Overview 94 matches · 0 in Waratek scope · 0 protected · 7 exploited · 1 CISA KEV · 4 public PoC · 1 EPSS ≥ 0.5
94matches
0in Waratek scope0.0%
0protected0.0%
7exploited7.4%
1CISA KEV1.1%
4public PoC4.3%
1EPSS ≥ 0.51.1%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
2
2.1%
Not applicable
92
97.9%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
94
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
7
7.4%
Working exploit published
0
0.0%
Proof of concept only
3
3.2%
Forecast only
0
0.0%
No public exploit
84
89.4%
split by
peak 18 / quarter
Q1 221
Not applicable1
High1
not blocked1
No public exploit1
Q2 220
Q3 221
Not applicable1
High1
not blocked1
No public exploit1
Q4 220
Q1 232
Not applicable2
High2
not blocked2
No public exploit2
Q2 232
Not applicable2
High2
not blocked2
No public exploit2
Q3 230
Q4 236
Not applicable6
High6
not blocked6
No public exploit6
Q1 242
Not applicable2
High2
not blocked2
No public exploit2
Q2 242
Not applicable2
High2
not blocked2
No public exploit2
Q3 244
Not applicable4
High4
not blocked4
Exploited2
Proof of concept only1
No public exploit1
Q4 2418
Outside Waratek scope1
Not applicable17
High18
not blocked18
Exploited1
Proof of concept only1
No public exploit16
Q1 258
Not applicable8
High8
not blocked8
Proof of concept only1
No public exploit7
Q2 2514
Not applicable14
High14
not blocked14
Exploited2
No public exploit12
Q3 254
Not applicable4
High4
not blocked4
Exploited1
No public exploit3
Q4 257
Not applicable7
High7
not blocked7
Exploited1
No public exploit6
Q1 263
Not applicable3
High3
not blocked3
No public exploit3
Q2 2610
Outside Waratek scope1
Not applicable9
High10
not blocked10
No public exploit10
Q3 267
Not applicable7
High7
not blocked7
No public exploit7
Q4 263
Not applicable3
High3
not blocked3
No public exploit3
Q2 22Q4 22Q2 23Q4 23Q2 24Q4 24Q2 25Q4 25Q2 26Q4 26
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2026-39734 | High | 2026-10-30 | Not applicable | No public exploit | Unauthenticated Path Traversal in WP EasyPay <= 4.5.4 versions. |
| CVE-2026-44415 | High | 2026-10-13 | Not applicable | No public exploit | Affected systems do not properly restrict access to internal APIs and paths for authenticated users. This could allow an authenticated remote attacker to access sensitive internal information, which in the worst case could be leveraged to facilitate unauthorized access to the system or result in the deletion of data. |
| CVE-2026-5703 | High | 2026-10-07 | Not applicable | No public exploit | Path traversal vulnerability in the Satel Iberia SenNet Datalogger Serie 200, specifically in the web portal provided by the device, which allows an authenticated user to read any file or list any directory accessible to the system user running the web server. This is possible by modifying the URL to include a path traversal payload. Successful exploitation of this vulnerability could allow an attacker to access critical system files containing confidential information. |
| CVE-2026-97244 | High | 2026-09-30 | Not applicable | No public exploit | Contributor Path Traversal in Creator LMS <= 1.2.19 versions. |
| CVE-2026-27557 | High | 2026-09-16 | Not applicable | No public exploit | An unauthenticated remote attacker can exploit a path traversal vulnerability in the /index.php/view_uploaded_iodd_file endpoint allowing the SSH server's private keys to be read. |
| CVE-2026-21092 | High | 2026-09-09 | Not applicable | No public exploit | Path traversal in ImsService prior to SMR Sep-2026 Release 1 allows remote attackers to create image files with system server privilege. |
| CVE-2026-59909 | High | 2026-08-17 | Not applicable | No public exploit | Dell ObjectScale, versions prior to 4.3.0.1, contain(s) a Path Traversal vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information tampering. |
| CVE-2026-28157 | High | 2026-08-13 | Not applicable | No public exploit | Subscriber Path Traversal in Do Lasso <= 358 versions. |
| CVE-2026-69109 | High | 2026-08-11 | Not applicable | No public exploit | A vulnerability has been identified in Siemens License Server (SLS) (All versions < V5.3). The affected application is vulnerable to a path traversal vulnerability due to lack of sanitization of user input. This could allow a remote attacker to access arbitrary files on the application. |
| CVE-2025-60835 | High | 2026-07-22 | Not applicable | No public exploit | An issue in the unrar.dll component of IZArc v4.6 allows attackers to execute a path traversal. |
| CVE-2026-52707 | High | 2026-06-17 | Not applicable | No public exploit | Unauthenticated Local File Inclusion in Kastell <= 2.0 versions. |
