Falhas do tipo CWE-24

111 resultados
CVE-2022-38129HIGHA path traversal vulnerability exists in the com.keysight.tentacle.licensing.LicenseManager.addLicenseFile() method in the Keysight Sensor MEPSS 19.8%CVE-2026-39813CRITICALA path traversal: '../filedir' vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.5, FortiSandbox 4.4.0 through 4.4.8 may allow attackEPSS 16.7%CVE-2025-60344HIGHA path traversal (directory traversal) vulnerability in D-Link DSR series routers allows unauthenticated remote attackers to manipulate inpuEPSS 10.3%CVE-2023-1800HIGHsjqzhang go-fastdfs File Upload uploa upload path traversalEPSS 3.5%CVE-2024-6746MEDIUMNaiboWang EasySpider HTTP GET Request server.js path traversalEPSS 3.3%CVE-2021-33036Apache Hadoop Privilege escalation vulnerabilityEPSS 3.2%CVE-2020-9708MEDIUMGHSL-2020-133: Insufficient validation of user input in resolveRepositoryPath functionEPSS 2.9%CVE-2025-54769HIGHKL-001-2025-016: Xorux LPAR2RRD File Upload Directory TraversalEPSS 2.9%CVE-2025-59342MEDIUMesm.sh writes arbitrary files via path traversal in `X-Zone-Id` headerEPSS 2.8%CVE-2024-43035MEDIUMFonoster 0.5.5 before 0.6.1 allows ../ directory traversal to read arbitrary files via the /sounds/:file or /tts/:file VoiceServer endpoint.EPSS 2.4%CVE-2025-47423MEDIUMPersonal Weather Station Dashboard 12_lts allows unauthenticated remote attackers to read arbitrary files via ../ directory traversal in theEPSS 2.1%CVE-2025-27920HIGHOutput Messenger before 2.0.63 was vulnerable to a directory traversal attack through improper file path handling. By using ../ sequences inEPSS 1.8%KEVCVE-2024-1459MEDIUMUndertow: directory traversal vulnerabilityEPSS 1.7%CVE-2025-59049HIGHMockoon has a Path Traversal and LFI in the static file serving endpointEPSS 1.7%CVE-2022-20656MEDIUMCisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Path Traversal VulnerabilityEPSS 1.6%CVE-2021-29466MEDIUMPath Traversal at Discord-Recon .recon Command PathEPSS 1.6%CVE-2025-43919MEDIUMGNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at EPSS 1.4%CVE-2020-8567MEDIUMKubernetes Secrets Store CSI Driver plugin directory traversalsEPSS 1.4%CVE-2021-21706MEDIUMZipArchive::extractTo may extract outside of destination dirEPSS 1.3%CVE-2020-8568MEDIUMKubernetes Secrets Store CSI Driver sync/rotate directory traversalEPSS 1.3%