Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2023-12-19 | CVE-2023-38126 | Path Traversal vulnerability in Softing Edgeaggregator 3.4.0 Softing edgeAggregator Restore Configuration Directory Traversal Remote Code Execution Vulnerability. | 7.2 |
2023-12-18 | CVE-2023-6222 | Path Traversal vulnerability in Quttera web Malware Scanner IThe Quttera Web Malware Scanner WordPress plugin before 3.4.2.1 does not validate user input used in a path, which could allow users with an admin role to perform path traversal attacks | 7.2 |
2023-12-17 | CVE-2023-6900 | Path Traversal vulnerability in Rmountjoy92 Dashmachine 0.54 A vulnerability, which was classified as critical, has been found in rmountjoy92 DashMachine 0.5-4. | 9.1 |
2023-12-16 | CVE-2023-6559 | Path Traversal vulnerability in Web-Soudan MW WP Form The MW WP Form plugin for WordPress is vulnerable to arbitrary file deletion in all versions up to, and including, 5.0.3. | 9.8 |
2023-12-16 | CVE-2021-42797 | Path Traversal vulnerability in Aveva Edge 2020/8.1 Path traversal vulnerability in AVEVA Edge (formerly InduSoft Web Studio) versions R2020 and prior allows an unauthenticated user to steal the Windows access token of the user account configured for accessing external DB resources. | 7.5 |
2023-12-15 | CVE-2023-6831 | Path Traversal vulnerability in Lfprojects Mlflow Path Traversal: '\..\filename' in GitHub repository mlflow/mlflow prior to 2.9.2. | 8.1 |
2023-12-14 | CVE-2023-44278 | Path Traversal vulnerability in Dell products Dell PowerProtect DD , versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15, 6.2.1.110 contain a path traversal vulnerability. | 6.7 |
2023-12-14 | CVE-2023-48660 | Path Traversal vulnerability in Dell products Dell vApp Manger, versions prior to 9.2.4.x contain an arbitrary file read vulnerability. | 7.5 |
2023-12-13 | CVE-2023-43586 | Path Traversal vulnerability in Zoom products Path traversal in Zoom Desktop Client for Windows, Zoom VDI Client for Windows, and Zoom SDKs for Windows may allow an authenticated user to conduct an escalation of privilege via network access. | 8.8 |
2023-12-12 | CVE-2023-49089 | Path Traversal vulnerability in Umbraco CMS Umbraco is an ASP.NET content management system (CMS). | 6.5 |