Falhas do tipo CWE-36

127 resultados
CVE-2024-20401CRITICALA vulnerability in the content scanning and message filtering features of Cisco Secure Email Gateway could allow an unauthenticated, remote EPSS 2.3%CVE-2023-2765MEDIUMWeaver OA downfile.php absolute path traversalEPSS 2.2%CVE-2024-6250HIGHAbsolute Path Traversal in parisneo/lollms-webuiEPSS 2.0%CVE-2025-53392MEDIUMIn Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directEPSS 1.8%CVE-2024-47883CRITICALButterfly has path/URL confusion in resource handling leading to multiple weaknessesEPSS 1.6%CVE-2017-7929An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The absolute path traversal vulnerability has EPSS 1.5%CVE-2021-1617MEDIUMCisco Intersight Virtual Appliance VulnerabilitiesEPSS 1.5%CVE-2021-32506MEDIUMQSAN Storage Manager - Absolute Path Traversal via GetImage functionEPSS 1.3%CVE-2021-32507MEDIUMQSAN Storage Manager - Absolute Path Traversal via FileDownload functionEPSS 1.3%CVE-2022-20791MEDIUMCisco Unified Communications Products Arbitrary File Read VulnerabilityEPSS 1.3%CVE-2022-1554MEDIUMPath Traversal due to `send_file` call in clinical-genomics/scoutEPSS 1.3%CVE-2021-30173MEDIUMJun-He Technology Ltd. Quan-Fang-Wei-Tong-Xun system - Local File InclusionEPSS 1.2%CVE-2023-34135Path Traversal vulnerability in SonicWall GMS and Analytics allows a remote authenticated attacker to read arbitrary files from the underlyiEPSS 1.2%CVE-2024-2362CRITICALPath Traversal in parisneo/lollms-webuiEPSS 1.1%CVE-2022-24877CRITICALImproper path handling in kustomization files allows path traversalEPSS 1.1%CVE-2023-32054HIGHVolume Shadow Copy Elevation of Privilege VulnerabilityEPSS 1.0%CVE-2024-10047MEDIUMDirectory Listing Vulnerability in parisneo/lollms-webuiEPSS 1.0%CVE-2022-20958HIGHA vulnerability in the web-based management interface of Cisco BroadWorks CommPilot application could allow an unauthenticated, remote attacEPSS 0.9%CVE-2024-8501HIGHArbitrary File Download in modelscope/agentscopeEPSS 0.9%CVE-2024-2548HIGHPath Traversal in parisneo/lollms-webuiEPSS 0.9%