Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-22 (对路径名的限制不恰当(路径遍历)) — Vulnerability Class 3346

3346 vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2020-5366 Dell EMC iDRAC9 路径遍历漏洞 — Integrated Dell Remote Access Controller (iDRAC) 7.1 High2020-07-09
CVE-2020-3241 Cisco UCS Director Path Traversal Vulnerability — Cisco Unified Computing System (Management Software) 6.5 -2020-06-18
CVE-2020-3236 Cisco Enterprise NFV Infrastructure Software Path Traversal Vulnerability — Cisco Enterprise NFV Infrastructure Software 6.7 -2020-06-18
CVE-2020-4053 Path Traversal in Helm Plugin Archive — Helm 3.7 Low2020-06-16
CVE-2020-7497 Schneider Electric EcoStruxure Operator Terminal Expert 路径遍历漏洞 — EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) 9.8 -2020-06-16
CVE-2020-7495 Schneider Electric EcoStruxure Operator Terminal Expert 路径遍历漏洞 — EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) 5.5 -2020-06-16
CVE-2020-7494 Schneider Electric EcoStruxure Operator Terminal Expert 路径遍历漏洞 — EcoStruxure Operator Terminal Expert 3.1 Service Pack 1 and prior (formerly known as Vijeo XD) 7.8 -2020-06-16
CVE-2020-12003 多款Rockwell Automation产品路径遍历漏洞 — FactoryTalk Linx, RSLinx Classic, Connected Components Workbench, ControlFLASH Plus, FactoryTalk Asset Centre, FactoryTalk Linx CommDTM, Studio 5000 Launcher, Studio 5000 Logix Designer software 7.5 -2020-06-15
CVE-2020-6110 Zoom Client 路径遍历漏洞 — Zoom 8.8 -2020-06-08
CVE-2020-6109 Zoom Client 路径遍历漏洞 — Zoom 9.8 -2020-06-08
CVE-2020-8159 actionpack_page-caching gem 路径遍历漏洞 — https://github.com/rails/actionpack-page_caching 9.8 -2020-05-12
CVE-2020-3187 Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software Web Services Path Traversal Vulnerability — Cisco Adaptive Security Appliance (ASA) Software 9.1 -2020-05-06
CVE-2020-10634 SAE IT-systems FW-50 Remote Telemetry Unit 路径遍历漏洞 — SAE IT-systems FW-50 Remote Telemetry Unit (RTU) 9.1 -2020-05-05
CVE-2020-1631 Out of Cycle Security Advisory: Junos OS: Security vulnerability in J-Web and web based (HTTP/HTTPS) services — Junos OS 8.8 High2020-05-04
CVE-2020-10691 Ansible 路径遍历漏洞 — Ansible 5.2 Medium2020-04-30
CVE-2019-19102 Zip Slip vulnerability in 3rd-Party library in B&R Automation Studio upgrade service — Automation Studio 5.5 Medium2020-04-29
CVE-2020-3177 Cisco Unified Communications Manager Path Traversal Vulnerability — Cisco Unified Communications Manager 7.5 -2020-04-15
CVE-2020-6974 Honeywell Notifier Web Server 路径遍历漏洞 — Honeywell Notifier Web Server (NWS) 9.8 -2020-04-07
CVE-2020-8144 Ubiquiti Networks UniFi Video Controller 路径遍历漏洞 — UniFi Video Controller (for Windows 7/8/10 x64) 8.4 -2020-04-01
CVE-2020-10696 Buildah 路径遍历漏洞 — buildah 8.8 High2020-03-31
CVE-2020-7478 Schneider Electric Interactive Graphical SCADA System 路径遍历漏洞 — IGSS (Interactive Graphical SCADA System) (IGSS Version prior to 14.0.0.20009) 7.5 -2020-03-23
CVE-2020-1735 Ansible 路径遍历漏洞 — ansible 4.2 Medium2020-03-16
CVE-2019-19290 Siemens SiNVR 3 Central Control Server和SiNVR 3 Video Server 路径遍历漏洞 — Control Center Server (CCS) 6.5 Medium2020-03-10
CVE-2019-19296 Siemens SiNVR 3 Central Control Server 路径遍历漏洞 — SiNVR/SiVMS Video Server 6.8 Medium2020-03-10
CVE-2019-19297 Siemens SiNVR 3 Central Control Server和SiNVR 3 Video Server 路径遍历漏洞 — SiNVR/SiVMS Video Server 7.5 High2020-03-10
CVE-2020-1737 Ansible 路径遍历漏洞 — Ansible 7.5 High2020-03-09
CVE-2019-3696 pcp: Local privilege escalation from user pcp to root through migrate_tempdirs — SUSE Linux Enterprise High Performance Computing 15-ESPOS 8.4 High2020-03-03
CVE-2019-7007 Avaya Equinox Conferencing Management (iView) Directory Traversal Vulnerability — Equinox Conferencing Management (iView) 7.5 High2020-02-28
CVE-2020-8131 Yarn 路径遍历漏洞 — yarn 8.8 -2020-02-24
CVE-2020-6768 Path Traversal in Bosch Video Management System (BVMS) — DIVAR IP 3000 8.6 High2020-02-07

Vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)) represent 3346 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.