| CVE-2026-49112 | High | 2026-06-15 | Not applicable | No public exploit | Unauthenticated Path Traversal in Shared Files <= 1.7.64 versions. |
| CVE-2026-42661 | High | 2026-06-15 | Not applicable | No public exploit | Custom role Path Traversal in WP Customer Area <= 8.3.4 versions. |
| CVE-2026-44933 | High | 2026-05-20 | Not applicable | No public exploit | `PluginScript` attempts to `chroot` the plugin to the `repoManagerRoot`, this root is frequently `/` (the system root) in standard configurations or when using `--root`. If the chroot target is `/`, it is a no-op, allowing the traversed path to execute host binaries (like `/bin/bash`) with root privileges. |
| CVE-2026-42930 | High | 2026-05-13 | Not applicable | No public exploit | When running in Appliance mode, an authenticated attacker assigned the 'Administrator' role may be able to bypass Appliance mode restrictions on a BIG-IP system. Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. |
| CVE-2026-25705 | High | 2026-05-13 | Not applicable | No public exploit | A vulnerability has been identified in [Rancher's Extensions](https://ranchermanager.docs.rancher.com/integrations-in-rancher/rancher-extensions) where malicious code can be injected in Rancher through a path traversal in the `compressedEndpoint` field inside a `UIPlugin` deployment. A malicious UI extension could abuse that to: * Overwrite Rancher binaries or configuration to inject code. * Write to /var/lib/rancher/ to tamper with cluster state. * If hostPath volumes are mounted, write to the host node filesystem. * Use this issue to chain with other attack vectors. |
| CVE-2026-0804 | High | 2026-05-12 | Not applicable | No public exploit | An ACAP configuration file lacked sufficient input validation, which could allow a path traversal attack leading to potential privilege escalation. This vulnerability can only be exploited if the Axis device is configured to allow the installation of unsigned ACAP applications, and if an attacker convinces the victim to install a malicious ACAP application. |
| CVE-2026-42274 | High | 2026-05-08 | Not applicable | No public exploit | Heimdall is a cloud native Identity Aware Proxy and Access Control Decision service. Prior to version 0.17.14, Heimdall performs rule matching on the raw (non-normalized) request path, while downstream components may normalize dot-segments according to RFC 3986, Section 6.2.2.3. This discrepancy can result in heimdall authorizing a request for one path (e.g., /user/../admin, or URL-encoded variants such as /user/%2e%2e/admin or /user/%2e%2e%2fadmin. The latter would require the allow_encoded_slashes option to be set to on or no_decode.) while the downstream ultimately processes a different, normalized path (/admin). This issue has been patched in version 0.17.14. |
| CVE-2026-20034 | High | 2026-05-06 | Outside Waratek scope | No public exploit | A vulnerability in the web-based management interface of Cisco Unity Connection could allow an authenticated, remote attacker to execute arbitrary code on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this vulnerability by submitting a crafted API request. A successful exploit could allow the attacker to execute arbitrary code as root, possibly resulting in the complete compromise of a targeted device. To exploit this vulnerability, the attacker must have valid user credentials on the affected device. |
| CVE-2026-28265 | High | 2026-04-01 | Not applicable | No public exploit | PowerStore, contains a Path Traversal vulnerability in the Service user. A low privileged attacker with local access could potentially exploit this vulnerability, leading to modification of arbitrary system files. |
| CVE-2026-25397 | High | 2026-03-25 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Snowray Software File Uploader for WooCommerce file-uploader-for-woocommerce allows Path Traversal.This issue affects File Uploader for WooCommerce: from n/a through <= 1.0.4. |
| CVE-2025-59099 | High | 2026-01-26 | Not applicable | No public exploit | The Access Manager is using the open source web server CompactWebServer written in C#. This web server is affected by a path traversal vulnerability, which allows an attacker to directly access files via simple GET requests without prior authentication. Hence, it is possible to retrieve all files stored on the file system, including the SQLite database Database.sq3, containing badge information and the corresponding PIN codes. Additionally, when trying to access certain files, the web server crashes and becomes unreachable for about 60 seconds. This can be abused to continuously send the request and cause denial of service. |
