Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2018-03-26 CVE-2017-12815 Path Traversal vulnerability in Bomgar Remote Support
Analysis of the Bomgar Remote Support Portal JavaStart.jar Applet 52790 and earlier revealed that it is vulnerable to a path traversal vulnerability.
network
low complexity
bomgar CWE-22
critical
10.0
2018-03-26 CVE-2018-1204 Path Traversal vulnerability in Dell EMC Isilon Onefs
Dell EMC Isilon OneFS versions between 8.1.0.0 - 8.1.0.1, 8.0.1.0 - 8.0.1.2, and 8.0.0.0 - 8.0.0.6, versions 7.2.1.x, and version 7.1.1.11 is affected by a path traversal vulnerability in the isi_phone_home tool.
local
low complexity
dell CWE-22
6.7
2018-03-25 CVE-2018-9010 Path Traversal vulnerability in Intelbras Tip200 Firmware and Tip200Lite Firmware
Intelbras TELEFONE IP TIP200/200 LITE 60.0.75.29 devices allow remote authenticated admins to read arbitrary files via the /cgi-bin/cgiServer.exx page parameter, aka absolute path traversal.
network
low complexity
intelbras CWE-22
7.2
2018-03-25 CVE-2018-7719 Path Traversal vulnerability in Acrolinx Server
Acrolinx Server before 5.2.5 on Windows allows Directory Traversal.
network
low complexity
acrolinx CWE-22
7.5
2018-03-24 CVE-2018-8969 Path Traversal vulnerability in Zzcms 8.2
An issue was discovered in zzcms 8.2.
network
low complexity
zzcms CWE-22
7.5
2018-03-24 CVE-2018-8968 Path Traversal vulnerability in Zzcms 8.2
An issue was discovered in zzcms 8.2.
network
low complexity
zzcms CWE-22
7.5
2018-03-24 CVE-2018-8965 Path Traversal vulnerability in Zzcms 8.2
An issue was discovered in zzcms 8.2.
network
low complexity
zzcms CWE-22
7.5
2018-03-23 CVE-2018-1211 Path Traversal vulnerability in Dell EMC Idrac7 and EMC Idrac8
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain a path traversal vulnerability in its Web server's URI parser which could be used to obtain specific sensitive data without authentication.
network
low complexity
dell CWE-22
7.5
2018-03-22 CVE-2018-0542 Path Traversal vulnerability in Webproxy Project Webproxy 1.7.8
Directory traversal vulnerability in WebProxy version 1.7.8 allows an attacker to read arbitrary files via unspecified vectors.
network
low complexity
webproxy-project CWE-22
7.5
2018-03-22 CVE-2018-8909 Path Traversal vulnerability in Wire
The Wire application before 2018-03-07 for Android allows attackers to write to pathnames outside of the downloads directory via a ../ in a filename of a received file, related to AssetService.scala.
network
low complexity
wire CWE-22
7.5