CWE-35 · 179 kayıt
Path Traversal: '.../...//'
Bu sınıftaki CVE’ler
180 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
91Hemen | CVE-2025-8088Silahlaştırılmış | Path traversal vulnerability in WinRARrarlab · winrar · CWE-35 | Yüksek8,4 | KEV | %94,1 | 8 Ağu 2025 |
58Planlayın | CVE-2024-2863Kavram kanıtı | Path traversal via file upload on LG LED Assistantlg · lg led assistant · CWE-35 | Kritik9,8 | — | %64,0 | 25 Mar 2024 |
56Planlayın | CVE-2020-27130İstismar yok | Cisco Security Manager Path Traversal Vulnerabilitycisco · security manager · CWE-35 | Kritik9,1 | — | %65,9 | 17 Kas 2020 |
45Planlayın | CVE-2023-32714İstismar yok | Path Traversal in Splunk App for Lookup File Editingsplunk · splunk · CWE-35 | Yüksek8,1 | — | %42,8 | 1 Haz 2023 |
41Planlayın | CVE-2025-53417İstismar yok | File Parsing Deserialization of Untrusted Data in DTM Softdelta electronics · diaview · CWE-35 | Kritik9,3 | — | %13,9 | 4 Ağu 2025 |
40Planlayın | CVE-2018-3744İstismar yok | The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.html-pages project · html-pages · CWE-35 | Kritik9,8 | — | %2,3 | 29 May 2018 |
39İzleyin | CVE-2025-41723İstismar yok | Sauter: Directory Traversal in importFile SOAP Methodsauter · modulo 6 devices modu680-as · CWE-35 | Kritik9,8 | — | %1,3 | 22 Eki 2025 |
39İzleyin | CVE-2026-45495İstismar yok | Microsoft Edge (Chromium-based) Remote Code Execution Vulnerabilitymicrosoft · edge chromium · CWE-35 | Kritik9,8 | — | %1,0 | 18 May 2026 |
39İzleyin | CVE-2026-59115İstismar yok | Microsoft Entra Provisioning Service Elevation of Privilege Vulnerabilitymicrosoft · entra provisioning service · CWE-35 | Kritik9,9 | — | %1,0 | 6 Ağu 2026 |
39İzleyin | CVE-2025-42937İstismar yok | Directory Traversal vulnerability in SAP Print Servicesap_se · sap print service · CWE-35 | Kritik9,8 | — | %0,7 | 13 Eki 2025 |
39İzleyin | CVE-2025-49297İstismar yok | WordPress Grill and Chow theme <= 1.6 - Local File Inclusion Vulnerabilityqodeinteractive · grill and chow · CWE-35 | Kritik9,8 | — | %0,6 | 9 Haz 2025 |
39İzleyin | CVE-2025-49295İstismar yok | WordPress MediClinic theme <= 2.1 - Local File Inclusion Vulnerabilityqodeinteractive · mediclinic · CWE-35 | Kritik9,8 | — | %0,6 | 9 Haz 2025 |
39İzleyin | CVE-2025-49296İstismar yok | WordPress GrandPrix theme <= 1.6 - Local File Inclusion Vulnerabilityqodeinteractive · grandprix · CWE-35 | Kritik9,8 | — | %0,6 | 9 Haz 2025 |
38İzleyin | CVE-2026-52703İstismar yok | WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerabilityninja team · fastdup · CWE-35 | Kritik9,6 | — | %0,5 | 15 Haz 2026 |
38İzleyin | GHSA-phv5-334h-mxcwİstismar yok | motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path TraversalPyPI · motioneye · CWE-35 | Kritik9,5 | — | — | 23 Haz 2026 |
37İzleyin | CVE-2025-68428Kavram kanıtı | jsPDF has Local File Inclusion/Path Traversal vulnerabilityparall · jspdf · CWE-35 | Kritik9,2 | — | %2,2 | 5 Oca 2026 |
37İzleyin | CVE-2025-59793İstismar yok | Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be ablerocketsoftware · trufusion enterprise · CWE-35 | Kritik9,4 | — | %1,1 | 17 Şub 2026 |
37İzleyin | CVE-2024-56045İstismar yok | WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerabilityvibethemes · wordpress learning management system · CWE-35 | Kritik9,3 | — | %0,7 | 31 Ara 2024 |
37İzleyin | CVE-2026-6074İstismar yok | Path traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW)intrado · 911 emergency gateway · CWE-35 | Kritik9,3 | — | %0,7 | 23 Nis 2026 |
37İzleyin | CVE-2025-30515İstismar yok | CyberData 011209 SIP Emergency Intercom Path Traversalcyberdata · 011209 sip emergency intercom firmware · CWE-35 | Kritik9,3 | — | %0,6 | 9 Haz 2025 |
37İzleyin | CVE-2024-40505İstismar yok | Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi compodlink · dap-1650 firmware · CWE-35 | Kritik9,3 | — | %0,4 | 16 Tem 2024 |
36İzleyin | CVE-2023-46690İstismar yok | Delta Electronics InfraSuite Device Master Path Traversaldeltaww · infrasuite device master · CWE-35 | Yüksek8,8 | — | %1,9 | 30 Kas 2023 |
36İzleyin | CVE-2024-21575İstismar yok | ComfyUI-Impact-Pack is vulnerable to Path Traversal.ltdrdata · comfyui-impact-pack · CWE-35 | Kritik9,2 | — | %1,0 | 12 Ara 2024 |
