CWE-26.

Vvveb: Path Traversal in nextRestore() and nextBackup()

• givanz Vvveb
• CWE-26

Super Forms <= 6.3.316 - Unauthenticated Path Traversal to Arbitrary File Read via 'sfgtfi' URL Path Parameter

• WebRehab Super Forms – Drag & Drop Form Builder
• CWE-26

Path Traversal through the Lookup Configuration REST API in Splunk Enterprise

• Splunk Enterprise
• CWE-26

A vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6).

• Siemens SINEC INS
• CWE-26

django-s3file is vulnerable to relative path traversal

• Path traversal
• CWE-26

<7.0.2 · fixed in 7.0.2

NavigaTUM has a Path Traversal Vulnerability in the propose_edits functionality

• TUM-Dev NavigaTUM
• Path traversal
• CWE-26

Mahara 21.10 before 21.10.6, 22.04 before 22.04.4, and 22.10 before 22.10.1 allows unsafe font upload for skins.

• CWE-26

RomM vulnerable to Authenticated Path Traversal

• romm
• CWE-26

Label Studio has a Path Traversal Vulnerability via image Field

• Path traversal
• CWE-26

<1.0.10 · fixed in 1.0.10

Arbitrary Directory Listing in Centrify PAS

• Delinea Centrify PAS
• CWE-26

Arbitrary File Reading in Centrify PAS

• Delinea Centrify PAS
• CWE-26

Kiteworks Totemomail 7.x and 8.x before 8.3.0 allows /responsiveUI/EnvelopeOpenServlet messageId directory traversal for unauthenticated file read and delete operations (with displayLoginChunkedImage…

• CWE-26

Directory Traversal vulnerability in lsgwr spring boot online exam v.0.9 allows an attacker to execute arbitrary code via the FileTransUtil.java component.

• CWE-26

Directory Traversal vulnerability in lib/admin/image.admin.php in cmseasy v7.7.7.9 20240105 allows attackers to delete arbitrary files via crafted GET request.

• CWE-26

Cisco AppDynamics: A vulnerability in the file upload functionality of Cisco AppDynamics Controller could…

• Cisco AppDynamics
• CWE-26

React Native Document Picker Directory Traversal vulnerability

• CWE-26

<8.2.2 || >=9.0.0, <9.1.1 · fixed in 8.2.2, 9.1.1

Zip Path Traversal in Deepin-Compressor

• linuxdeepin developer-center
• Path traversal
• CWE-26

Roxy-WI has Path Traversal vulnerability

• hap-wi roxy-wi
• Path traversal
• CWE-26

Siemens Siveillance Video DLNA Server: A vulnerability has been identified in Siveillance Video DLNA Server (2019 R1)…

• Siemens Siveillance Video DLNA Server
• CWE-26

Cisco Firepower Management Center Software Authenticated Directory Traversal Vulnerability

• Cisco Firepower Management Center
• CWE-26