Falhas do tipo CWE-22

4.836 resultados
CVE-2026-49506HIGHDell Wyse Management Suite, versions prior to WMS 5.5 HF1, contain an Improper Limitation of a Pathname to a Restricted Directory ('Path TraEPSS 0.5%CVE-2026-11419CRITICALPath Traversal in Altium Enterprise Server Vault UploadController Allows Arbitrary File WriteEPSS 0.5%CVE-2025-8132MEDIUMyanyutao0402 ChanCMS utils.js delfile path traversalEPSS 0.5%CVE-2026-33686HIGHSharp is Vulnerable to Path Traversal via Unsanitized Extension in FileUtilEPSS 0.5%CVE-2023-3331—Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG18EPSS 0.5%CVE-2025-60786HIGHA Zip Slip vulnerability in the import a Project component of iceScrum v7.54 Pro On-prem allows attackers to execute arbitrary code via uploEPSS 0.5%CVE-2024-43797MEDIUMPath Traversal in audiobookshelfEPSS 0.5%CVE-2024-49286CRITICALWordPress SSV Events plugin <= 3.2.7 - Local File Inclusion to RCE vulnerabilityEPSS 0.5%CVE-2025-27085MEDIUMArbitrary File Download Vulnerabilities in Web-Based Management Interface of AOS-10 GW and AOS-8 Controller/Mobility ConductorEPSS 0.5%CVE-2024-41792CRITICALA vulnerability has been identified in SENTRON 7KT PAC1260 Data Manager (All versions). The web interface of affected devices contains a patEPSS 0.5%CVE-2026-33466HIGHImproper Limitation of a Pathname to a Restricted Directory in Logstash Leading to Arbitrary File WriteEPSS 0.5%CVE-2024-20532MEDIUMCisco Identity Services Engine Arbitrary File Read and Delete VulnerabilityEPSS 0.5%CVE-2024-44014CRITICALWordPress Vmax Project Manager plugin <= 1.0 - Local File Inclusion to RCE vulnerabilityEPSS 0.5%CVE-2025-27409HIGHJoplin Server Vulnerable to Path TraversalEPSS 0.5%CVE-2026-45171HIGHIdira Privileged Session Manager (PSM): Potential Code Execution due to an Incomplete Input ValidationEPSS 0.5%CVE-2023-47222CRITICALMedia Streaming add-onEPSS 0.5%CVE-2026-2683MEDIUMTsinghua Unigroup Electronic Archives System downLoad.html path traversalEPSS 0.5%CVE-2019-25256HIGHVideoFlow Digital Video Protection DVP 2.10 Authenticated Directory TraversalEPSS 0.5%CVE-2025-41758HIGHArbitrary Write with wwwupload.cgiEPSS 0.5%CVE-2026-41448CRITICALAdGuard Home Authentication Bypass via Path Traversal in Admin-Token CookieEPSS 0.5%