CWE-36 · 138 records

Absolute Path Traversal

CVEs in this class

138 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
92Now	CVE-2024-48248Weaponized	NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lnakivo · backup \& replication director · CWE-36 pre-auth RCE Path traversal	High8.6	KEV	94.3%	Mar 4, 2025
90Now	CVE-2024-13159Weaponized	Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteivanti · endpoint manager · CWE-36 Pre-auth Path traversal	High7.5	KEV	99.9%	Jan 14, 2025
90Now	CVE-2018-20250Weaponized	In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (inrarlab · winrar · CWE-36 Path traversal	High7.8	KEV	96.0%	Feb 5, 2019
87Now	CVE-2024-13160Weaponized	Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteivanti · endpoint manager · CWE-36 Pre-auth Path traversal	High7.5	KEV	90.9%	Jan 14, 2025
87Now	CVE-2024-13161Weaponized	Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteivanti · endpoint manager · CWE-36 Pre-auth Path traversal	High7.5	KEV	89.8%	Jan 14, 2025
60This week	CVE-2023-3765Proof of concept	Absolute Path Traversal in mlflow/mlflowlfprojects · mlflow · CWE-36 Pre-auth Path traversal	Critical10.0	—	67.5%	Jul 18, 2023
47Plan	CVE-2025-57790Weaponized	Path Traversal Vulnerabilitycommvault · commvault · CWE-36 RCE Path traversal	High8.7	—	43.8%	Aug 20, 2025
47Plan	CVE-2025-34392No exploit	Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCEbarracuda · rmm · CWE-36 pre-auth RCE Path traversal	Critical10.0	—	24.7%	Dec 10, 2025
44Plan	CVE-2025-0851Proof of concept	Path traversal issue in Deep Java Libraryaws · deepjavalibrary · CWE-36 Pre-auth Path traversal	Critical9.3	—	23.2%	Jan 29, 2025
40Plan	CVE-2024-20401No exploit	A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote cisco · secure email gateway · CWE-36 pre-auth RCE Path traversal	Critical9.8	—	2.3%	Jul 17, 2024
40Plan	CVE-2026-57211No exploit	RabbitMQ: UNC SSRF affecting the management UI on Windowsbroadcom · rabbitmq server · CWE-36 Pre-auth SSRF Path traversal	Critical10.0	—	0.6%	Jul 10, 2026
39Monitor	CVE-2024-9924No exploit	Hgiga OAKlouds - Arbitrary File Read And Deletehgiga · oaklouds · CWE-36 Pre-auth Path traversal	Critical9.8	—	0.8%	Oct 14, 2024
39Monitor	CVE-2026-68487No exploit	Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.webpros · plesk · CWE-36 Path traversal	Critical9.9	—	0.6%	Sep 10, 2026
37Monitor	CVE-2024-51549No exploit	Absolute Path Traversalabb · aspect-ent-12 firmware · CWE-36 Pre-auth Path traversal	Critical9.3	—	0.5%	Dec 5, 2024
36Monitor	CVE-2024-21323No exploit	Microsoft Defender for IoT Remote Code Execution Vulnerabilitymicrosoft · defender for iot · CWE-36 RCE Path traversal	High8.8	—	3.2%	Apr 9, 2024
36Monitor	CVE-2024-29053No exploit	Microsoft Defender for IoT Remote Code Execution Vulnerabilitymicrosoft · defender for iot · CWE-36 RCE Path traversal	High8.8	—	3.2%	Apr 9, 2024
36Monitor	CVE-2024-47883No exploit	Butterfly has path/URL confusion in resource handling leading to multiple weaknessesopenrefine · butterfly · CWE-36 Pre-auth Path traversal	Critical9.1	—	1.6%	Oct 24, 2024
36Monitor	CVE-2024-2362No exploit	Path Traversal in parisneo/lollms-webuilollms · lollms web ui · CWE-36 Pre-auth Path traversal	Critical9.1	—	1.1%	Jun 6, 2024
36Monitor	CVE-2024-10831No exploit	Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-36 Pre-auth Path traversal	Critical9.1	—	0.8%	Mar 20, 2025
36Monitor	CVE-2024-10833No exploit	Arbitrary File Write in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-36 Pre-auth Path traversal	Critical9.1	—	0.8%	Mar 20, 2025
36Monitor	CVE-2026-47606No exploit	NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal.nvidia · triton inference server · CWE-36 Pre-auth Path traversal	Critical9.1	—	0.7%	Aug 18, 2026
35Monitor	CVE-2026-70297No exploit	Skype for Business Remote Code Execution Vulnerabilitymicrosoft · skype for business server 2015 cu13 · CWE-36 RCE Path traversal	High8.8	—	1.1%	Oct 13, 2026
35Monitor	CVE-2026-83784No exploit	Windows Encrypting File System (EFS) Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-36 Path traversal	High8.8	—	1.0%	Oct 13, 2026
35Monitor	CVE-2022-20958No exploit	A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attaccisco · broadworks commpilot application · CWE-36 SSRF Path traversal	High8.8	—	1.0%	Nov 4, 2022
35Monitor	CVE-2024-8501No exploit	Arbitrary File Download in modelscope/agentscopemodelscope · agentscope · CWE-36 Path traversal	High8.8	—	1.0%	Mar 20, 2025

