CWE-36 · 134 kayıt
Absolute Path Traversal
Bu sınıftaki CVE’ler
134 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
92Hemen | CVE-2024-48248Silahlaştırılmış | NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lnakivo · backup \& replication director · CWE-36 | Yüksek8,6 | KEV | %94,4 | 4 Mar 2025 |
90Hemen | CVE-2024-13159Silahlaştırılmış | Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteivanti · endpoint manager · CWE-36 | Yüksek7,5 | KEV | %100,0 | 14 Oca 2025 |
90Hemen | CVE-2018-20250Silahlaştırılmış | In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (inrarlab · winrar · CWE-36 | Yüksek7,8 | KEV | %96,0 | 5 Şub 2019 |
87Hemen | CVE-2024-13160Silahlaştırılmış | Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteivanti · endpoint manager · CWE-36 | Yüksek7,5 | KEV | %91,2 | 14 Oca 2025 |
87Hemen | CVE-2024-13161Silahlaştırılmış | Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remoteivanti · endpoint manager · CWE-36 | Yüksek7,5 | KEV | %90,1 | 14 Oca 2025 |
60Bu hafta | CVE-2023-3765Kavram kanıtı | Absolute Path Traversal in mlflow/mlflowlfprojects · mlflow · CWE-36 | Kritik10,0 | — | %67,6 | 18 Tem 2023 |
47Planlayın | CVE-2025-34392İstismar yok | Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCEbarracuda · rmm · CWE-36 | Kritik10,0 | — | %24,7 | 10 Ara 2025 |
44Planlayın | CVE-2025-0851Kavram kanıtı | Path traversal issue in Deep Java Libraryaws · deepjavalibrary · CWE-36 | Kritik9,3 | — | %23,3 | 29 Oca 2025 |
40Planlayın | CVE-2025-57790Silahlaştırılmış | Path Traversal Vulnerabilitycommvault · commvault · CWE-36 | Yüksek8,7 | — | %19,4 | 20 Ağu 2025 |
40Planlayın | CVE-2024-20401İstismar yok | A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote cisco · secure email gateway · CWE-36 | Kritik9,8 | — | %2,3 | 17 Tem 2024 |
40Planlayın | CVE-2026-57211İstismar yok | RabbitMQ: UNC SSRF affecting the management UI on Windowsbroadcom · rabbitmq server · CWE-36 | Kritik10,0 | — | %0,6 | 10 Tem 2026 |
39İzleyin | CVE-2024-9924İstismar yok | Hgiga OAKlouds - Arbitrary File Read And Deletehgiga · oaklouds · CWE-36 | Kritik9,8 | — | %0,8 | 14 Eki 2024 |
39İzleyin | CVE-2026-68487İstismar yok | Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.webpros · plesk · CWE-36 | Kritik9,9 | — | %0,6 | 10 Eyl 2026 |
37İzleyin | CVE-2024-51549İstismar yok | Absolute Path Traversalabb · aspect-ent-12 firmware · CWE-36 | Kritik9,3 | — | %0,5 | 5 Ara 2024 |
36İzleyin | CVE-2024-29053İstismar yok | Microsoft Defender for IoT Remote Code Execution Vulnerabilitymicrosoft · defender for iot · CWE-36 | Yüksek8,8 | — | %3,2 | 9 Nis 2024 |
36İzleyin | CVE-2024-21323İstismar yok | Microsoft Defender for IoT Remote Code Execution Vulnerabilitymicrosoft · defender for iot · CWE-36 | Yüksek8,8 | — | %3,2 | 9 Nis 2024 |
36İzleyin | CVE-2024-47883İstismar yok | Butterfly has path/URL confusion in resource handling leading to multiple weaknessesopenrefine · butterfly · CWE-36 | Kritik9,1 | — | %1,6 | 24 Eki 2024 |
36İzleyin | CVE-2024-2362İstismar yok | Path Traversal in parisneo/lollms-webuilollms · lollms web ui · CWE-36 | Kritik9,1 | — | %1,2 | 6 Haz 2024 |
36İzleyin | CVE-2024-10833İstismar yok | Arbitrary File Write in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-36 | Kritik9,1 | — | %0,8 | 20 Mar 2025 |
36İzleyin | CVE-2024-10831İstismar yok | Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gptdbgpt · db-gpt · CWE-36 | Kritik9,1 | — | %0,8 | 20 Mar 2025 |
36İzleyin | CVE-2026-47606İstismar yok | NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal.nvidia · triton inference server · CWE-36 | Kritik9,1 | — | %0,7 | 18 Ağu 2026 |
35İzleyin | CVE-2022-20958İstismar yok | A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attaccisco · broadworks commpilot application · CWE-36 | Yüksek8,8 | — | %1,0 | 4 Kas 2022 |
35İzleyin | CVE-2026-89009İstismar yok | WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_serverwavlink technology · wn535m1 · CWE-36 | Yüksek8,8 | — | %1,0 | 11 Eyl 2026 |
35İzleyin | CVE-2024-8501İstismar yok | Arbitrary File Download in modelscope/agentscopemodelscope · agentscope · CWE-36 | Yüksek8,8 | — | %1,0 | 20 Mar 2025 |
