Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2023-12-19 CVE-2023-38126 Path Traversal vulnerability in Softing Edgeaggregator 3.4.0
Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability.
network
low complexity
softing CWE-22
7.2
2023-12-18 CVE-2023-6222 Path Traversal vulnerability in Quttera web Malware Scanner
IThe Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks
network
low complexity
quttera CWE-22
7.2
2023-12-17 CVE-2023-6900 Path Traversal vulnerability in Rmountjoy92 Dashmachine 0.54
A vulnerability, which was classified as critical, has been found in rmountjoy92 DashMachine 0.5-4.
network
low complexity
rmountjoy92 CWE-22
critical
9.1
2023-12-16 CVE-2023-6559 Path Traversal vulnerability in Web-Soudan MW WP Form
The MW WP Form plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 5.0.3.
network
low complexity
web-soudan CWE-22
critical
9.8
2023-12-16 CVE-2021-42797 Path Traversal vulnerability in Aveva Edge 2020/8.1
Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources.
network
low complexity
aveva CWE-22
7.5
2023-12-15 CVE-2023-6831 Path Traversal vulnerability in Lfprojects Mlflow
Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2.
network
low complexity
lfprojects CWE-22
8.1
2023-12-14 CVE-2023-44278 Path Traversal vulnerability in Dell products
Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability.
local
low complexity
dell CWE-22
6.7
2023-12-14 CVE-2023-48660 Path Traversal vulnerability in Dell products
Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability.
network
low complexity
dell CWE-22
7.5
2023-12-13 CVE-2023-43586 Path Traversal vulnerability in Zoom products
Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access.
network
low complexity
zoom CWE-22
8.8
2023-12-12 CVE-2023-49089 Path Traversal vulnerability in Umbraco CMS
Umbraco is an ASP.NET content management system (CMS).
network
low complexity
umbraco CWE-22
6.5