Browse CVEs

MEDIUM 5.5 CVE-2022-3146 A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. T… Openstack Mitigation only Fix from $1,6002023-03-23 MEDIUM 5.5 CVE-2022-3101 A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. T… Openstack Mitigation only Fix from $1,6002023-03-23 MEDIUM 6.5 CVE-2023-20066 A vulnerability in the web UI of Cisco IOS XE Software could allow an authenticated, remote attacker to perform a directory traversal and access reso… Ios Xe Mitigation only Fix from $1,6002023-03-23 HIGH 8.8 CVE-2018-25048 The CODESYS runtime system in multiple versions allows an remote low privileged attacker to use a path traversal vulnerability to access and modify a… Control For Beaglebone 3.5.12.30+ Fix from $1,9502023-03-23 MEDIUM 5.3 CVE-2023-25688 IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1, and 4.1.1could allow a remote attacker to traverse directories on the system. An at… Security Key Lifecycle Manager Patch available Fix from $1,6002023-03-22 CRITICAL 9.8 CVE-2023-27855EPSS 13% In affected versions, a path traversal exists when processing a message in Rockwell Automation's ThinManager ThinServer. An unauthenticated remote at… Thinmanager after 12.1.5 Fix from $2,3002023-03-22 HIGH 7.5 CVE-2023-27856EPSS 77% In affected versions, path traversal exists when processing a message of type 8 in Rockwell Automation's ThinManager ThinServer. An unauthenticat… Thinmanager after 12.1.5 Fix from $1,9502023-03-22 MEDIUM 5.3 CVE-2023-25689 IBM Security Guardium Key Lifecycle Manager 3.0, 3.0.1, 4.0, 4.1 , and 4.1.1 could allow a remote attacker to traverse directories on the system. An … Security Key Lifecycle Manager Patch available Fix from $1,6002023-03-21 HIGH 8.8 CVE-2023-27981 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution… Custom Reports after 16.0.0.23040 Fix from $1,9502023-03-21 CRITICAL 9.8 CVE-2023-1467 A vulnerability classified as critical has been found in SourceCodester Student Study Center Desk Management System 1.0. Affected is an unknown funct… Student Study Center Desk Management System Mitigation only Fix from $2,3002023-03-17 MEDIUM 5.5 CVE-2023-21456 Path traversal vulnerability in Galaxy Themes Service prior to SMR Mar-2023 Release 1 allows attacker to access arbitrary file with system uid. Android Mitigation only Fix from $1,6002023-03-16 HIGH 8.8 CVE-2023-28105 go-used-util has commonly used utility functions for Go. Versions prior to 0.0.34 have a ZipSlip issue when using fsutil package to unzip files. When… Go Huge Util 0.0.34+ Fix from $1,9502023-03-16 HIGH 7.5 CVE-2023-25345 Directory traversal vulnerability in swig-templates thru 2.0.4 and swig thru 1.4.2, allows attackers to read arbitrary files via the include or exten… Swig Templates after 2.0.4 Fix from $1,9502023-03-15 MEDIUM 5.3 CVE-2023-25804 Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a limited path traversal vulne… Roxy Wi 6.3.5.0+ Fix from $1,6002023-03-15 CRITICAL 9.8 CVE-2023-28371 In Stellarium through 1.2, attackers can write to files that are typically unintended, such as ones with absolute pathnames or .. directory traversal. Stellarium after 1.2 Fix from $2,3002023-03-15 HIGH 7.5 CVE-2023-27588 Hasura is an open-source product that provides users GraphQL or REST APIs. A path traversal vulnerability has been discovered within Hasura GraphQL E… Graphql Engine 1.3.4 / 2.11.5+ Fix from $1,9502023-03-14 HIGH 8.8 CVE-2023-1398 A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0. Affected by this vulnerability is an unknown functionality of the file /ad… Teacms No fix yet Fix from $1,9502023-03-14 MEDIUM 6.5 CVE-2022-47595 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in WP Go Maps (formerly WP Google Maps) plugin <= 9.0.15… Wp Go Maps after 9.0.15 Fix from $1,6002023-03-14 HIGH 8.1 CVE-2023-27500 An attacker with non-administrative authorizations can exploit a directory traversal flaw in program SAPRSBRO to over-write system files. In this att… Netweaver Application Server Abap Mitigation only Fix from $1,9502023-03-14 CRITICAL 9.6 CVE-2023-27501 SAP NetWeaver AS for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows an attacker to ex… Netweaver Application Server Abap Mitigation only Fix from $2,3002023-03-14 CRITICAL 9.6 CVE-2023-27269 SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, 753, 754, 755, 756, 757, 791, allows a… Netweaver Application Server Abap Mitigation only Fix from $2,3002023-03-14 HIGH 7.5 CVE-2023-25803 Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.5.0 have a directory traversal vulnerab… Roxy Wi 6.3.5.0+ Fix from $1,9502023-03-13 HIGH 7.5 CVE-2023-25802 Roxy-WI is a Web interface for managing Haproxy, Nginx, Apache, and Keepalived servers. Versions prior to 6.3.6.0 don't correctly neutralize `dir/../… Roxy Wi 6.3.6.0+ Fix from $1,9502023-03-13 HIGH 7.5 CVE-2022-31474EPSS 64% Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in iThemes BackupBuddy allows Path Traversal.This issue … Backupbuddy 8.7.5.0+ Fix from $1,9502023-03-13 MEDIUM 6.5 CVE-2023-25814 metersphere is an open source continuous testing platform. In versions prior to 2.7.1 a user who has permission to create a resource file through UI … Metersphere 2.7.1+ Fix from $1,6002023-03-09 CRITICAL 9.8 CVE-2021-33353 Directory Traversal vulnerability in Wyomind Help Desk Magento 2 extension v.1.3.6 and before fixed in v.1.3.7 allows attacker to execute arbitrary c… Help Desk 1.3.7+ Fix from $2,3002023-03-08 HIGH 8.8 CVE-2023-23760 A path traversal vulnerability was identified in GitHub Enterprise Server that allowed remote code execution when building a GitHub Pages site. To ex… Enterprise Server 3.4.17 / 3.5.14+ Fix from $1,9502023-03-08 HIGH 8.8 CVE-2023-27475 Goutil is a collection of miscellaneous functionality for the go language. In versions prior to 0.6.0 when users use fsutil.Unzip to unzip zip files … Goutil 0.6.0+ Fix from $1,9502023-03-07 HIGH 7.1 CVE-2022-41328 KEVEPSS 12% A improper limitation of a pathname to a restricted directory vulnerability ('path traversal') [CWE-22] in Fortinet FortiOS version 7.2.0 through 7.2… Fortios 6.2.14 / 6.4.12+ Fix from $1,9502023-03-07 HIGH 8.2 CVE-2022-42476 A relative path traversal vulnerability [CWE-23] in Fortinet FortiOS version 7.2.0 through 7.2.2, 7.0.0 through 7.0.8 and before 6.4.11, FortiProxy v… Fortiproxy after 7.2.3 Fix from $1,9502023-03-07