35İzleyin | CVE-2024-45291İstismar yok | Path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled in PHPSpreadsheetphpoffice · phpspreadsheet · CWE-36 | Yüksek8,8 | — | %0,9 | 7 Eki 2024 |
- CVE-2024-4824892Hemen
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may l
YüksekCVSS 8,6KEVSilahlaştırılmışEPSS %94nakivo · backup \& replication director4 Mar 2025
- CVE-2024-1315990Hemen
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %100ivanti · endpoint manager14 Oca 2025
- CVE-2018-2025090Hemen
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %96rarlab · winrar5 Şub 2019
- CVE-2024-1316087Hemen
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %91ivanti · endpoint manager14 Oca 2025
- CVE-2024-1316187Hemen
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote
YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %90ivanti · endpoint manager14 Oca 2025
- CVE-2023-376560Bu hafta
Absolute Path Traversal in mlflow/mlflow
KritikCVSS 10,0Kavram kanıtıEPSS %68lfprojects · mlflow18 Tem 2023
- CVE-2025-3439247Planlayın
Barracuda RMM < 2025.1.1 Service Center Absolute Path Traversal RCE
KritikCVSS 10,0İstismar yokEPSS %25barracuda · rmm10 Ara 2025
- CVE-2025-085144Planlayın
Path traversal issue in Deep Java Library
KritikCVSS 9,3Kavram kanıtıEPSS %23aws · deepjavalibrary29 Oca 2025
- CVE-2025-5779040Planlayın
Path Traversal Vulnerability
YüksekCVSS 8,7SilahlaştırılmışEPSS %19commvault · commvault20 Ağu 2025
- CVE-2024-2040140Planlayın
A vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote
KritikCVSS 9,8İstismar yokEPSS %2cisco · secure email gateway17 Tem 2024
- CVE-2026-5721140Planlayın
RabbitMQ: UNC SSRF affecting the management UI on Windows
KritikCVSS 10,0İstismar yokEPSS %1broadcom · rabbitmq server10 Tem 2026
- CVE-2024-992439İzleyin
Hgiga OAKlouds - Arbitrary File Read And Delete
KritikCVSS 9,8İstismar yokEPSS %1hgiga · oaklouds14 Eki 2024
- CVE-2026-6848739İzleyin
Path traversal in Plesk's Backup Manager causes arbitrary file write as root by an authenticated customer.
KritikCVSS 9,9İstismar yokEPSS %1webpros · plesk10 Eyl 2026
- CVE-2024-5154937İzleyin
Absolute Path Traversal
KritikCVSS 9,3İstismar yokEPSS %1abb · aspect-ent-12 firmware5 Ara 2024
- CVE-2024-2905336İzleyin
Microsoft Defender for IoT Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %3microsoft · defender for iot9 Nis 2024
- CVE-2024-2132336İzleyin
Microsoft Defender for IoT Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %3microsoft · defender for iot9 Nis 2024
- CVE-2024-4788336İzleyin
Butterfly has path/URL confusion in resource handling leading to multiple weaknesses
KritikCVSS 9,1İstismar yokEPSS %2openrefine · butterfly24 Eki 2024
- CVE-2024-236236İzleyin
Path Traversal in parisneo/lollms-webui
KritikCVSS 9,1İstismar yokEPSS %1lollms · lollms web ui6 Haz 2024
- CVE-2024-1083336İzleyin
Arbitrary File Write in eosphoros-ai/db-gpt
KritikCVSS 9,1İstismar yokEPSS %1dbgpt · db-gpt20 Mar 2025
- CVE-2024-1083136İzleyin
Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt
KritikCVSS 9,1İstismar yokEPSS %1dbgpt · db-gpt20 Mar 2025
- CVE-2026-4760636İzleyin
NVIDIA Triton Inference Server for Linux contains a vulnerability where an attacker could cause an absolute path traversal.
KritikCVSS 9,1İstismar yokEPSS %1nvidia · triton inference server18 Ağu 2026
- CVE-2022-2095835İzleyin
A vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attac
YüksekCVSS 8,8İstismar yokEPSS %1cisco · broadworks commpilot application4 Kas 2022
- CVE-2026-8900935İzleyin
WAVLINK WN535M1/WN535M3 Unauthenticated Arbitrary File Write via sync_server
YüksekCVSS 8,8İstismar yokEPSS %1wavlink technology · wn535m111 Eyl 2026
- CVE-2024-850135İzleyin
Arbitrary File Download in modelscope/agentscope
YüksekCVSS 8,8İstismar yokEPSS %1modelscope · agentscope20 Mar 2025
- CVE-2024-4529135İzleyin
Path traversal and Server-Side Request Forgery in HTML writer when embedding images is enabled in PHPSpreadsheet
YüksekCVSS 8,8İstismar yokEPSS %1phpoffice · phpspreadsheet7 Eki 2024