| CVE-2025-67914 | High | 2026-01-08 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in beeteam368 VidMov vidmov allows Path Traversal.This issue affects VidMov: from n/a through <= 2.3.8. |
| CVE-2025-64676 | High | 2025-12-18 | Not applicable | No public exploit | '.../...//' in Microsoft Purview allows an authorized attacker to execute code over a network. |
| CVE-2025-41736 | High | 2025-11-18 | Not applicable | No public exploit | A low privileged remote attacker can upload a new or overwrite an existing python script by using a path traversal of the target filename in php resulting in a remote code execution. |
| CVE-2025-58972 | High | 2025-11-06 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Dmitry V. (CEO of "UKR Solution") Barcode Scanner with Inventory & Order Manager barcode-scanner-lite-pos-to-manage-products-inventory-and-orders allows Path Traversal.This issue affects Barcode Scanner with Inventory & Order Manager: from n/a through <= 1.10.4. |
| CVE-2025-48090 | High | 2025-11-06 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in CocoBasic Blanka - One Page WordPress Theme blanka-wp allows PHP Local File Inclusion.This issue affects Blanka - One Page WordPress Theme: from n/a through < 1.5. |
| CVE-2025-39467 | High | 2025-11-06 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Mikado-Themes Wanderland wanderland allows PHP Local File Inclusion.This issue affects Wanderland: from n/a through <= 1.7.1. |
| CVE-2025-53880 | High | 2025-10-30 | Not applicable | No public exploit | A Path Traversal vulnerability in the tftpsync/add and tftpsync/delete scripts allows a remote attacker on an adjacent network to write or delete files on the filesystem with the privileges of the unprivileged wwwrun user. Although the endpoint is unauthenticated, access is restricted to a list of allowed IP addresses. |
| CVE-2025-27222 | High | 2025-10-27 | Not applicable | Exploited | TRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to retrieve files. However, the application doesn't properly sanitize the input to this endpoint, ultimately allowing path traversal sequences to be included. This can be used to read any local server file that is accessible by the TRUfusion user and can also be used to leak cleartext passwords of TRUfusion Enterprise itself. |
| CVE-2025-48317 | High | 2025-09-05 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Stefan Keller WooCommerce Payment Gateway for Saferpay woocommerce-payment-gateway-for-saferpay allows Path Traversal.This issue affects WooCommerce Payment Gateway for Saferpay: from n/a through <= 0.4.9. |
| CVE-2025-8088 | High | 2025-08-08 | Not applicable | Exploited | A path traversal vulnerability affecting the Windows version of WinRAR allows the attackers to execute arbitrary code by crafting malicious archive files. This vulnerability was exploited in the wild and was discovered by Anton Cherepanov, Peter Košinár, and Peter Strýček from ESET. |
| CVE-2025-20320 | High | 2025-07-07 | Not applicable | No public exploit | In Splunk Enterprise versions below 9.4.3, 9.3.5, 9.2.7 and 9.1.10, and Splunk Cloud Platform versions below 9.3.2411.107, 9.3.2408.117, and 9.2.2406.121, a low-privileged user that does not hold the "admin" or "power" Splunk roles could craft a malicious payload through the `User Interface - Views` configuration page that could potentially lead to a denial of service (DoS).The user could cause the DoS by exploiting a path traversal vulnerability that allows for deletion of arbitrary files within a Splunk directory. The vulnerability requires the low-privileged user to phish the administrator-level victim by tricking them into initiating a request within their browser. The low-privileged user should not be able to exploit the vulnerability at will. |
| CVE-2025-52805 | High | 2025-07-04 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in VaultDweller Leyka leyka allows PHP Local File Inclusion.This issue affects Leyka: from n/a through <= 3.32.1. |
| CVE-2025-52811 | High | 2025-06-27 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Creanncy Davenport - Versatile Blog and Magazine WordPress Theme davenport allows PHP Local File Inclusion.This issue affects Davenport - Versatile Blog and Magazine WordPress Theme: from n/a through <= 1.3. |
| CVE-2025-52810 | High | 2025-06-27 | Not applicable | No public exploit | Path Traversal vulnerability in TMRW-studio Katerio - Magazine allows PHP Local File Inclusion. This issue affects Katerio - Magazine: from n/a through 1.5.1. |
