CWE-24 · 101 kayıt
Path Traversal: '../filedir'
Bu sınıftaki CVE’ler
101 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
66Bu hafta | CVE-2025-27920Silahlaştırılmış | Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling.srimax · output messenger · CWE-24 | Yüksek8,8 | KEV | %1,9 | 5 May 2025 |
40Planlayın | CVE-2023-1800İstismar yok | sjqzhang go-fastdfs File Upload uploa upload path traversalgo-fastdfs project · go-fastdfs · CWE-24 | Kritik9,8 | — | %3,6 | 2 Nis 2023 |
39İzleyin | CVE-2024-53636İstismar yok | An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackeacademiaerp · student information system · CWE-24 | Kritik9,8 | — | %1,6 | 26 Nis 2025 |
39İzleyin | CVE-2023-3057İstismar yok | YFCMF Ajax.php path traversaliuok · yfcmf-tp6 · CWE-24 | Kritik9,8 | — | %1,2 | 2 Haz 2023 |
39İzleyin | CVE-2023-3056İstismar yok | YFCMF index.php path traversaliuok · yfcmf-tp6 · CWE-24 | Kritik9,8 | — | %1,2 | 2 Haz 2023 |
39İzleyin | CVE-2024-0989İstismar yok | Sichuan Yougou Technology KuERP Service.php del_sn_db path traversalkuerp project · kuerp · CWE-24 | Kritik9,8 | — | %1,2 | 28 Oca 2024 |
39İzleyin | CVE-2024-0417İstismar yok | DeShang DSShop MemberAuth.php path traversalcsdeshang · dsshop · CWE-24 | Kritik9,8 | — | %1,1 | 11 Oca 2024 |
39İzleyin | CVE-2023-7134İstismar yok | SourceCodester Medicine Tracking System path traversaloretnom23 · medicine tracker system · CWE-24 | Kritik9,8 | — | %0,9 | 28 Ara 2023 |
39İzleyin | CVE-2024-0416İstismar yok | DeShang DSMall MemberAuth.php path traversalcsdeshang · dsmall · CWE-24 | Kritik9,8 | — | %0,9 | 11 Oca 2024 |
39İzleyin | CVE-2025-43928İstismar yok | In Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading arbitrary files via ../ directory traversalinfodraw · pmrs-102 firmware · CWE-24 | Kritik9,8 | — | %0,9 | 19 Nis 2025 |
39İzleyin | CVE-2024-2563İstismar yok | PandaXGO PandaX upload.go DeleteImage path traversalpandax · pandax · CWE-24 | Kritik9,8 | — | %0,9 | 17 Mar 2024 |
39İzleyin | CVE-2023-7058İstismar yok | SourceCodester Simple Student Attendance System path traversaloretnom23 · simple student attendance system · CWE-24 | Kritik9,8 | — | %0,7 | 22 Ara 2023 |
39İzleyin | CVE-2026-39813Kavram kanıtı | A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attackfortinet · fortisandbox · CWE-24 | Kritik9,8 | — | %0,7 | 14 Nis 2026 |
37İzleyin | CVE-2025-60344İstismar yok | A path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate inpud-link · dsr-150 · CWE-24 | Yüksek8,6 | — | %10,9 | 21 Eki 2025 |
37İzleyin | CVE-2026-49103İstismar yok | Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component.webmin · webmin · CWE-24 | Kritik9,4 | — | %0,5 | 27 May 2026 |
36İzleyin | CVE-2021-33036İstismar yok | Apache Hadoop Privilege escalation vulnerabilityapache · hadoop · CWE-24 | Yüksek8,8 | — | %3,9 | 15 Haz 2022 |
36İzleyin | CVE-2025-54769Kavram kanıtı | KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversalxorux · lpar2rrd · CWE-24 | Yüksek8,8 | — | %3,3 | 28 Tem 2025 |
36İzleyin | CVE-2020-7882Kavram kanıtı | anySign directory traversal vulnerabilityhancom · anysign4pc · CWE-24 | Kritik9,1 | — | %1,3 | 22 Kas 2021 |
36İzleyin | CVE-2023-6900İstismar yok | rmountjoy92 DashMachine delete_file path traversalrmountjoy92 · dashmachine · CWE-24 | Kritik9,1 | — | %1,1 | 17 Ara 2023 |
36İzleyin | CVE-2025-61318İstismar yok | Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.emlog · emlog · CWE-24 | Kritik9,1 | — | %0,7 | 8 Ara 2025 |
35İzleyin | CVE-2023-1398İstismar yok | XiaoBingBy TeaCMS upload path traversalteacms project · teacms · CWE-24 | Yüksek8,8 | — | %1,0 | 14 Mar 2023 |
35İzleyin | CVE-2024-2825İstismar yok | lakernote EasyAdmin saveReportFile path traversallakernote · easyadmin · CWE-24 | Yüksek8,8 | — | %0,7 | 22 Mar 2024 |
34İzleyin | CVE-2026-14947İstismar yok | Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP filefrauscher sensortechnik · fds 102 · CWE-24 | Yüksek8,6 | — | %1,5 | 20 Ağu 2026 |
34İzleyin | CVE-2021-26725İstismar yok | Authenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4nozominetworks · central management control · CWE-24 | Yüksek8,6 | — | %1,1 | 22 Şub 2021 |
34İzleyin | CVE-2026-97730İstismar yok | In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) winetgate · pfsense plus · CWE-24 | Yüksek8,5 | — | %1,0 | 5 gün önce |
- CVE-2025-2792066Bu hafta
Output Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling.
