CWE-27.

moment vulnerable to Path Traversal via crafted non-string locale name

• CWE-27

>=2.29.2, <2.31.0 · fixed in 2.31.0

Path Traversal through the Search Dispatch REST API in Splunk Enterprise

• Splunk Enterprise
• CWE-27

Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases

• Apache Software Foundation Apache Kyuubi
• Path traversal
• CWE-27

Path traversal in Eclipse Foundation Eclipse OpenMQ and others

• Eclipse Foundation Eclipse OpenMQ
• Eclipse Foundation Eclipse GlassFish
• Path traversal
• CWE-27

Cisco Firepower Management Center Software and Firepower Threat Defense Path Traversal Vulnerability

• Cisco Secure Firewall Management Center (FMC)
• Cisco Secure Firewall Threat Defense (FTD) Software
• CWE-27

Apache Kyuubi Server vulnerable to Path Traversal

• Path traversal
• CWE-27

>=1.6.0, <1.10.3 · fixed in 1.10.3

Denial of service (DoS) vulnerability in the office service.

• Huawei HarmonyOS
• CWE-27

Path Traversal in Yordam BT's Yordam Katalog

• Yordam Information Technology Consulting Education and Electrical Systems Industry Trade Inc. Yordam Katalog
• CWE-27

Tautulli vulnerable to Unauthenticated Path Traversal in `real_pms_image_proxy`

• Tautulli
• CWE-27

An issue in the component /stl/actions/download?filePath of SSCMS v7.3.1 allows attackers to execute a directory traversal.

• CWE-27

Using the <redacted> action or <redacted>.sh script, arbitrary files and directories can be deleted using directory traversal.

• Iocharger firmware for AC models
• Path traversal
• CWE-27

Cisco TelePresence Collaboration Endpoint and RoomOS Software Privilege Escalation Vulnerability

• Cisco RoomOS Software
• Cisco TelePresence Endpoint Software (TC/CE)
• CWE-27

Arbitrary File Read and Delete in kanboard

• kanboard
• Path traversal
• CWE-27

elunez eladmin Database Management/Deployment Management upload path traversal

• elunez eladmin
• CWE-27

Traccar vulnerable to Path Traversal: 'dir/../../filename' and Unrestricted Upload of File with Dangerous Type

• traccar
• Unrestricted file upload
• CWE-27

A vulnerability in the Out-of-Band (OOB) Plug and Play (PnP) feature of Cisco Nexus Dashboard Fabric Controller (NDFC) could allow an unauthenticated, remote attacker to read arbitrary files.

• Cisco Data Center Network Manager
• CWE-27

An issue in Jeewms v.3.7 and before allows a remote attacker to escalate privileges via the AuthInterceptor component.

• CWE-27

cmseasy V7.7.7.9 has an arbitrary file deletion vulnerability in lib/admin/template_admin.php.

• CWE-27

Node: The permission model protects itself against path traversal attacks by calling…

• Node
• CWE-27

Remote Code Execution Vulnerability in Atril's EPUB ebook parsing

• mate-desktop atril
• Path traversal
• CWE-25

Arbitrary file read vulnerability through the Jenkins CLI can lead to RCE

• Path traversal
• CWE-27

>=1.606, <2.426.3 || >=2.427, <2.440.1 || >=2.441, <2.442 · fixed in 2.426.3, 2.440.1, 2.442

Deepin Reader RCE vulnerability due to a design flaw

• linuxdeepin developer-center
• Path traversal
• CWE-27

SonicWall GMS: Path Traversal vulnerability in GMS and Analytics allows an authenticated attacker to…

• SonicWall GMS
• SonicWall Analytics
• CWE-27

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

• Cisco Prime Infrastructure
• CWE-27

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

• Cisco Prime Infrastructure
• CWE-27

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

• Cisco Prime Infrastructure
• CWE-27

Cisco Prime Infrastructure and Cisco Evolved Programmable Network Manager Vulnerabilities

• Cisco Prime Infrastructure
• CWE-27

Unauthenticated path traversal vulnerability in Hasura GraphQL Engine

• hasura graphql-engine
• Path traversal
• CWE-27

Path Traversal: 'dir/../../filename' in moment.locale

• Path traversal
• CWE-27

<2.29.2 · fixed in 2.29.2

A directory traversal vulnerability in the web server of the Zyxel VPN2S firmware version 1.12 could allow a remote attacker to gain access to sensitive information.

• Zyxel ZyWALL VPN2S Firmware
• CWE-27