Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2023-09-08 CVE-2023-40924 Path Traversal vulnerability in Contec Solarview Compact Firmware 4.0/5.0
SolarView Compact < 6.00 is vulnerable to Directory Traversal.
network
low complexity
contec CWE-22
7.5
2023-09-06 CVE-2023-41930 Path Traversal vulnerability in Jenkins JOB Configuration History
Jenkins Job Configuration History Plugin 1227.v7a_79fc4dc01f and earlier does not restrict the 'name' query parameter when rendering a history entry, allowing attackers to have Jenkins render a manipulated configuration history that was not created by the plugin.
network
low complexity
jenkins CWE-22
4.3
2023-09-05 CVE-2023-4480 Path Traversal vulnerability in PHP-Fusion PHPfusion
Due to an out-of-date dependency in the “Fusion File Manager” component accessible through the admin panel, an attacker can send a crafted request that allows them to read the contents of files on the system accessible within the privileges of the running process.
network
low complexity
php-fusion CWE-22
5.5
2023-09-05 CVE-2023-39448 Path Traversal vulnerability in Ss-Proj Shirasagi
Path traversal vulnerability in SHIRASAGI prior to v1.18.0 allows a remote authenticated attacker to alter or create arbitrary files on the server, resulting in arbitrary code execution.
network
low complexity
ss-proj CWE-22
8.8
2023-09-04 CVE-2023-4614 Path Traversal vulnerability in LG LED Assistant 2.1.45
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant.
network
low complexity
lg CWE-22
critical
9.8
2023-09-04 CVE-2023-4615 Path Traversal vulnerability in LG LED Assistant 2.1.45
This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant.
network
low complexity
lg CWE-22
7.5
2023-09-04 CVE-2023-4616 Path Traversal vulnerability in LG LED Assistant 2.1.45
This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant.
network
low complexity
lg CWE-22
7.5
2023-09-04 CVE-2023-4613 Path Traversal vulnerability in LG LED Assistant 2.1.45
This vulnerability allows remote attackers to execute arbitrary code on affected installations of LG LED Assistant.
network
low complexity
lg CWE-22
critical
9.8
2023-08-31 CVE-2023-39912 Path Traversal vulnerability in Zohocorp Manageengine Admanager Plus
Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is installed.
network
low complexity
zohocorp CWE-22
4.9
2023-08-31 CVE-2023-41747 Path Traversal vulnerability in Acronis Cloud Manager
Sensitive information disclosure due to unauthenticated path traversal.
low complexity
acronis CWE-22
6.5