CWE-25 · 13 records

Path Traversal: '/../filedir'

CVEs in this class

13 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
65This week	CVE-2022-20775Weaponized	Cisco SD-WAN Software Privilege Escalation Vulnerabilitycisco · catalyst sd-wan manager · CWE-25 RCE Local privilege escalation	High7.8	KEV	12.5%	Sep 30, 2022
38Monitor	CVE-2023-52138No exploit	Path traversal via crafted cpio archives in Engrampa archiversmate-desktop · engrampa · CWE-25 pre-auth RCE Path traversal	Critical9.6	—	1.7%	Feb 5, 2024
31Monitor	CVE-2022-20818Proof of concept	Cisco SD-WAN Software Privilege Escalation Vulnerabilitiescisco · sd-wan vbond orchestrator · CWE-25 RCE Local privilege escalation	High7.8	—	0.6%	Sep 30, 2022
30Monitor	CVE-2023-6118No exploit	Path Traversal in Neutron IP Cameraneutron · neu-ipb210-28 firmware · CWE-25 Pre-auth Path traversal	High7.5	—	0.8%	Nov 23, 2023
30Monitor	CVE-2023-6947No exploit	Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversalfooplugins · foogallery · CWE-25 Path traversal	High7.7	—	0.8%	Dec 10, 2024
30Monitor	CVE-2024-2442No exploit	Path Traversal vulnerability in Franklin Fueling System EVO 550/5000franklin fueling system · evo 550 · CWE-25 Pre-auth Path traversal	High7.5	—	0.7%	Mar 19, 2024
30Monitor	CVE-2023-6919No exploit	Path Traversal in VGuard IP Camera Network Recorderbiges · vg-4c1a-lru firmware · CWE-25 Pre-auth Path traversal	High7.5	—	0.6%	Jan 26, 2024
29Monitor	CVE-2025-68916No exploit	Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code exriello-ups · netman 208 · CWE-25 Path traversal	High7.2	—	2.6%	Dec 24, 2025
23Monitor	CVE-2026-68959No exploit	SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability.sky co., ltd. · skysea client view · CWE-25 RCE Path traversal	Medium5.8	—	0.7%	Aug 25, 2026
22Monitor	CVE-2025-58286No exploit	Denial of service (DoS) vulnerability in the office service.huawei · harmonyos · CWE-25 Denial of service	Medium5.5	—	0.1%	Oct 11, 2025
22Monitor	GHSA-4fg7-vxc8-qx5wNo exploit	rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary executioncrates.io · rage · CWE-25	Medium5.5	—	—	Dec 18, 2024
22Monitor	GHSA-32gq-x56h-299cNo exploit	age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary executionGo · filippo.io/age · CWE-25	Medium5.5	—	—	Dec 18, 2024
21Monitor	CVE-2026-23877No exploit	Directory Traversal & Filesystem can be accessed by a non-admin userswingmx · swing music · CWE-25 Path traversal	Medium5.3	—	0.6%	Jan 19, 2026

CVE-2022-20775
65This week
Cisco SD-WAN Software Privilege Escalation Vulnerability
HighCVSS 7.8KEVWeaponizedEPSS 12%
- RCE
- Local privilege escalation
cisco · catalyst sd-wan managerSep 30, 2022
CVE-2023-52138
38Monitor
Path traversal via crafted cpio archives in Engrampa archivers
CriticalCVSS 9.6No exploitEPSS 2%
- pre-auth RCE
- Path traversal
mate-desktop · engrampaFeb 5, 2024
CVE-2022-20818
31Monitor
Cisco SD-WAN Software Privilege Escalation Vulnerabilities
HighCVSS 7.8Proof of conceptEPSS 1%
- RCE
- Local privilege escalation
cisco · sd-wan vbond orchestratorSep 30, 2022
CVE-2023-6118
30Monitor
Path Traversal in Neutron IP Camera
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
neutron · neu-ipb210-28 firmwareNov 23, 2023
CVE-2023-6947
30Monitor
Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversal
HighCVSS 7.7No exploitEPSS 1%
- Path traversal
fooplugins · foogalleryDec 10, 2024
CVE-2024-2442
30Monitor
Path Traversal vulnerability in Franklin Fueling System EVO 550/5000
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
franklin fueling system · evo 550Mar 19, 2024
CVE-2023-6919
30Monitor
Path Traversal in VGuard IP Camera Network Recorder
HighCVSS 7.5No exploitEPSS 1%
- Pre-auth
- Path traversal
biges · vg-4c1a-lru firmwareJan 26, 2024
CVE-2025-68916
29Monitor
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code ex
HighCVSS 7.2No exploitEPSS 3%
- Path traversal
riello-ups · netman 208Dec 24, 2025
CVE-2026-68959
23Monitor
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability.
MediumCVSS 5.8No exploitEPSS 1%
- RCE
- Path traversal
sky co., ltd. · skysea client viewAug 25, 2026
CVE-2025-58286
22Monitor
Denial of service (DoS) vulnerability in the office service.
MediumCVSS 5.5No exploitEPSS 0%
- Denial of service
huawei · harmonyosOct 11, 2025
GHSA-4fg7-vxc8-qx5w
22Monitor
rage vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
MediumCVSS 5.5No exploit
crates.io · rageDec 18, 2024
GHSA-32gq-x56h-299c
22Monitor
age vulnerable to malicious plugin names, recipients, or identities causing arbitrary binary execution
MediumCVSS 5.5No exploit
Go · filippo.io/ageDec 18, 2024
CVE-2026-23877
21Monitor
Directory Traversal & Filesystem can be accessed by a non-admin user
MediumCVSS 5.3No exploitEPSS 1%
- Path traversal
swingmx · swing musicJan 19, 2026

All vulnerability classes