Advisories · Weakness
CWE-31.
Every Advisory and CVE whose sources give the weakness CWE-31, newest first.
- CVSS 7.2 High
Dell PowerProtect Data Domain Virtual Edition: PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7…
- Dell PowerProtect Data Domain Virtual Edition
- CWE-31
- CVSS 7.7 High
path traversal inKoozali - SME Server
- koozali SME Server
- CWE-31
- CVSS 8.4 High
Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability
- Mitel MiVoice Office 400
- CWE-31
- CVSS 5.5 Medium
Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure
- Mitel MiVoice Office 400
- CWE-31
- CVSS 8.4 High
Mitel MiVoice Office 400 view system files path traversal
- Mitel MiVoice Office 400
- CWE-31
- CVSS 9.9 CriticalCritical · CVSS 9+, CVSS 7+ and EPSS
pgAdmin 4 vulnerable to Unsafe Deserialization and Remote Code Execution by an Authenticated user
- CWE-31
<8.4 · fixed in 8.4
GHSA-rj98-crf4-g69w · CVE-2024-2044 - CVSS 8.8 High
dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.
- CWE-31
- CVSS 5.3 Medium
A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php.
- CWE-31
- CVSS 7.5 High
Jan path traversal vulnerability
- Path traversal
- CWE-31
<=0.1.11 · no fixed version yet
GHSA-5jqc-qj57-4hrc · CVE-2024-36857 - CVSS 6.5 Medium
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord.
- CWE-31
- CVSS 7.5 High
ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64.
- CWE-31
- CVSS 8.8 High
Ivanti Avalanche: A Path Traversal vulnerability in web component of Ivanti Avalanche before 6.4.3 allows a…
- Ivanti Avalanche
- CWE-31
- CVSS 7.5 High
RAD SecFlow-2 devices with Hardware 0202, Firmware 4.1.01.63, and U-Boot 2010.12 allow URIs beginning with /.. for Directory Traversal, as demonstrated by reading /etc/shadow.
- CWE-31
- CVSS 8.1 High
LangChain through 0.1.10 allows ../ directory traversal by an actor who is able to control the final part of the path parameter in a load_chain call. This bypasses the intended behavior of loading ...
- CWE-31
<0.1.11 · fixed in 0.1.11
GHSA-h59x-p739-982c · CVE-2024-28088 - CVSS 4.9 Medium
Webtrees Path Traversal vulnerability
- Path traversal
- CWE-31
<=2.1.18 · no fixed version yet
GHSA-6w5q-79rf-7c49 · CVE-2024-22723 - CVSS 7.5 High
In the module "Account Manager | Sales Representative & Dealers | CRM" (prestasalesmanager) up to 9.0 from Presta World for PrestaShop, a guest can download personal information without restriction b…
- CWE-31