Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-22 (对路径名的限制不恰当(路径遍历)) — Vulnerability Class 3341

3341 vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2021-22797 Schneider Electric EcoStruxure Control Expert 路径遍历漏洞 — EcoStruxure Control Expert 7.8 High2022-03-28
CVE-2021-22794 Schneider Electric StruxureWare Data Center Expert 路径遍历漏洞 — StruxureWare Data Center Expert 9.1 Critical2022-03-28
CVE-2022-24731 Path traversal allows leaking out-of-bound files from Argo CD repo-server — argo-cd 6.8 Medium2022-03-23
CVE-2022-24730 Path traversal and improper access control allows leaking out-of-bound files from Argo CD repo-server — argo-cd 7.7 High2022-03-23
CVE-2021-27471 Rockwell Automation Connected Components Workbench Path Traversal — Connected Components Workbench 7.7 High2022-03-23
CVE-2021-27473 Rockwell Automation Connected Components Workbench Improper Input Validation — Connected Components Workbench 6.1 Medium2022-03-23
CVE-2022-1000 Path Traversal in prasathmani/tinyfilemanager — prasathmani/tinyfilemanager 9.8 -2022-03-17
CVE-2022-25249 PTC Axeda agent and Axeda Desktop Server Path Traversal — Axeda agent 7.5 High2022-03-16
CVE-2021-24692 Simple Download Monitor < 3.9.5 - Contributor+ Arbitrary File Download via Path Traversal — Simple Download Monitor 6.5 -2022-03-14
CVE-2022-24715 Arbitrary code execution for authenticated users in Icinga Web 2 — icingaweb2 8.5 High2022-03-08
CVE-2022-24716 Path traversal in Icinga Web 2 — icingaweb2 7.5 High2022-03-08
CVE-2021-3762 Clair 路径遍历漏洞 — quay/claircore 9.8 -2022-03-03
CVE-2022-24718 Path Traversal in ssr-pages — ssr-pages 7.6 High2022-03-01
CVE-2021-24820 Cost Calculator <= 1.6 - Authenticated Local File Inclusion — Cost Calculator 8.1 -2022-02-28
CVE-2021-24689 Contact Forms - Drag & Drop Contact Form Builder <= 1.0.5 - Admin+ Arbitrary System File Read — Contact Forms – Drag & Drop Contact Form Builder 4.9 -2022-02-28
CVE-2022-23612 Directory Traversal in OpenMRS Startup Filter — openmrs-core 7.5 High2022-02-22
CVE-2022-0665 Path Traversal in pimcore/pimcore — pimcore/pimcore 6.5 -2022-02-22
CVE-2021-25082 Popup Builder < 4.0.7 - LFI to RCE — Popup Builder – Create highly converting, mobile friendly marketing popups. 8.8 -2022-02-21
CVE-2021-26619 BigFileAgent arbitrary file Deleting vulnerability — BigFileAgent 7.1 High2022-02-18
CVE-2022-0673 LemMinX 路径遍历漏洞 — LemMinX 5.3 -2022-02-18
CVE-2021-22804 Schneider Electric IGSS 路径遍历漏洞 — Interactive Graphical SCADA System Data Collector (dc.exe) (V15.0.0.21243 and prior) 7.5 -2022-02-11
CVE-2020-14523 Mitsubishi Electric Factory Automation Products Path Traversal — CW Configurator 8.3 High2022-02-11
CVE-2021-22748 Schneider Electric C-Bus Toolkit 路径遍历漏洞 — C-Bus Toolkit (V1.15.9 and prior), C-Gate Server (V2.11.7 and prior) 9.8 -2022-02-11
CVE-2022-24311 Schneider Electric Interactive Graphical SCADA System 路径遍历漏洞 — Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) 9.8 -2022-02-09
CVE-2022-24312 Schneider Electric Interactive Graphical SCADA System 路径遍历漏洞 — Interactive Graphical SCADA System Data Server (V15.0.0.22020 and prior) 9.8 -2022-02-09
CVE-2022-23620 Path traversal in xwiki-platform-skin-skinx — xwiki-platform 6.8 Medium2022-02-09
CVE-2022-22931 Path traversal in Apache James 3.6.1 — Apache James 4.3 -2022-02-07
CVE-2022-22679 Synology DiskStation Manager 路径遍历漏洞 — DiskStation Manager (DSM) 6.5 Medium2022-02-07
CVE-2022-23609 Path traveresal in iTunesRPC-Remastered — iTunesRPC-Remastered 8.3 High2022-02-04
CVE-2022-0401 Path Traversal in yuda-lyu/w-zip — yuda-lyu/w-zip 9.8 -2022-02-01

Vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)) represent 3341 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.