Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-22 (对路径名的限制不恰当(路径遍历)) — Vulnerability Class 3346

3346 vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2018-13812 多款Siemens产品路径遍历漏洞 — SIMATIC HMI Comfort Panels 4" - 22", SIMATIC HMI Comfort Outdoor Panels 7" & 15", SIMATIC HMI KTP Mobile Panels KTP400F, KTP700, KTP700F, KTP900 und KTP900F, SIMATIC WinCC Runtime Advanced, SIMATIC WinCC Runtime Professional, SIMATIC WinCC (TIA Portal), SIMATIC HMI Classic Devices (TP/MP/OP/MP Mobile Panel) 9.1 -2018-12-13
CVE-2018-16478 simplehttpserver 路径遍历漏洞 — simplehttpserver 2.7 -2018-12-04
CVE-2018-17934 NUUO CMS 安全漏洞 — NUUO CMS 9.8 -2018-11-27
CVE-2018-16473 takeapeek module 路径遍历漏洞 — takeapeek 5.3 -2018-11-06
CVE-2018-16475 Knightjs 路径遍历漏洞 — knightjs 7.5 -2018-11-06
CVE-2018-14654 Red Hat Gluster 路径遍历漏洞 — glusterfs 6.5 -2018-10-31
CVE-2018-14806 Advantech WebAccess 路径遍历漏洞 — Advantech WebAccess 9.8 -2018-10-23
CVE-2018-0420 Cisco Wireless LAN Controller Software Directory Traversal Vulnerability — Cisco Wireless LAN Controller (WLC) 6.5 -2018-10-17
CVE-2018-17899 LAquis SCADA 路径遍历漏洞 — LAquis SCADA 8.8 -2018-10-17
CVE-2018-0405 Cisco RV180W Wireless-N Multifunction VPN Router Directory Path Traversal Vulnerability — Cisco RV180W Wireless-N Multifunction VPN Router 7.5 -2018-10-05
CVE-2018-0464 Cisco Data Center Network Manager Path Traversal Vulnerability — Cisco Data Center Network Manager 8.1 -2018-10-05
CVE-2018-0426 Cisco RV110W, RV130W, and RV215W Routers Management Interface Directory Traversal Vulnerability — Cisco RV130W Wireless-N Multifunction VPN Router Firmware 9.1 -2018-10-05
CVE-2018-10501 Samsung Notes 路径遍历漏洞 — Samsung Notes 7.0 -2018-09-24
CVE-2016-7041 Red Hat Drools Workbench 路径遍历漏洞 — Drools Workbench 6.5 -2018-09-10
CVE-2018-3787 simplehttpserver 路径遍历漏洞 — simplehttpserver 7.5 -2018-08-31
CVE-2017-2627 Red Hat Openstack Enterprise tripleo-common 安全漏洞 — openstack-tripleo-common 7.2 -2018-08-22
CVE-2017-16744 Tridium Niagara AX Framework和Niagara 4 Framework 路径遍历漏洞 — Niagara AX Framework and Niagara 4 Framework 7.2 -2018-08-20
CVE-2018-10917 Pulp 安全漏洞 — pulp 6.5 -2018-08-15
CVE-2018-11455 Siemens Automation License Manager 安全漏洞 — Automation License Manager 5, Automation License Manager 6 8.8 -2018-08-07
CVE-2017-2595 Red Hat JBoss Enterprise Application 路径遍历漏洞 — wildfly 6.5 -2018-07-27
CVE-2018-1002200 plexus-archiver 路径遍历漏洞 — plexus-archiver 5.5 -2018-07-25
CVE-2018-1002201 zt-zip 路径遍历漏洞 — zt-zip 5.5 -2018-07-25
CVE-2018-1002202 zip4j 路径遍历漏洞 — zip4j 5.5 -2018-07-25
CVE-2018-1002203 unzipper npm library 路径遍历漏洞 — unzipper 5.5 -2018-07-25
CVE-2018-1002204 adm-zip npm library 路径遍历漏洞 — adm-zip 5.5 -2018-07-25
CVE-2018-1002205 DotNetZip.Semvered 路径遍历漏洞 — DotNetZip.Semvered 5.5 -2018-07-25
CVE-2018-1002206 SharpCompress 路径遍历漏洞 — SharpCompress 5.5 -2018-07-25
CVE-2018-1002207 mholt/archiver golang包路径遍历漏洞 — archiver 5.5 -2018-07-25
CVE-2018-1002208 sharplibzip 路径遍历漏洞 — SharpZipLib 5.5 -2018-07-25
CVE-2018-1002209 QuaZIP 路径遍历漏洞 — quazip 5.5 -2018-07-25

Vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)) represent 3346 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.