Skip to content
Noroxi

CWE-35 · 179 records

Path Traversal: '.../...//'

CVEs in this class

180 records

  • CVE-2025-8088
    91Now

    Path traversal vulnerability in WinRAR

    HighCVSS 8.4KEVWeaponizedEPSS 94%

    rarlab · winrarAug 8, 2025

  • CVE-2024-2863
    58Plan

    Path traversal via file upload on LG LED Assistant

    CriticalCVSS 9.8Proof of conceptEPSS 64%

    lg · lg led assistantMar 25, 2024

  • CVE-2020-27130
    56Plan

    Cisco Security Manager Path Traversal Vulnerability

    CriticalCVSS 9.1No exploitEPSS 66%

    cisco · security managerNov 17, 2020

  • CVE-2023-32714
    45Plan

    Path Traversal in Splunk App for Lookup File Editing

    HighCVSS 8.1No exploitEPSS 43%

    splunk · splunkJun 1, 2023

  • CVE-2025-53417
    41Plan

    File Parsing Deserialization of Untrusted Data in DTM Soft

    CriticalCVSS 9.3No exploitEPSS 14%

    delta electronics · diaviewAug 4, 2025

  • CVE-2018-3744
    40Plan

    The html-pages node module contains a path traversal vulnerabilities that allows an attacker to read any file from the server with cURL.

    CriticalCVSS 9.8No exploitEPSS 2%

    html-pages project · html-pagesMay 29, 2018

  • CVE-2025-41723
    39Monitor

    Sauter: Directory Traversal in importFile SOAP Method

    CriticalCVSS 9.8No exploitEPSS 1%

    sauter · modulo 6 devices modu680-asOct 22, 2025

  • CVE-2026-45495
    39Monitor

    Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    microsoft · edge chromiumMay 18, 2026

  • CVE-2026-59115
    39Monitor

    Microsoft Entra Provisioning Service Elevation of Privilege Vulnerability

    CriticalCVSS 9.9No exploitEPSS 1%

    microsoft · entra provisioning serviceAug 6, 2026

  • CVE-2025-42937
    39Monitor

    Directory Traversal vulnerability in SAP Print Service

    CriticalCVSS 9.8No exploitEPSS 1%

    sap_se · sap print serviceOct 13, 2025

  • CVE-2025-49297
    39Monitor

    WordPress Grill and Chow theme <= 1.6 - Local File Inclusion Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    qodeinteractive · grill and chowJun 9, 2025

  • CVE-2025-49295
    39Monitor

    WordPress MediClinic theme <= 2.1 - Local File Inclusion Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    qodeinteractive · mediclinicJun 9, 2025

  • CVE-2025-49296
    39Monitor

    WordPress GrandPrix theme <= 1.6 - Local File Inclusion Vulnerability

    CriticalCVSS 9.8No exploitEPSS 1%

    qodeinteractive · grandprixJun 9, 2025

  • CVE-2026-52703
    38Monitor

    WordPress FastDup plugin <= 2.7.2 - Path Traversal vulnerability

    CriticalCVSS 9.6No exploitEPSS 0%

    ninja team · fastdupJun 15, 2026

  • GHSA-phv5-334h-mxcw
    38Monitor

    motionEye Partial Authentication Bypass: Unauthenticated Admin Credential Theft via Path Traversal

    CriticalCVSS 9.5No exploit

    PyPI · motioneyeJun 23, 2026

  • CVE-2025-68428
    37Monitor

    jsPDF has Local File Inclusion/Path Traversal vulnerability

    CriticalCVSS 9.2Proof of conceptEPSS 2%

    parall · jspdfJan 5, 2026

  • CVE-2025-59793
    37Monitor

    Rocket TRUfusion Enterprise through 7.10.5 exposes the endpoint at /axis2/services/WsPortalV6UpDwAxis2Impl to authenticated users to be able

    CriticalCVSS 9.4No exploitEPSS 1%

    rocketsoftware · trufusion enterpriseFeb 17, 2026

  • CVE-2024-56045
    37Monitor

    WordPress WPLMS plugin < 1.9.9.5 - Unauthenticated Arbitrary Directory Deletion vulnerability

    CriticalCVSS 9.3No exploitEPSS 1%

    vibethemes · wordpress learning management systemDec 31, 2024

  • CVE-2026-6074
    37Monitor

    Path traversal: '.../...//' in Intrado 911 Emergency Gateway (EGW)

    CriticalCVSS 9.3No exploitEPSS 1%

    intrado · 911 emergency gatewayApr 23, 2026

  • CVE-2025-30515
    37Monitor

    CyberData 011209 SIP Emergency Intercom Path Traversal

    CriticalCVSS 9.3No exploitEPSS 1%

    cyberdata · 011209 sip emergency intercom firmwareJun 9, 2025

  • CVE-2024-40505
    37Monitor

    Directory Traversal vulnerability in D-Link DAP-1650 Firmware v.1.03 allows a local attacker to escalate privileges via the hedwig.cgi compo

    CriticalCVSS 9.3No exploitEPSS 0%

    dlink · dap-1650 firmwareJul 16, 2024

  • CVE-2023-46690
    36Monitor

    Delta Electronics InfraSuite Device Master Path Traversal

    HighCVSS 8.8No exploitEPSS 2%

    deltaww · infrasuite device masterNov 30, 2023

  • CVE-2024-21575
    36Monitor

    ComfyUI-Impact-Pack is vulnerable to Path Traversal.

    CriticalCVSS 9.2No exploitEPSS 1%

    ltdrdata · comfyui-impact-packDec 12, 2024

  • CVE-2026-13716
    36Monitor

    Path Traversal: '.../...//' in Crafty Controller

    CriticalCVSS 9.1No exploitEPSS 1%

    craftycontrol · crafty controllerAug 11, 2026

  • CVE-2026-40128
    36Monitor

    Directory Traversal vulnerability in SAP NetWeaver Application Server Java (Web Container)

    CriticalCVSS 9.0No exploitEPSS 1%

    sap_se · sap netweaver application server java (web container)Jun 8, 2026

All vulnerability classes