Falhas do tipo CWE-22

4.853 resultados
CVE-2025-48124HIGHWordPress Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin <= 2.4.37 - Arbitrary File Download VulnerabilityEPSS 0.5%CVE-2025-36530MEDIUMImport Path Traversal Enables Unauthorized Unsigned Plugin InstallationEPSS 0.5%CVE-2025-31050HIGHWordPress Apptha Slider Gallery plugin <= 2.5 - Arbitrary File Read vulnerabilityEPSS 0.5%CVE-2019-10152HIGHA path traversal vulnerability has been discovered in podman before version 1.4.0 in the way it handles symlinks inside containers. An attacEPSS 0.5%CVE-2025-47511MEDIUMWordPress Welcart e-Commerce plugin <= 2.11.13 - Arbitrary File Deletion VulnerabilityEPSS 0.5%CVE-2023-41290MEDIUMQuFirewallEPSS 0.5%CVE-2024-8685MEDIUMPath-Traversal vulnerability in Revolution PiEPSS 0.5%CVE-2019-25727CRITICALWordPress Plugin ad manager wd 1.0.11 Arbitrary File DownloadEPSS 0.5%CVE-2025-69128HIGHWordPress JobCareer theme <= 7.3 - Arbitrary File Deletion vulnerabilityEPSS 0.5%CVE-2026-1616HIGHosim: Path Traversal via query parameters in Nginx configurationEPSS 0.5%CVE-2026-54094HIGHFile Browser: Symlink following lets scoped users read, overwrite, and share files outside their filebrowser scopeEPSS 0.5%CVE-2023-41302—Redirection permission verification vulnerability in the home screen module. Successful exploitation of this vulnerability may cause featureEPSS 0.5%CVE-2026-7235MEDIUMErlichLiu claude-agent-sdk-master route.ts path traversalEPSS 0.5%CVE-2025-14344CRITICALMulti Uploader for Gravity Forms <= 1.1.7 - Unauthenticated Arbitrary File DeletionEPSS 0.5%CVE-2023-25606MEDIUMAn improper limitation of a pathname to a restricted directory ('Path Traversal') vulnerability [CWE-23] in FortiAnalyzer and FortiManager mEPSS 0.5%CVE-2026-39407MEDIUMHono has a middleware bypass via repeated slashes in serveStaticEPSS 0.5%CVE-2026-14327HIGHAR for WordPress <= 8.40 - Unauthenticated Arbitrary File Read via 'file' ParameterEPSS 0.5%CVE-2025-51463HIGHPath Traversal in restore_run_backup() in AIM 3.28.0 allows remote attackers to write arbitrary files to the server's filesystem via a craftEPSS 0.5%CVE-2025-62449MEDIUMMicrosoft Visual Studio Code CoPilot Chat Extension Security Feature Bypass VulnerabilityEPSS 0.5%CVE-2025-68901HIGHWordPress Anona theme <= 8.0 - Arbitrary File Deletion vulnerabilityEPSS 0.5%