| CVE-2025-49451 | High | 2025-06-17 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in yannisraft Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery aeroscroll-gallery allows Path Traversal.This issue affects Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery: from n/a through <= 1.0.13. |
| CVE-2025-47176 | High | 2025-06-10 | Not applicable | Exploited | '.../...//' in Microsoft Office Outlook allows an authorized attacker to execute code locally. |
| CVE-2025-39475 | High | 2025-06-09 | Not applicable | Exploited | Path Traversal: '.../...//' vulnerability in Frenify Arlo arlo allows PHP Local File Inclusion.This issue affects Arlo: from n/a through <= 6.0.3. |
| CVE-2025-27010 | High | 2025-05-19 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in bslthemes Tastyc tastyc allows PHP Local File Inclusion.This issue affects Tastyc: from n/a through < 2.5.2. |
| CVE-2025-39492 | High | 2025-05-16 | Not applicable | No public exploit | Path Traversal vulnerability in WHMPress WHMpress allows Relative Path Traversal. This issue affects WHMpress: from 6.2 through revision. |
| CVE-2025-39491 | High | 2025-05-16 | Not applicable | No public exploit | Path Traversal vulnerability in WHMPress WHMpress allows Path Traversal. This issue affects WHMpress: from 6.2 through revision. |
| CVE-2025-47649 | High | 2025-05-07 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in StackWC Open Close WooCommerce Store woc-open-close allows PHP Local File Inclusion.This issue affects Open Close WooCommerce Store: from n/a through <= 4.9.9. |
| CVE-2025-47636 | High | 2025-05-07 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Fernando Briano List category posts list-category-posts allows PHP Local File Inclusion.This issue affects List category posts: from n/a through <= 0.91.0. |
| CVE-2025-39470 | High | 2025-04-18 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in ThimPress Ivy School ivy-school allows PHP Local File Inclusion.This issue affects Ivy School: from n/a through <= 1.6.0. |
| CVE-2025-32585 | High | 2025-04-11 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Trusty Plugins Shop Products Filter trusty-woo-products-filter allows PHP Local File Inclusion.This issue affects Shop Products Filter: from n/a through <= 1.2. |
| CVE-2025-30014 | High | 2025-04-08 | Not applicable | No public exploit | SAP Capital Yield Tax Management has directory traversal vulnerability due to insufficient path validation. This could allow an attacker with low privileges to read files from directory which they don�t have access to, hence causing a high impact on confidentiality. Integrity and Availability are not affected. |
| CVE-2025-30834 | High | 2025-04-01 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Bit Apps Bit Assist bit-assist allows Path Traversal.This issue affects Bit Assist: from n/a through <= 1.5.4. |
| CVE-2024-54362 | High | 2025-03-28 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in boggibill GetShop ecommerce getshop-ecommerce allows Path Traversal.This issue affects GetShop ecommerce: from n/a through <= 1.3. |
| CVE-2025-25122 | High | 2025-03-03 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in hashshop WizShop wizshop allows Path Traversal.This issue affects WizShop: from n/a through <= 3.0.2. |
| CVE-2025-26935 | High | 2025-02-25 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in wpjobportal WP Job Portal wp-job-portal allows PHP Local File Inclusion.This issue affects WP Job Portal: from n/a through <= 2.2.8. |
| CVE-2025-26356 | High | 2025-02-12 | Not applicable | No public exploit | A CWE-35 "Path Traversal" in maxtime/api/database/database.lua (setActive endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite sensitive files via crafted HTTP requests. |
| CVE-2025-26354 | High | 2025-02-12 | Not applicable | No public exploit | A CWE-35 "Path Traversal" in maxtime/api/database/database.lua (copy endpoint) in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to overwrite sensitive files via crafted HTTP requests. |
| CVE-2025-24685 | High | 2025-01-27 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Ihor Kit Morkva UA Shipping morkva-ua-shipping allows PHP Local File Inclusion.This issue affects Morkva UA Shipping: from n/a through <= 1.0.18. |
| CVE-2025-22786 | High | 2025-01-15 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Element Invader ElementInvader Addons for Elementor elementinvader-addons-for-elementor allows PHP Local File Inclusion.This issue affects ElementInvader Addons for Elementor: from n/a through <= 1.2.6. |
