Vulnerabilities (CVE)

Filtered by CWE-22
Total 7313 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2015-2996 1 Sysaid 1 Sysaid 2025-04-12 8.5 HIGH N/A
Multiple directory traversal vulnerabilities in SysAid Help Desk before 15.2 allow remote attackers to (1) read arbitrary files via a .. (dot dot) in the fileName parameter to getGfiUpgradeFile or (2) cause a denial of service (CPU and memory consumption) via a .. (dot dot) in the fileName parameter to calculateRdsFileChecksum.
CVE-2015-2166 1 Ericsson 1 Drutt Mobile Service Delivery Platform 2025-04-12 5.0 MEDIUM N/A
Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the default URI.
CVE-2016-5664 1 Accellion 1 Kiteworks Appliance 2025-04-12 5.0 MEDIUM 4.3 MEDIUM
Directory traversal vulnerability on Accellion Kiteworks appliances before kw2016.03.00 allows remote attackers to read files via a crafted URI.
CVE-2015-5662 1 Avast 1 Avast Antivirus 2025-04-12 6.4 MEDIUM N/A
Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry in a ZIP archive.
CVE-2016-4004 1 Dell 1 Openmanage Server Administrator 2025-04-12 4.0 MEDIUM 4.9 MEDIUM
Directory traversal vulnerability in Dell OpenManage Server Administrator (OMSA) 8.2 allows remote authenticated administrators to read arbitrary files via a ..\ (dot dot backslash) in the file parameter to ViewFile.
CVE-2016-5092 1 Fortinet 1 Fortiweb 2025-04-12 4.0 MEDIUM 4.9 MEDIUM
Directory traversal vulnerability in Fortinet FortiWeb before 5.5.3 allows remote authenticated administrators with read and write privileges to read arbitrary files by leveraging the autolearn feature.
CVE-2014-6154 3 Ibm, Linux, Microsoft 3 Optim Performance Manager, Linux Kernel, Windows 2025-04-12 7.8 HIGH N/A
Directory traversal vulnerability in IBM Optim Performance Manager for DB2 4.1.0.1 through 4.1.1 on Linux, UNIX, and Windows and IBM InfoSphere Optim Performance Manager for DB2 5.1 through 5.3.1 on Linux, UNIX, and Windows allows remote attackers to access arbitrary files via a .. (dot dot) in a URL.
CVE-2014-1715 4 Apple, Google, Linux and 1 more 4 Mac Os X, Chrome, Linux Kernel and 1 more 2025-04-12 7.5 HIGH N/A
Directory traversal vulnerability in Google Chrome before 33.0.1750.152 on OS X and Linux and before 33.0.1750.154 on Windows has unspecified impact and attack vectors.
CVE-2015-4415 1 Magnifica Webscripts 1 Anima Gallery 2025-04-12 5.0 MEDIUM N/A
Multiple directory traversal vulnerabilities in func.php in Magnifica Webscripts Anima Gallery 2.6 allow remote attackers to include and execute arbitrary local files via a .. (dot dot) in the (1) theme or (2) lang cookie parameter to AnimaGallery/.
CVE-2013-6975 1 Cisco 1 Nx-os 2025-04-12 4.6 MEDIUM N/A
Directory traversal vulnerability in the command-line interface in Cisco NX-OS 6.2(2a) and earlier allows local users to read arbitrary files via unspecified input, aka Bug ID CSCul05217.
CVE-2016-1429 1 Cisco 4 Rv180 Vpn Router, Rv180 Vpn Router Firmware, Rv180w Wireless-n Multifunction Vpn Router and 1 more 2025-04-12 7.8 HIGH 7.5 HIGH
Directory traversal vulnerability in the web interface on Cisco RV180 and RV180W devices allows remote attackers to read arbitrary files via a crafted HTTP request, aka Bug ID CSCuz43023.
CVE-2015-5688 1 Geddyjs 1 Geddy 2025-04-12 5.0 MEDIUM N/A
Directory traversal vulnerability in lib/app/index.js in Geddy before 13.0.8 for Node.js allows remote attackers to read arbitrary files via a ..%2f (dot dot encoded slash) in the PATH_INFO to the default URI.
CVE-2013-5655 1 Xiaowen Huang 1 Yingzhi Python Programming Language 2025-04-12 6.4 MEDIUM N/A
Directory traversal vulnerability in the FTP server in YingZhi Python Programming Language for iOS 1.9 allows remote attackers to read and possibly write arbitrary files via a .. (dot dot) in the default URI.
CVE-2015-1193 1 Pax Project 1 Pax 2025-04-12 5.0 MEDIUM N/A
Multiple directory traversal vulnerabilities in pax 1:20140703 allow remote attackers to write to arbitrary files via a (1) full pathname or (2) .. (dot dot) in an archive.
CVE-2015-0867 1 Synck Graphica 1 Download Log Cgi 2025-04-12 5.0 MEDIUM N/A
Directory traversal vulnerability in SYNCK GRAPHICA Download Log CGI 3.0 and earlier allows remote attackers to read arbitrary files via a crafted filename.
CVE-2015-7602 1 Bisonware 1 Bisonftp 2025-04-12 7.8 HIGH N/A
Directory traversal vulnerability in BisonWare BisonFTP 3.5 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in a RETR command.
CVE-2015-0171 1 Ibm 1 Security Siteprotector System 2025-04-12 5.5 MEDIUM N/A
Directory traversal vulnerability in IBM Security SiteProtector System 3.0 before 3.0.0.7, 3.1 before 3.1.0.4, and 3.1.1 before 3.1.1.2 allows remote authenticated users to write to arbitrary files via unspecified vectors.
CVE-2014-1506 3 Google, Mozilla, Oracle 3 Android, Firefox, Solaris 2025-04-12 6.4 MEDIUM N/A
Directory traversal vulnerability in Android Crash Reporter in Mozilla Firefox before 28.0 on Android allows attackers to trigger the transmission of local files to arbitrary servers, or cause a denial of service (application crash), via a crafted application that specifies Android Crash Reporter arguments.
CVE-2015-0911 1 Dounokouno 1 Transmitmail 2025-04-12 5.0 MEDIUM N/A
Directory traversal vulnerability in TAGAWA Takao TransmitMail 1.0.11 through 1.5.8 allows remote attackers to read arbitrary files via vectors related to attachment handling.
CVE-2014-4940 1 Tera Charts Plugin Project 1 Tera-charts 2025-04-12 5.0 MEDIUM N/A
Multiple directory traversal vulnerabilities in Tera Charts (tera-charts) plugin 0.1 for WordPress allow remote attackers to read arbitrary files via a .. (dot dot) in the fn parameter to (1) charts/treemap.php or (2) charts/zoomabletreemap.php.