CWE-26 · 14 records
Path Traversal: '/dir/../filename'
CVEs in this class
14 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
39Monitor | CVE-2024-28064No exploit | Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated filCWE-26 | Critical9.8 | — | 0.9% | May 18, 2024 |
36Monitor | CVE-2026-15896No exploit | Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameterwebrehab · super forms – drag & drop form builder · CWE-26 | Critical9.1 | — | 0.9% | Oct 2, 2026 |
35Monitor | CVE-2024-29466No exploit | Directory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code via the FileTransUtil.CWE-26 | High8.8 | — | 1.0% | Apr 30, 2024 |
35Monitor | CVE-2026-76317No exploit | Path Traversal through the Lookup Configuration REST API in Splunk Enterprisesplunk · splunk · CWE-26 | High8.8 | — | 0.6% | Aug 19, 2026 |
33Monitor | CVE-2021-34762No exploit | Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerabilitycisco · firepower management center virtual appliance · CWE-26 | High8.1 | — | 2.0% | Oct 27, 2021 |
33Monitor | CVE-2025-53908No exploit | RomM vulnerable to Authenticated Path Traversalrommapp · romm · CWE-26 | High8.3 | — | 0.5% | Jul 16, 2025 |
31Monitor | CVE-2021-42021No exploit | A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video Dsiemens · siveillance video management software 2019 r1 · CWE-26 | High7.5 | — | 1.7% | Nov 9, 2021 |
31Monitor | CVE-2024-25466Proof of concept | Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbreact-native-documents · document picker · CWE-26 | High7.8 | — | 0.5% | Feb 16, 2024 |
30Monitor | CVE-2024-31551No exploit | Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via ccmseasy · cmseasy · CWE-26 | High7.5 | — | 0.7% | Apr 26, 2024 |
27Monitor | CVE-2024-20345No exploit | A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct dicisco · appdynamics controller · CWE-26 | Medium6.5 | — | 2.2% | Mar 6, 2024 |
26Monitor | CVE-2024-5865No exploit | Arbitrary File Reading in Centrify PASdelinea · privileged access service · CWE-26 | Medium6.5 | — | 0.5% | Jul 2, 2024 |
26Monitor | CVE-2022-45133No exploit | Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins.mahara · mahara · CWE-26 | Medium6.5 | — | 0.3% | Aug 22, 2025 |
21Monitor | CVE-2026-46747No exploit | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).siemens · sinec ins · CWE-26 | Medium5.3 | — | 0.4% | Jun 9, 2026 |
17Monitor | CVE-2024-5866No exploit | Arbitrary Directory Listing in Centrify PASdelinea · privileged access service · CWE-26 | Medium4.3 | — | 0.4% | Jul 2, 2024 |
- CVE-2024-2806439Monitor
Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated fil
CriticalCVSS 9.8No exploitEPSS 1%May 18, 2024
- CVE-2026-1589636Monitor
Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter
CriticalCVSS 9.1No exploitEPSS 1%webrehab · super forms – drag & drop form builderOct 2, 2026
- CVE-2024-2946635Monitor
Directory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code via the FileTransUtil.
HighCVSS 8.8No exploitEPSS 1%Apr 30, 2024
- CVE-2026-7631735Monitor
Path Traversal through the Lookup Configuration REST API in Splunk Enterprise
HighCVSS 8.8No exploitEPSS 1%splunk · splunkAug 19, 2026
- CVE-2021-3476233Monitor
Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability
HighCVSS 8.1No exploitEPSS 2%cisco · firepower management center virtual applianceOct 27, 2021
- CVE-2025-5390833Monitor
RomM vulnerable to Authenticated Path Traversal
HighCVSS 8.3No exploitEPSS 1%rommapp · rommJul 16, 2025
- CVE-2021-4202131Monitor
A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video D
HighCVSS 7.5No exploitEPSS 2%siemens · siveillance video management software 2019 r1Nov 9, 2021
- CVE-2024-2546631Monitor
Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arb
HighCVSS 7.8Proof of conceptEPSS 1%react-native-documents · document pickerFeb 16, 2024
- CVE-2024-3155130Monitor
Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via c
HighCVSS 7.5No exploitEPSS 1%cmseasy · cmseasyApr 26, 2024
- CVE-2024-2034527Monitor
A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct di
MediumCVSS 6.5No exploitEPSS 2%cisco · appdynamics controllerMar 6, 2024
- CVE-2024-586526Monitor
Arbitrary File Reading in Centrify PAS
MediumCVSS 6.5No exploitEPSS 0%delinea · privileged access serviceJul 2, 2024
- CVE-2022-4513326Monitor
Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins.
MediumCVSS 6.5No exploitEPSS 0%mahara · maharaAug 22, 2025
- CVE-2026-4674721Monitor
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
MediumCVSS 5.3No exploitEPSS 0%siemens · sinec insJun 9, 2026
- CVE-2024-586617Monitor
Arbitrary Directory Listing in Centrify PAS
MediumCVSS 4.3No exploitEPSS 0%delinea · privileged access serviceJul 2, 2024