| CVE-2024-49249 | High | 2025-01-07 | Not applicable | Proof of concept only | Path Traversal: '.../...//' vulnerability in SMSA Express SMSA Shipping smsa-shipping-official allows Path Traversal.This issue affects SMSA Shipping: from n/a through <= 2.3. |
| CVE-2024-56214 | High | 2024-12-31 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in DeluxeThemes Userpro userpro allows Path Traversal.This issue affects Userpro: from n/a through <= 5.1.9. |
| CVE-2024-56213 | High | 2024-12-31 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Arraytics Eventin wp-event-solution allows Path Traversal.This issue affects Eventin: from n/a through <= 4.0.7. |
| CVE-2023-7263 | High | 2024-12-28 | Not applicable | No public exploit | Some Huawei home music system products have a path traversal vulnerability. Successful exploitation of this vulnerability may cause unauthorized file deletion or file permission change.(Vulnerability ID:HWPSIRT-2023-53450) This vulnerability has been assigned a (CVE)ID:CVE-2023-7263 |
| CVE-2023-7300 | High | 2024-12-26 | Not applicable | No public exploit | Huawei Home Music System has a path traversal vulnerability. Successful exploitation of this vulnerability may cause the music host file to be deleted or the file permission to be changed.(Vulnerability ID:HWPSIRT-2023-60613) |
| CVE-2024-56055 | High | 2024-12-18 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2. |
| CVE-2024-56049 | High | 2024-12-18 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in VibeThemes WPLMS wplms_plugin allows Path Traversal.This issue affects WPLMS: from n/a through < 1.9.9.5.2. |
| CVE-2024-54216 | High | 2024-12-06 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in reputeinfosystems ARForms allows Path Traversal. This issue affects ARForms: from n/a before 7.0.2. |
| CVE-2024-52498 | High | 2024-11-28 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in softpulseinfotech SP Blog Designer sp-blog-designer allows PHP Local File Inclusion.This issue affects SP Blog Designer: from n/a through <= 1.0.0. |
| CVE-2024-50054 | High | 2024-11-22 | Not applicable | No public exploit | The back-end does not sufficiently verify the user-controlled filename parameter which makes it possible for an attacker to perform a path traversal attack and retrieve arbitrary files from the file system. |
| CVE-2024-52447 | High | 2024-11-20 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in corporatezen222 Contact Page With Google Map contact-page-with-google-map allows Path Traversal.This issue affects Contact Page With Google Map: from n/a through <= 1.6.1. |
| CVE-2024-41973 | High | 2024-11-18 | Not applicable | No public exploit | A low privileged remote attacker can specify an arbitrary file on the filesystem which may lead to an arbitrary file writes with root privileges. |
| CVE-2021-1132 | High | 2024-11-18 | Outside Waratek scope | No public exploit | A vulnerability in the API subsystem and in the web-management interface of Cisco Network Services Orchestrator (NSO) could allow an unauthenticated, remote attacker to access sensitive data. This vulnerability exists because the web-management interface and certain HTTP-based APIs do not properly validate user-supplied input. An attacker could exploit this vulnerability by sending a crafted HTTP request that contains directory traversal character sequences to an affected system. A successful exploit could allow the attacker to access sensitive files on the affected system.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. |
| CVE-2020-26073 | High | 2024-11-18 | Not applicable | Exploited | A vulnerability in the application data endpoints of Cisco SD-WAN vManage Software could allow an unauthenticated, remote attacker to gain access to sensitive information. The vulnerability is due to improper validation of directory traversal character sequences within requests to application programmatic interfaces (APIs). An attacker could exploit this vulnerability by sending malicious requests to an API within the affected application. A successful exploit could allow the attacker to conduct directory traversal attacks and gain access to sensitive information including credentials or user tokens.Cisco has released software updates that address this vulnerability. There are no workarounds that address this vulnerability. |
| CVE-2024-11136 | High | 2024-11-14 | Not applicable | No public exploit | The default TCL Camera application exposes a provider vulnerable to path traversal vulnerability. Malicious application can supply malicious URI path and delete arbitrary files from user’s external storage. |
