Weaknesses of type CWE-22
4,827 resultsCVE-2025-14520MEDIUMbaowzh hfly delfile path traversalEPSS 0.5%CVE-2026-27018HIGHGotenberg: Chromium deny-list bypass via case-insensitive URL schemeEPSS 0.5%CVE-2024-55214MEDIUMLocal File Inclusion vulnerability in dhtmlxFileExplorer v.8.4.6 allows a remote attacker to obtain sensitive information via the file downlEPSS 0.5%CVE-2025-2817HIGHPrivilege escalation in Thunderbird UpdaterEPSS 0.5%CVE-2025-58470LOWQsync CentralEPSS 0.5%CVE-2024-47563MEDIUMA vulnerability has been identified in SINEC Security Monitor (All versions < V4.9.0). The affected application does not properly validate aEPSS 0.5%CVE-2025-68406LOWQsync CentralEPSS 0.5%CVE-2026-5962MEDIUMTenda CH22 httpd R7WebsSecurityHandlerfunction path traversalEPSS 0.5%CVE-2026-22894LOWFile Station 5EPSS 0.5%CVE-2023-35020MEDIUMIBM Sterling Control Center directory traversalEPSS 0.5%CVE-2023-37461MEDIUMPath traversal in metersphereEPSS 0.5%CVE-2022-4572MEDIUMUBI Reader UBIFS File output.py ubireader_extract_files path traversalEPSS 0.5%CVE-2026-7036MEDIUMTenda i9 HTTP R7WebsSecurityHandlerfunction path traversalEPSS 0.5%CVE-2025-15245MEDIUMD-Link DCS-850L Firmware Update Service uploadfirmware path traversalEPSS 0.5%CVE-2024-38292CRITICALIn Extreme Networks XIQ-SE before 24.2.11, due to a missing access control check, a path traversal is possible, which may lead to privilege EPSS 0.5%CVE-2022-4493MEDIUMscifio ZIP File DefaultSampleFilesService.java downloadAndUnpackResource path traversalEPSS 0.5%CVE-2024-8707MEDIUM云课网络科技有限公司 Yunke Online School System Appadmin.php downfile path traversalEPSS 0.5%CVE-2025-2032MEDIUMChestnutCMS rename renameFile path traversalEPSS 0.5%CVE-2026-2731CRITICALUnauthenticated RCE in Dynamicweb 9 and Dynamicweb 8EPSS 0.5%CVE-2024-55597MEDIUMA improper limitation of a pathname to a restricted directory ('path traversal') in Fortinet FortiWeb versions 7.0.0 through 7.6.0 allows atEPSS 0.5%