CVE-2024-48248
92Now
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may l
HighCVSS 8.6KEVWeaponizedEPSS 94%
- pre-auth RCE
- Path traversal
nakivo · backup \& replication directorMar 4, 2025
CVE-2024-13159
90Now
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote
HighCVSS 7.5KEVWeaponizedEPSS 99%
- Pre-auth
- Path traversal
ivanti · endpoint managerJan 14, 2025
CVE-2018-20250
90Now
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in
HighCVSS 7.8KEVWeaponizedEPSS 96%
- Path traversal
rarlab · winrarFeb 5, 2019
CVE-2024-13160
87Now
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote
HighCVSS 7.5KEVWeaponizedEPSS 90%
- Pre-auth
- Path traversal
ivanti · endpoint managerJan 14, 2025
CVE-2024-13161
87Now
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote
HighCVSS 7.5KEVWeaponizedEPSS 89%
- Pre-auth
- Path traversal
ivanti · endpoint managerJan 14, 2025
CVE-2023-3765
60This week
Absolute Path Traversal in mlflow/mlflow
CriticalCVSS 10.0Proof of conceptEPSS 67%
- Pre-auth
- Path traversal
lfprojects · mlflowJul 18, 2023
CVE-2025-57790
47Plan
Path Traversal Vulnerability
HighCVSS 8.7WeaponizedEPSS 43%
- RCE
- Path traversal
commvault · commvaultAug 20, 2025
CVE-2025-34392
47Plan
Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE
CriticalCVSS 10.0No exploitEPSS 24%
- pre-auth RCE
- Path traversal
barracuda · rmmDec 10, 2025
CVE-2025-0851
44Plan
Path traversal issue in Deep Java Library
CriticalCVSS 9.3Proof of conceptEPSS 23%
- Pre-auth
- Path traversal
aws · deepjavalibraryJan 29, 2025
CVE-2024-20401
40Plan
A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote
CriticalCVSS 9.8No exploitEPSS 2%
- pre-auth RCE
- Path traversal
cisco · secure email gatewayJul 17, 2024
CVE-2026-57211
40Plan
RabbitMQ: UNC SSRF affecting the management UI on Windows
CriticalCVSS 10.0No exploitEPSS 0%
- Pre-auth
- SSRF
- Path traversal
broadcom · rabbitmq serverJul 10, 2026
CVE-2024-9924
39Monitor
Hgiga OAKlouds - Arbitrary File Read And Delete
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
- Path traversal
hgiga · oakloudsOct 14, 2024
CVE-2026-68487
39Monitor
Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.
CriticalCVSS 9.9No exploitEPSS 0%
- Path traversal
webpros · pleskSep 10, 2026
CVE-2024-51549
37Monitor
Absolute Path Traversal
CriticalCVSS 9.3No exploitEPSS 0%
- Pre-auth
- Path traversal
abb · aspect-ent-12 firmwareDec 5, 2024
CVE-2024-21323
36Monitor
Microsoft Defender for IoT Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 3%
- RCE
- Path traversal
microsoft · defender for iotApr 9, 2024
CVE-2024-29053
36Monitor
Microsoft Defender for IoT Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 3%
- RCE
- Path traversal
microsoft · defender for iotApr 9, 2024
CVE-2024-47883
36Monitor
Butterfly has path/URL confusion in resource handling leading to multiple weaknesses
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Path traversal
openrefine · butterflyOct 24, 2024
CVE-2024-2362
36Monitor
Path Traversal in parisneo/lollms-webui
CriticalCVSS 9.1No exploitEPSS 1%
- Pre-auth
- Path traversal
lollms · lollms web uiJun 6, 2024
CVE-2024-10831
36Monitor
Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Path traversal
dbgpt · db-gptMar 20, 2025
CVE-2024-10833
36Monitor
Arbitrary File Write in eosphoros-ai/db-gpt
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Path traversal
dbgpt · db-gptMar 20, 2025
CVE-2026-47606
36Monitor
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal.
CriticalCVSS 9.1No exploitEPSS 0%
- Pre-auth
- Path traversal
nvidia · triton inference serverAug 18, 2026
CVE-2026-70297
35Monitor
Skype for Business Remote Code Execution Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- RCE
- Path traversal
microsoft · skype for business server 2015 cu13Oct 13, 2026
CVE-2026-83784
35Monitor
Windows Encrypting File System (EFS) Elevation of Privilege Vulnerability
HighCVSS 8.8No exploitEPSS 1%
- Path traversal
microsoft · windows 10 version 1607Oct 13, 2026
CVE-2022-20958
35Monitor
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attac
HighCVSS 8.8No exploitEPSS 1%
- SSRF
- Path traversal
cisco · broadworks commpilot applicationNov 4, 2022
CVE-2024-8501
35Monitor
Arbitrary File Download in modelscope/agentscope
HighCVSS 8.8No exploitEPSS 1%
- Path traversal
modelscope · agentscopeMar 20, 2025

All vulnerability classes