Vulnerabilities > Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

DATE CVE VULNERABILITY TITLE RISK
2024-10-07 CVE-2024-47556 Path Traversal vulnerability in Xerox Freeflow Core
Pre-Auth RCE via Path Traversal
network
low complexity
xerox CWE-22
critical
9.8
2024-10-07 CVE-2024-47557 Path Traversal vulnerability in Xerox Freeflow Core
Pre-Auth RCE via Path Traversal
network
low complexity
xerox CWE-22
critical
9.8
2024-10-07 CVE-2024-47558 Path Traversal vulnerability in Xerox Freeflow Core 7.0
Authenticated RCE via Path Traversal
network
low complexity
xerox CWE-22
8.8
2024-10-07 CVE-2024-47559 Path Traversal vulnerability in Xerox Freeflow Core 7.0
Authenticated RCE via Path Traversal
network
low complexity
xerox CWE-22
8.8
2024-10-07 CVE-2024-46446 Path Traversal vulnerability in Mecha-Cms Mecha 3.0.0
Mecha CMS 3.0.0 is vulnerable to Directory Traversal.
network
low complexity
mecha-cms CWE-22
critical
9.8
2024-10-05 CVE-2024-47841 Path Traversal vulnerability in Wikimedia Wikimedia-Extensions-Css
Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in The Wikimedia Foundation Mediawiki - CSS Extension allows Path Traversal.This issue affects Mediawiki - CSS Extension: from 1.42.X before 1.42.2, from 1.41.X before 1.41.3, from 1.39.X before 1.39.9.
network
low complexity
wikimedia CWE-22
7.5
2024-10-03 CVE-2024-41163 Path Traversal vulnerability in Veertu Anka Build Cloud 1.42.0
A directory traversal vulnerability exists in the archive download functionality of Veertu Anka Build 1.42.0.
network
low complexity
veertu CWE-22
7.5
2024-10-03 CVE-2024-41922 Path Traversal vulnerability in Veertu Anka Build Cloud 1.42.0
A directory traversal vulnerability exists in the log files download functionality of Veertu Anka Build 1.42.0.
network
low complexity
veertu CWE-22
7.5
2024-10-03 CVE-2024-8352 Path Traversal vulnerability in Hypestudio Social web Suite
The Social Web Suite – Social Media Auto Post, Social Media Auto Publish plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 4.1.11 via the download_log function.
network
low complexity
hypestudio CWE-22
7.5
2024-10-02 CVE-2024-46977 Path Traversal vulnerability in Openc3 Cosmos
OpenC3 COSMOS provides the functionality needed to send commands to and receive data from one or more embedded systems.
network
low complexity
openc3 CWE-22
6.5