CWE-21 · 6 records

DEPRECATED: Pathname Traversal and Equivalence Errors

CVEs in this class

6 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
41Plan	CVE-2016-1505No exploit	The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted pradicale · radicale · CWE-21 Pre-auth	Critical10.0	—	2.6%	Feb 3, 2016
39Monitor	CVE-2016-15017No exploit	fabarea media_upload UploadFileService.php getUploadedFileList pathname traversalecodev · media upload · CWE-21 Pre-auth	Critical9.8	—	0.8%	Jan 10, 2023
21Monitor	CVE-2019-11626No exploit	routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c doorgets · doorgets cms · CWE-21 Pre-auth	Medium5.3	—	1.2%	Apr 30, 2019
21Monitor	CVE-2015-10030No exploit	SUKOHI Surpass Surpass.php pathname traversalsurpass project · surpass · CWE-21 Pre-auth	Medium5.3	—	0.7%	Jan 8, 2023
20Monitor	CVE-2014-2232No exploit	Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to reinfoware · mapsuite · CWE-21 Pre-auth Path traversal	Medium5.0	—	1.3%	Dec 1, 2014
19Monitor	CVE-2024-7738No exploit	yzane vscode-markdown-pdf Markdown File pathname traversalyzane · markdown pdf · CWE-21	Medium4.8	—	0.3%	Aug 13, 2024

CVE-2016-1505
41Plan
The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted p
CriticalCVSS 10.0No exploitEPSS 2%
- Pre-auth
radicale · radicaleFeb 3, 2016
CVE-2016-15017
39Monitor
fabarea media_upload UploadFileService.php getUploadedFileList pathname traversal
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
ecodev · media uploadJan 10, 2023
CVE-2019-11626
21Monitor
routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
doorgets · doorgets cmsApr 30, 2019
CVE-2015-10030
21Monitor
SUKOHI Surpass Surpass.php pathname traversal
MediumCVSS 5.3No exploitEPSS 0%
- Pre-auth
surpass project · surpassJan 8, 2023
CVE-2014-2232
20Monitor
Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to re
MediumCVSS 5.0No exploitEPSS 1%
- Pre-auth
- Path traversal
infoware · mapsuiteDec 1, 2014
CVE-2024-7738
19Monitor
yzane vscode-markdown-pdf Markdown File pathname traversal
MediumCVSS 4.8No exploitEPSS 0%
yzane · markdown pdfAug 13, 2024