Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2023-12-22 CVE-2023-50731 Path Traversal vulnerability in Mindsdb
MindsDB is a SQL Server for artificial intelligence.
network
low complexity
mindsdb CWE-22
critical
9.1
2023-12-22 CVE-2023-50254 Path Traversal vulnerability in Deepin Reader
Deepin Linux's default document reader `deepin-reader` software suffers from a serious vulnerability in versions prior to 6.0.7 due to a design flaw that leads to remote command execution via crafted docx document.
local
low complexity
deepin CWE-22
7.8
2023-12-21 CVE-2023-46645 Path Traversal vulnerability in Github Enterprise Server
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed arbitrary file reading when building a GitHub Pages site.
network
low complexity
github CWE-22
4.9
2023-12-19 CVE-2023-38126 Path Traversal vulnerability in Softing Edgeaggregator 3.4.0
Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability.
network
low complexity
softing CWE-22
7.2
2023-12-18 CVE-2023-6222 Path Traversal vulnerability in Quttera web Malware Scanner
IThe Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks
network
low complexity
quttera CWE-22
7.2
2023-12-17 CVE-2023-6900 Path Traversal vulnerability in Rmountjoy92 Dashmachine 0.54
A vulnerability, which was classified as critical, has been found in rmountjoy92 DashMachine 0.5-4.
network
low complexity
rmountjoy92 CWE-22
critical
9.1
2023-12-16 CVE-2023-6559 Path Traversal vulnerability in Web-Soudan MW WP Form
The MW WP Form plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 5.0.3.
network
low complexity
web-soudan CWE-22
critical
9.8
2023-12-16 CVE-2021-42797 Path Traversal vulnerability in Aveva Edge 2020/8.1
Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources.
network
low complexity
aveva CWE-22
7.5
2023-12-15 CVE-2023-6831 Path Traversal vulnerability in Lfprojects Mlflow
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
network
low complexity
lfprojects CWE-22
8.1
2023-12-14 CVE-2023-44278 Path Traversal vulnerability in Dell products
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability.
local
low complexity
dell CWE-22
6.7