YüksekCVSS 8,8KEVSilahlaştırılmışEPSS %2srimax · output messenger5 May 2025
- CVE-2023-180040Planlayın
sjqzhang go-fastdfs File Upload uploa upload path traversal
KritikCVSS 9,8İstismar yokEPSS %4go-fastdfs project · go-fastdfs2 Nis 2023
- CVE-2024-5363639İzleyin
An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attacke
KritikCVSS 9,8İstismar yokEPSS %2academiaerp · student information system26 Nis 2025
- CVE-2023-305739İzleyin
YFCMF Ajax.php path traversal
KritikCVSS 9,8İstismar yokEPSS %1iuok · yfcmf-tp62 Haz 2023
- CVE-2023-305639İzleyin
YFCMF index.php path traversal
KritikCVSS 9,8İstismar yokEPSS %1iuok · yfcmf-tp62 Haz 2023
- CVE-2024-098939İzleyin
Sichuan Yougou Technology KuERP Service.php del_sn_db path traversal
KritikCVSS 9,8İstismar yokEPSS %1kuerp project · kuerp28 Oca 2024
- CVE-2024-041739İzleyin
DeShang DSShop MemberAuth.php path traversal
KritikCVSS 9,8İstismar yokEPSS %1csdeshang · dsshop11 Oca 2024
- CVE-2023-713439İzleyin
SourceCodester Medicine Tracking System path traversal
KritikCVSS 9,8İstismar yokEPSS %1oretnom23 · medicine tracker system28 Ara 2023
- CVE-2024-041639İzleyin
DeShang DSMall MemberAuth.php path traversal
KritikCVSS 9,8İstismar yokEPSS %1csdeshang · dsmall11 Oca 2024
- CVE-2025-4392839İzleyin
In Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading arbitrary files via ../ directory traversal
KritikCVSS 9,8İstismar yokEPSS %1infodraw · pmrs-102 firmware19 Nis 2025
- CVE-2024-256339İzleyin
PandaXGO PandaX upload.go DeleteImage path traversal
KritikCVSS 9,8İstismar yokEPSS %1pandax · pandax17 Mar 2024
- CVE-2023-705839İzleyin
SourceCodester Simple Student Attendance System path traversal
KritikCVSS 9,8İstismar yokEPSS %1oretnom23 · simple student attendance system22 Ara 2023
- CVE-2026-3981339İzleyin
A path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attack
KritikCVSS 9,8Kavram kanıtıEPSS %1fortinet · fortisandbox14 Nis 2026
- CVE-2025-6034437İzleyin
A path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate inpu
YüksekCVSS 8,6İstismar yokEPSS %11d-link · dsr-15021 Eki 2025
- CVE-2026-4910337İzleyin
Webmin before 2.640 does not safely construct a filename for saving of an attachment within the mailboxes component.
KritikCVSS 9,4İstismar yokEPSS %0webmin · webmin27 May 2026
- CVE-2021-3303636İzleyin
Apache Hadoop Privilege escalation vulnerability
YüksekCVSS 8,8İstismar yokEPSS %4apache · hadoop15 Haz 2022
- CVE-2025-5476936İzleyin
KL-001-2025-016: Xorux LPAR2RRD File Upload Directory Traversal
YüksekCVSS 8,8Kavram kanıtıEPSS %3xorux · lpar2rrd28 Tem 2025
- CVE-2020-788236İzleyin
anySign directory traversal vulnerability
KritikCVSS 9,1Kavram kanıtıEPSS %1hancom · anysign4pc22 Kas 2021
- CVE-2023-690036İzleyin
rmountjoy92 DashMachine delete_file path traversal
KritikCVSS 9,1İstismar yokEPSS %1rmountjoy92 · dashmachine17 Ara 2023
- CVE-2025-6131836İzleyin
Emlog Pro 2.5.20 has an arbitrary file deletion vulnerability.
KritikCVSS 9,1İstismar yokEPSS %1emlog · emlog8 Ara 2025
- CVE-2023-139835İzleyin
XiaoBingBy TeaCMS upload path traversal
YüksekCVSS 8,8İstismar yokEPSS %1teacms project · teacms14 Mar 2023
- CVE-2024-282535İzleyin
lakernote EasyAdmin saveReportFile path traversal
YüksekCVSS 8,8İstismar yokEPSS %1lakernote · easyadmin22 Mar 2024
- CVE-2026-1494734İzleyin
Frauscher Sensortechnik: FDS102 for FAdC/FAdCi R2 is vulnerable to Remote Code Execution via malicious ZIP file
YüksekCVSS 8,6İstismar yokEPSS %1frauscher sensortechnik · fds 10220 Ağu 2026
- CVE-2021-2672534İzleyin
Authenticated command path traversal on timezone settings in Guardian/CMC before 20.0.7.4
YüksekCVSS 8,6İstismar yokEPSS %1nozominetworks · central management control22 Şub 2021
- CVE-2026-9773034İzleyin
In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) wi
YüksekCVSS 8,5İstismar yokEPSS %1netgate · pfsense plus5 gün önce