36İzleyin | CVE-2026-13716İstismar yok | Path Traversal: '.../...//' in Crafty Controllercraftycontrol · crafty controller · CWE-35 | Kritik9,1 | — | %0,8 | 11 Ağu 2026 |
36İzleyin | CVE-2026-40128İstismar yok | Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)sap_se · sap netweaver application server java (web container) · CWE-35 | Kritik9,0 | — | %0,6 | 8 Haz 2026 |
- CVE-2025-808891Hemen
Path traversal vulnerability in WinRAR
YüksekCVSS 8,4KEVSilahlaştırılmışEPSS %94rarlab · winrar8 Ağu 2025
- CVE-2024-286358Planlayın
Path traversal via file upload on LG LED Assistant
KritikCVSS 9,8Kavram kanıtıEPSS %64lg · lg led assistant25 Mar 2024
- CVE-2020-2713056Planlayın
Cisco Security Manager Path Traversal Vulnerability
KritikCVSS 9,1İstismar yokEPSS %66cisco · security manager17 Kas 2020
- CVE-2023-3271445Planlayın
Path Traversal in Splunk App for Lookup File Editing
YüksekCVSS 8,1İstismar yokEPSS %43splunk · splunk1 Haz 2023
- CVE-2025-5341741Planlayın
File Parsing Deserialization of Untrusted Data in DTM Soft
KritikCVSS 9,3İstismar yokEPSS %14delta electronics · diaview4 Ağu 2025
- CVE-2018-374440Planlayın
The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.
KritikCVSS 9,8İstismar yokEPSS %2html-pages project · html-pages29 May 2018
- CVE-2025-4172339İzleyin
Sauter: Directory Traversal in importFile SOAP Method
KritikCVSS 9,8İstismar yokEPSS %1sauter · modulo 6 devices modu680-as22 Eki 2025
- CVE-2026-4549539İzleyin
Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1microsoft · edge chromium18 May 2026
- CVE-2026-5911539İzleyin
Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability
KritikCVSS 9,9İstismar yokEPSS %1microsoft · entra provisioning service6 Ağu 2026
- CVE-2025-4293739İzleyin
Directory Traversal vulnerability in SAP Print Service
KritikCVSS 9,8İstismar yokEPSS %1sap_se · sap print service13 Eki 2025
- CVE-2025-4929739İzleyin
WordPress Grill and Chow theme <= 1.6 - Local File Inclusion Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1qodeinteractive · grill and chow9 Haz 2025
- CVE-2025-4929539İzleyin
WordPress MediClinic theme <= 2.1 - Local File Inclusion Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1qodeinteractive · mediclinic9 Haz 2025
- CVE-2025-4929639İzleyin
WordPress GrandPrix theme <= 1.6 - Local File Inclusion Vulnerability
KritikCVSS 9,8İstismar yokEPSS %1qodeinteractive · grandprix9 Haz 2025
- CVE-2026-5270338İzleyin
WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerability
KritikCVSS 9,6İstismar yokEPSS %0ninja team · fastdup15 Haz 2026
- GHSA-phv5-334h-mxcw38İzleyin
motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal
KritikCVSS 9,5İstismar yokPyPI · motioneye23 Haz 2026
- CVE-2025-6842837İzleyin
jsPDF has Local File Inclusion/Path Traversal vulnerability
KritikCVSS 9,2Kavram kanıtıEPSS %2parall · jspdf5 Oca 2026
- CVE-2025-5979337İzleyin
Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able
KritikCVSS 9,4İstismar yokEPSS %1rocketsoftware · trufusion enterprise17 Şub 2026
- CVE-2024-5604537İzleyin
WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability
KritikCVSS 9,3İstismar yokEPSS %1vibethemes · wordpress learning management system31 Ara 2024
- CVE-2026-607437İzleyin
Path traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW)
KritikCVSS 9,3İstismar yokEPSS %1intrado · 911 emergency gateway23 Nis 2026
- CVE-2025-3051537İzleyin
CyberData 011209 SIP Emergency Intercom Path Traversal
KritikCVSS 9,3İstismar yokEPSS %1cyberdata · 011209 sip emergency intercom firmware9 Haz 2025
- CVE-2024-4050537İzleyin
Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi compo
KritikCVSS 9,3İstismar yokEPSS %0dlink · dap-1650 firmware16 Tem 2024
- CVE-2023-4669036İzleyin
Delta Electronics InfraSuite Device Master Path Traversal
YüksekCVSS 8,8İstismar yokEPSS %2deltaww · infrasuite device master30 Kas 2023
- CVE-2024-2157536İzleyin
ComfyUI-Impact-Pack is vulnerable to Path Traversal.
KritikCVSS 9,2İstismar yokEPSS %1ltdrdata · comfyui-impact-pack12 Ara 2024
- CVE-2026-1371636İzleyin
Path Traversal: '.../...//' in Crafty Controller
KritikCVSS 9,1İstismar yokEPSS %1craftycontrol · crafty controller11 Ağu 2026
- CVE-2026-4012836İzleyin
Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)
KritikCVSS 9,0İstismar yokEPSS %1sap_se · sap netweaver application server java (web container)8 Haz 2026