CWE-35: Path Traversal: '.../...//'
The product uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '.../...//' (doubled triple dot slash) sequences that can resolve to a location that is outside of that directory.
A kind of CWE-23 Relative Path Traversal.
From the CWE List. © The MITRE Corporation.
Newest
- ge vernova enervistaEnervista UR Setup DLL Hijacking4.6 Medium
- brocade fabric os, broadcom fabric operating system +1 moreDirectory transversal vulnerability in Brocade Fabric OS before 9.2.1c2 and 9.2.2 through 9.2.2a using various shell commands4.6 Medium
- brocade fabric os, broadcom fabric operating system +1 moreDirectory transversal vulnerability in Brocade Fabric OS before 9.2.1 using grep command4.6 Medium
- dormakaba access manager 92xx-k5, access manager 92xx-k7 +1 moreUnauthenticated Path Traversal in dormakaba access manager8.8 High
- beeteam368 vidmovWordPress VidMov theme <= 2.3.8 - Path Traversal vulnerability7.7 High
- sigmaplugin advanced database cleaner proWordPress Advanced Database Cleaner PRO Plugin <= 3.2.10 - Limited .txt Path Traversal vulnerability6.4 Medium
- parall jspdf, red hat advanced cluster security 4, advanced cluster security 4.8 +1 more +3 morejsPDF has Local File Inclusion/Path Traversal vulnerability9.2 Critical
- aa-team pro bulk watermark plugin for wordpressWordPress Pro Bulk Watermark Plugin for WordPress <= 2.0 - Path Traversal Vulnerability6.5 Medium
- microsoft purviewMicrosoft Purview eDiscovery Remote Code Execution Vulnerability7.2 High
- wordpress.org health check & troubleshootingWordPress Health Check & Troubleshooting plugin <= 1.7.1 - Path Traversal vulnerability4.9 Medium
- libimobiledevice usbmuxdLocal privilege escalation in usbmuxd from arbitrary local user to usbmux5.1 Medium
- metz connect energy-controlling ewio2-m, energy-controlling ewio2-m-bm, ethernet-io ewio2-bm +3 more +5 morePossible arbitrary code execution8.8 High
- axis osAn ACAP configuration file lacked sufficient input validation, which could allow a path traversal...6.4 Medium
- dmitry v. (ceo of "ukr solution") barcode scanner with inventory & order managerWordPress Barcode Scanner with Inventory & Order Manager plugin <= 1.10.4 - Path Traversal vulnerability7.2 High
- cocobasic blanka - one page wordpress themeWordPress Blanka - One Page WordPress Theme Theme < 1.5 - Local File Inclusion Vulnerability8.1 High
- mikado-themes wanderlandWordPress Wanderland theme <= 1.7.1 - Local File Inclusion Vulnerability8.1 High
- wpmu dev - your all-in-one wordpress platform smush image compression and optimizationWordPress Smush Image Compression and Optimization plugin <= 3.17.0 - Directory Traversal vulnerability4.1 Medium
- suse container suse/manager/4.3/proxy-httpd:latest, container suse/manager/5.0/x86 64/proxy-httpd:latest, container suse/multi-linux-manager/5.1/x86 64/proxy-httpd:latest +1 more +3 moresusemanager-tftpsync-recv allows arbitrary file creation and deletion due to path traversal8.7 High
- rocketsoftware trufusion enterpriseTRUfusion Enterprise through 7.10.4.0 uses the /trufusionPortal/getCobrandingData endpoint to...8.6 High
- sauter ey-modulo 5 ecos 5 ecos504/505, ey-modulo 5 modu 5 modu524, ey-modulo 5 modu 5 modu525 +3 more +5 moreSauter: Directory Traversal in importFile SOAP Method9.8 Critical
- opentext flipperPath traversal validation vulnerability has been discovered in opentext Flipper.5.3 Medium
- sap se print serviceDirectory Traversal vulnerability in SAP Print Service9.8 Critical
- dell data domain operating system, powerprotect data domain with data domain operating system (dd os) of feature release, powerprotect data domain with data domain operating system (dd os) lts2023 +2 more +4 moreDell PowerProtect Data Domain with Data Domain Operating System (DD OS) of Feature Release...6.5 Medium
