CWE-26 · 13 kayıt
Path Traversal: '/dir/../filename'
Bu sınıftaki CVE’ler
13 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-28064İstismar yok | Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated filCWE-26 | Kritik9,8 | — | %0,9 | 18 May 2024 |
35İzleyin | CVE-2024-29466İstismar yok | Directory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code via the FileTransUtil.CWE-26 | Yüksek8,8 | — | %1,0 | 30 Nis 2024 |
35İzleyin | CVE-2026-76317İstismar yok | Path Traversal through the Lookup Configuration REST API in Splunk Enterprisesplunk · splunk · CWE-26 | Yüksek8,8 | — | %0,6 | 19 Ağu 2026 |
33İzleyin | CVE-2021-34762İstismar yok | Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerabilitycisco · firepower management center virtual appliance · CWE-26 | Yüksek8,1 | — | %2,0 | 27 Eki 2021 |
33İzleyin | CVE-2025-53908İstismar yok | RomM vulnerable to Authenticated Path Traversalrommapp · romm · CWE-26 | Yüksek8,3 | — | %0,5 | 16 Tem 2025 |
31İzleyin | CVE-2021-42021İstismar yok | A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video Dsiemens · siveillance video management software 2019 r1 · CWE-26 | Yüksek7,5 | — | %1,7 | 9 Kas 2021 |
31İzleyin | CVE-2024-25466Kavram kanıtı | Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arbreact-native-documents · document picker · CWE-26 | Yüksek7,8 | — | %0,5 | 16 Şub 2024 |
30İzleyin | CVE-2024-31551İstismar yok | Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via ccmseasy · cmseasy · CWE-26 | Yüksek7,5 | — | %0,7 | 26 Nis 2024 |
27İzleyin | CVE-2024-20345İstismar yok | A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct dicisco · appdynamics controller · CWE-26 | Orta6,5 | — | %2,2 | 6 Mar 2024 |
26İzleyin | CVE-2024-5865İstismar yok | Arbitrary File Reading in Centrify PASdelinea · privileged access service · CWE-26 | Orta6,5 | — | %0,5 | 2 Tem 2024 |
26İzleyin | CVE-2022-45133İstismar yok | Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins.mahara · mahara · CWE-26 | Orta6,5 | — | %0,3 | 22 Ağu 2025 |
21İzleyin | CVE-2026-46747İstismar yok | A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).siemens · sinec ins · CWE-26 | Orta5,3 | — | %0,4 | 9 Haz 2026 |
17İzleyin | CVE-2024-5866İstismar yok | Arbitrary Directory Listing in Centrify PASdelinea · privileged access service · CWE-26 | Orta4,3 | — | %0,4 | 2 Tem 2024 |
- CVE-2024-2806439İzleyin
Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated fil
KritikCVSS 9,8İstismar yokEPSS %118 May 2024
- CVE-2024-2946635İzleyin
Directory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code via the FileTransUtil.
YüksekCVSS 8,8İstismar yokEPSS %130 Nis 2024
- CVE-2026-7631735İzleyin
Path Traversal through the Lookup Configuration REST API in Splunk Enterprise
YüksekCVSS 8,8İstismar yokEPSS %1splunk · splunk19 Ağu 2026
- CVE-2021-3476233İzleyin
Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability
YüksekCVSS 8,1İstismar yokEPSS %2cisco · firepower management center virtual appliance27 Eki 2021
- CVE-2025-5390833İzleyin
RomM vulnerable to Authenticated Path Traversal
YüksekCVSS 8,3İstismar yokEPSS %0rommapp · romm16 Tem 2025
- CVE-2021-4202131İzleyin
A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1), Siveillance Video DLNA Server (2019 R2), Siveillance Video D
YüksekCVSS 7,5İstismar yokEPSS %2siemens · siveillance video management software 2019 r19 Kas 2021
- CVE-2024-2546631İzleyin
Directory Traversal vulnerability in React Native Document Picker before v.9.1.1 and fixed in v.9.1.1 allows a local attacker to execute arb
YüksekCVSS 7,8Kavram kanıtıEPSS %1react-native-documents · document picker16 Şub 2024
- CVE-2024-3155130İzleyin
Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via c
YüksekCVSS 7,5İstismar yokEPSS %1cmseasy · cmseasy26 Nis 2024
- CVE-2024-2034527İzleyin
A vulnerability in the file upload functionality of Cisco AppDynamics Controller could allow an authenticated, remote attacker to conduct di
OrtaCVSS 6,5İstismar yokEPSS %2cisco · appdynamics controller6 Mar 2024
- CVE-2024-586526İzleyin
Arbitrary File Reading in Centrify PAS
OrtaCVSS 6,5İstismar yokEPSS %0delinea · privileged access service2 Tem 2024
- CVE-2022-4513326İzleyin
Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins.
OrtaCVSS 6,5İstismar yokEPSS %0mahara · mahara22 Ağu 2025
- CVE-2026-4674721İzleyin
A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).
OrtaCVSS 5,3İstismar yokEPSS %0siemens · sinec ins9 Haz 2026
- CVE-2024-586617İzleyin
Arbitrary Directory Listing in Centrify PAS
OrtaCVSS 4,3İstismar yokEPSS %0delinea · privileged access service2 Tem 2024