| CVE-2024-51582 | High | 2024-11-04 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in ThimPress WP Hotel Booking wp-hotel-booking allows PHP Local File Inclusion.This issue affects WP Hotel Booking: from n/a through <= 2.2.9. |
| CVE-2024-49770 | High | 2024-11-01 | Not applicable | Proof of concept only | `oak` is a middleware framework for Deno's native HTTP server, Deno Deploy, Node.js 16.5 and later, Cloudflare Workers and Bun. By default `oak` does not allow transferring of hidden files with `Context.send` API. However, prior to version 17.1.3, this can be bypassed by encoding `/` as its URL encoded form `%2F`. For an attacker this has potential to read sensitive user data or to gain access to server secrets. Version 17.1.3 fixes the issue. |
| CVE-2024-45248 | High | 2024-10-06 | Not applicable | No public exploit | Multi-DNC – CWE-35: Path Traversal: '.../...//' |
| CVE-2024-47324 | High | 2024-10-05 | Not applicable | No public exploit | Path Traversal: '.../...//' vulnerability in Ex-Themes WP Timeline – Vertical and Horizontal timeline plugin wp-timelines.This issue affects WP Timeline – Vertical and Horizontal timeline plugin: from n/a through <= 3.6.7. |
| CVE-2024-47169 | High | 2024-09-26 | Not applicable | Proof of concept only | Agnai is an artificial-intelligence-agnostic multi-user, mult-bot roleplaying chat system. A vulnerability in versions prior to 1.0.330 permits attackers to upload arbitrary files to attacker-chosen locations on the server, including JavaScript, enabling the execution of commands within those files. This issue could result in unauthorized access, full server compromise, data leakage, and other critical security threats. This does not affect `agnai.chat`, installations using S3-compatible storage, or self-hosting that is not publicly exposed. This does affect publicly hosted installs without S3-compatible storage. Version 1.0.330 fixes this vulnerability. |
| CVE-2024-0113 | High | 2024-08-12 | Not applicable | No public exploit | NVIDIA Mellanox OS, ONYX, Skyway, and MetroX-3 XCC contain a vulnerability in the web support, where an attacker can cause a CGI path traversal by a specially crafted URI. A successful exploit of this vulnerability might lead to escalation of privileges and information disclosure. |
| CVE-2024-38706 | High | 2024-07-12 | Not applicable | Exploited | Path Traversal: '.../...//' vulnerability in DevItems HT Mega ht-mega-for-elementor.This issue affects HT Mega: from n/a through <= 2.5.7. |
| CVE-2024-36991 | High | 2024-07-01 | Not applicable | Exploited | In Splunk Enterprise on Windows versions below 9.2.2, 9.1.5, and 9.0.10, an attacker could perform a path traversal on the /modules/messaging/ endpoint in Splunk Enterprise on Windows. This vulnerability should only affect Splunk Enterprise on Windows. |
| CVE-2024-5481 | High | 2024-06-07 | Not applicable | No public exploit | The Photo Gallery by 10Web – Mobile-Friendly Image Gallery plugin for WordPress is vulnerable to Path Traversal in all versions up to, and including, 1.8.23 via the esc_dir function. This makes it possible for authenticated attackers to cut and paste (copy) the contents of arbitrary files on the server, which can contain sensitive information, and to cut (delete) arbitrary directories, including the root WordPress directory. By default this can be exploited by administrators only. In the premium version of the plugin, administrators can give gallery edit permissions to lower level users, which might make this exploitable by users as low as contributors. |
| CVE-2024-27901 | High | 2024-04-09 | Not applicable | No public exploit | SAP Asset Accounting could allow a high privileged attacker to exploit insufficient validation of path information provided by the users and pass it through to the file API's. Thus, causing a considerable impact on confidentiality, integrity and availability of the application. |
| CVE-2024-1886 | High | 2024-02-26 | Not applicable | No public exploit | This vulnerability allows remote attackers to traverse the directory on the affected webOS of LG Signage. |
| CVE-2023-5800 | High | 2024-02-05 | Not applicable | No public exploit | Vintage, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API create_overlay.cgi did not have a sufficient input validation allowing for a possible remote code execution. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. |
