CWE-31 · 7 kayıt
Path Traversal: 'dir\..\..\filename'
Bu sınıftaki CVE’ler
7 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
63Bu hafta | CVE-2024-2044Silahlaştırılmış | Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4pgadmin · pgadmin 4 · CWE-31 | Kritik9,9 | — | %79,5 | 7 Mar 2024 |
36İzleyin | CVE-2024-24998İstismar yok | A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitraryivanti · avalanche · CWE-31 | Yüksek8,8 | — | %3,2 | 18 Nis 2024 |
35İzleyin | CVE-2024-41376İstismar yok | dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.dzzoffice · dzzoffice · CWE-31 | Yüksek8,8 | — | %1,0 | 5 Ağu 2024 |
31İzleyin | CVE-2024-36857Kavram kanıtı | Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.homebrew · jan · CWE-31 | Yüksek7,5 | — | %2,1 | 4 Haz 2024 |
30İzleyin | CVE-2024-35431İstismar yok | ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64.zkteco · zkbio cvsecurity · CWE-31 | Yüksek7,5 | — | %1,0 | 30 May 2024 |
30İzleyin | CVE-2019-6268İstismar yok | RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /..CWE-31 | Yüksek7,5 | — | %0,8 | 7 Mar 2024 |
30İzleyin | CVE-2024-25840İstismar yok | In the module "Account Manager | Sales Representative & Dealers | CRM" (prestasalesmanager) up to 9.0 from Presta World for PrestaShop, a guprestaworld · account manager · CWE-31 | Yüksek7,5 | — | %0,6 | 27 Şub 2024 |
- CVE-2024-204463Bu hafta
Unsafe Deserialisation and Remote Code Execution by an Authenticated user in pgAdmin 4
KritikCVSS 9,9SilahlaştırılmışEPSS %79pgadmin · pgadmin 47 Mar 2024
- CVE-2024-2499836İzleyin
A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a remote authenticated attacker to execute arbitrary
YüksekCVSS 8,8İstismar yokEPSS %3ivanti · avalanche18 Nis 2024
- CVE-2024-4137635İzleyin
dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.
YüksekCVSS 8,8İstismar yokEPSS %1dzzoffice · dzzoffice5 Ağu 2024
- CVE-2024-3685731İzleyin
Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.
YüksekCVSS 7,5Kavram kanıtıEPSS %2homebrew · jan4 Haz 2024
- CVE-2024-3543130İzleyin
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64.
YüksekCVSS 7,5İstismar yokEPSS %1zkteco · zkbio cvsecurity30 May 2024
- CVE-2019-626830İzleyin
RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /..
YüksekCVSS 7,5İstismar yokEPSS %17 Mar 2024
- CVE-2024-2584030İzleyin
In the module "Account Manager | Sales Representative & Dealers | CRM" (prestasalesmanager) up to 9.0 from Presta World for PrestaShop, a gu
YüksekCVSS 7,5İstismar yokEPSS %1prestaworld · account manager27 Şub 2024