Advisories · Weakness
CWE-40.
Every Advisory and CVE whose sources give the weakness CWE-40, newest first.
- CVSS 7.1 High
Universal Naming Convention (UNC) Path Injection in Cerberus FTP Server
- Cerberus FTP Server
- CWE-40
- CVSS 8.8 High
The application evaluate UNC path in workspace name
- Scille parsec-cloud
- CWE-40
- CVSS 8.8 High
ADB-Explorer: UNC Path Support in ManualAdbPath Leads to Remote Code Execution (RCE)
- Alex4SSB ADB-Explorer
- CWE-40
- CWE-829
- CVSS 5.0 Medium
CrushFTP: CrushFTP 9.x and 10.x through 10.8.4 and 11.x through 11.3.1 allows directory traversal…
- CrushFTP
- CWE-40
- CVSS 4.7 Medium
Improper Input Validation in PTC's Kepware KEPServerEX
- PTC Kepware KEPServerEX
- PTC ThingWorx Kepware Server
- CWE-40
- CVSS 9.8 CriticalCritical · CVSS 9+
Apache Solr Improper Input Validation and Path Traversal
- Path traversal
- CWE-20
<8.11.1 · fixed in 8.11.1
GHSA-pccr-q7v9-5f27 · CVE-2021-44548