- cisco ios xe software, ios xe +1 moreMultiple vulnerabilities in Cisco IOS XE Software of could allow an authenticated, local attacker...6.7 Medium
- dell powerprotect data managerDell PowerProtect Data Manager, version(s) 19.19 and 19.20, Hyper-V contain(s) a Path Traversal: ...4.4 Medium
- stefan keller woocommerce payment gateway for saferpayWordPress WooCommerce Payment Gateway for Saferpay Plugin <= 0.4.9 - Path Traversal Vulnerability7.5 High
- aa-team pro bulk watermark plugin for wordpressWordPress Pro Bulk Watermark Plugin for WordPress Theme <= 2.0 - Path Traversal Vulnerability4.3 Medium
- favethemes houzezWordPress Houzez Theme < 4.1.4 - Local File Inclusion Vulnerability4.3 Medium
- printeers print & shipWordPress Printeers Print & Ship plugin <= 1.17.0 - Directory Traversal vulnerability5.3 Medium
- miniorange prevent files / folders accessWordPress Prevent files / folders access Plugin <= 2.6.0 - Path Traversal Vulnerability6.5 Medium
- boldgrid post and page builder by boldgridWordPress Post and Page Builder by BoldGrid – Visual Drag and Drop Editor <= 1.27.8 - Path Traversal Vulnerability4.2 Medium
- rarlab winrar, dtsearch +1 morePath traversal vulnerability in WinRAR8.4 High
- checkpoint mobile access, check point mobile access, remote access vpn +2 morePath Traversal5.0 Medium
- delta electronics diaviewFile Parsing Deserialization of Untrusted Data in DTM Soft9.3 Critical
- splunk, splunk enterprise, cloud platform +1 more +3 moreDenial of Service (DoS) through “User Interface - Views“ configuration page in Splunk Enterprise6.3 Medium
- vaultdweller leykaWordPress Leyka plugin <= 3.32.1 - Local File Inclusion vulnerability7.5 High
- creanncy davenport - versatile blog and magazine wordpress themeWordPress Davenport - Versatile Blog and Magazine WordPress Theme <= 1.3 - Local File Inclusion Vulnerability8.1 High
- tmrw-studio katerio - magazineWordPress Katerio - Magazine theme <= 1.5.1 - Local File Inclusion Vulnerability8.1 High
- yannisraft aeroscroll gallery – infinite scroll image gallery & post grid with photo galleryWordPress Aeroscroll Gallery – Infinite Scroll Image Gallery & Post Grid with Photo Gallery plugin <= 1.0.13 - Directory Traversal Vulnerability7.5 High
- microsoft 365 apps, 365 apps for enterprise, office ltsc 2024 +1 more +3 moreMicrosoft Outlook Remote Code Execution Vulnerability7.8 High
- cyberdata 011209 sip emergency intercom, 011209 sip emergency intercom firmware +1 moreCyberData 011209 SIP Emergency Intercom Path Traversal9.3 Critical
- frenify arloWordPress Arlo theme <= 6.0.3 - Local File Inclusion Vulnerability8.1 High
- mikado-themes mediclinicWordPress MediClinic theme <= 2.1 - Local File Inclusion Vulnerability8.1 High
- mikado-themes grandprixWordPress GrandPrix theme <= 1.6 - Local File Inclusion Vulnerability8.1 High
- mikado-themes grill and chowWordPress Grill and Chow theme <= 1.6 - Local File Inclusion Vulnerability8.1 High
- rsjoomla.com rsfirewall component for joomlaExtension - rsjoomla.com - A path traversal vulnerability RSFirewall component 2.9.7 - 3.1.5 for Joomla5.4 Medium
- airleader gmbh master, wf steuerungstechnik gmbh airleader master +1 moreWF Steuerungstechnik GmbH - airleader MASTER - Path Traversal9.2 Critical
- ctltwp section widgetWordPress Section Widget plugin <= 3.3.1 - Path Traversal vulnerability5.3 Medium
- bslthemes tastycWordPress Tastyc < 2.5.2 - Local File Inclusion Vulnerability8.1 High
- whmpressWordPress WHMpress plugin <= 6.2-revision-9 - Local File Inclusion vulnerability8.1 High
- Show moreLoading…