnerability in Wondercms 2014
Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitrary local files via a crafted theme.
network
low complexity
wondercms CWE-22
critical
9.8
2017-03-16 CVE-2017-6510 Path Traversal vulnerability in Efssoft Easy File Sharing FTP Server 3.6
Easy File Sharing FTP Server version 3.6 is vulnerable to a directory traversal vulnerability which allows an attacker to list and download any file from any folder outside the FTP root Directory.
network
low complexity
efssoft CWE-22
7.5
2017-03-14 CVE-2013-7462 Path Traversal vulnerability in Mcafee Saas Control Console Platform 6.15
A directory traversal vulnerability in the web application in McAfee (now Intel Security) SaaS Control Console (SCC) Platform 6.14 before patch 1070, and 6.15 before patch 1076 allows unauthenticated users to view contents of arbitrary system files that did not have file system level read access restrictions via a null-byte injection exploit.
network
low complexity
mcafee CWE-22
7.5
2017-03-09 CVE-2017-6527 Path Traversal vulnerability in Dnatools Dnalims 42015S13
An issue was discovered in dnaTools dnaLIMS 4-2015s13.
network
low complexity
dnatools CWE-22
7.5
2017-03-07 CVE-2016-7135 Path Traversal vulnerability in Plone
Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11 allows remote administrators to read arbitrary files via a ..
network
low complexity
plone CWE-22
4.9
2017-03-07 CVE-2016-9164 Path Traversal vulnerability in CA Unified Infrastructure Management
Directory traversal vulnerability in diag.jsp file in CA Unified Infrastructure Management (formerly CA Nimsoft Monitor) 8.4 SP1 and earlier and CA Unified Infrastructure Management Snap (formerly CA Nimsoft Monitor Snap) allows remote attackers to read arbitrary files via unspecified vectors.
network
low complexity
ca CWE-22
7.5
2017-03-02 CVE-2017-5231 Path Traversal vulnerability in Rapid7 Metasploit
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi CommandDispatcher.cmd_download() function.
network
high complexity
rapid7 CWE-22
7.1
2017-03-02 CVE-2017-5229 Path Traversal vulnerability in Rapid7 Metasploit
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter extapi Clipboard.parse_dump() function.
network
high complexity
rapid7 CWE-22
7.1
2017-03-02 CVE-2017-5228 Path Traversal vulnerability in Rapid7 Metasploit
All editions of Rapid7 Metasploit prior to version 4.13.0-2017020701 contain a directory traversal vulnerability in the Meterpreter stdapi Dir.download() function.
network
high complexity
rapid7 CWE-22
7.1