| CVE-2023-46690 | High | 2023-11-30 | Not applicable | No public exploit | In Delta Electronics InfraSuite Device Master v.1.0.7, a vulnerability exists that allows an attacker to write to any file to any location of the filesystem, which could lead to remote code execution. |
| CVE-2023-6252 | High | 2023-11-22 | Not applicable | No public exploit | Path traversal vulnerability in Chalemelon Power framework, affecting the getImage parameter. This vulnerability could allow a remote user to read files located on the server and gain access to sensitive information such as configuration files. |
| CVE-2023-21418 | High | 2023-11-21 | Not applicable | No public exploit | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API irissetup.cgi was vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. The impact of exploiting this vulnerability is lower with operator service accounts and limited to non-system files compared to administrator-privileges. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. |
| CVE-2023-21417 | High | 2023-11-21 | Not applicable | No public exploit | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API manageoverlayimage.cgi was vulnerable to path traversal attacks that allows for file/folder deletion. This flaw can only be exploited after authenticating with an operator- or administrator- privileged service account. The impact of exploiting this vulnerability is lower with operator service accounts and limited to non-system files compared to administrator-privileges. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. |
| CVE-2023-21416 | High | 2023-11-21 | Not applicable | No public exploit | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API dynamicoverlay.cgi was vulnerable to a Denial-of-Service attack allowing for an attacker to block access to the overlay configuration page in the web interface of the Axis device. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account however the impact is equal. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. |
| CVE-2023-21415 | High | 2023-10-16 | Not applicable | No public exploit | Sandro Poppi, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API overlay_del.cgi is vulnerable to path traversal attacks that allows for file deletion. This flaw can only be exploited after authenticating with an operator- or administrator-privileged service account. Axis has released patched AXIS OS versions for the highlighted flaw. Please refer to the Axis security advisory for more information and solution. |
| CVE-2023-32714 | High | 2023-06-01 | Not applicable | No public exploit | In the Splunk App for Lookup File Editing versions below 4.0.1, a low-privileged user can, with a specially crafted web request, trigger a path traversal exploit that can then be used to read and write to restricted areas of the Splunk installation directory. |
| CVE-2022-48476 | High | 2023-04-24 | Not applicable | No public exploit | In JetBrains Ktor before 2.3.0 path traversal in the `resolveResource` method was possible |
| CVE-2022-3693 | High | 2023-01-13 | Not applicable | No public exploit | Path Traversal vulnerability in Deytek Informatics FileOrbis File Management System allows Path Traversal. This issue affects FileOrbis File Management System: from unspecified before 10.6.3. |
| CVE-2022-36928 | High | 2023-01-09 | Not applicable | No public exploit | Zoom for Android clients before version 5.13.0 contain a path traversal vulnerability. A third party app could exploit this vulnerability to read and write to the Zoom application data directory. |
| CVE-2022-2265 | High | 2022-09-21 | Not applicable | No public exploit | The Identity and Directory Management System developed by Çekino Bilgi Teknolojileri before version 2.1.25 has an unauthenticated Path traversal vulnerability. This has been fixed in the version 2.1.25 |
| CVE-2022-24774 | High | 2022-03-22 | Not applicable | No public exploit | CycloneDX BOM Repository Server is a bill of materials (BOM) repository server for distributing CycloneDX BOMs. CycloneDX BOM Repository Server before version 2.0.1 has an improper input validation vulnerability leading to path traversal. A malicious user may potentially exploit this vulnerability to create arbitrary directories or a denial of service by deleting arbitrary directories. The vulnerability is resolved in version 2.0.1. The vulnerability is not exploitable with the default configuration with the post and delete methods disabled. This can be configured by modifying the `appsettings.json` file, or alternatively, setting the environment variables `ALLOWEDMETHODS__POST` and `ALLOWEDMETHODS__DELETE` to `false`. |