Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-22 (对路径名的限制不恰当(路径遍历)) — Vulnerability Class 3352

3352 vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2018-25124 PacsOne Server 6.6.2 DICOM Web Viewer Directory Traversal LFI — PacsOne Server 7.5 -2025-11-10
CVE-2025-12923 liweiyi ChestnutCMS download resourceDownload path traversal — ChestnutCMS 2.7 Low2025-11-10
CVE-2025-12922 OpenClinica Community Edition CRF Data Import ImportCRFData path traversal — Community Edition 6.3 Medium2025-11-10
CVE-2025-12092 CYAN Backup <= 2.5.4 - Authenticated (Admin+) Arbitrary File Deletion — CYAN Backup 6.5 Medium2025-11-08
CVE-2025-12000 WPFunnels <= 3.6.2 - Authenticated (Administrator+) Arbitrary File Deletion via Path Traversal — WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell 6.5 Medium2025-11-08
CVE-2025-64485 CVAT: Mounted share file overwrite via crafted request — cvat 7.1 -2025-11-07
CVE-2025-64433 KubeVirt Arbitrary Container File Read — kubevirt 6.5 Medium2025-11-07
CVE-2025-7719 Smallworld SWMFS Arbitrary File Ops — Smallworld 8.8 -2025-11-07
CVE-2025-57712 Qsync Central — Qsync Central 7.5 -2025-11-07
CVE-2025-64346 archives: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') — archives 9.8 -2025-11-07
CVE-2025-64184 Dosage vulnerable to Directory Traversal through crafted HTTP responses — dosage 8.8 High2025-11-07
CVE-2025-58423 Advantech DeviceOn/iEdge Path Traversal — DeviceOn/iEdge 8.8 High2025-11-06
CVE-2025-59171 Advantech DeviceOn/iEdge Path Traversal — DeviceOn/iEdge 7.5 High2025-11-06
CVE-2025-62630 Advantech DeviceOn/iEdge Path Traversal — DeviceOn/iEdge 8.8 High2025-11-06
CVE-2025-12490 Netgate pfSense CE Suricata Path Traversal Remote Code Execution Vulnerability — pfSense 8.8 -2025-11-06
CVE-2025-34238 Advantech WebAccess/VPN < 1.1.5 Path Traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction() — WebAccess/VPN 4.9 -2025-11-06
CVE-2025-22397 Dell iDRAC9和Dell iDRAC10 路径遍历漏洞 — Integrated Dell Remote Access Controller 9 14G Versions 6.7 Medium2025-11-06
CVE-2025-60242 WordPress Download Counter plugin <= 1.4 - Arbitrary File Download vulnerability — Download Counter 7.5 High2025-11-06
CVE-2025-20374 Cisco Unified Contact Center Express Arbitrary File Download Vulnerability — Cisco Unified Contact Center Express 4.9 Medium2025-11-05
CVE-2025-64108 Cursor's Sensitive File Modification can Lead to NTFS Path Quirks — cursor 8.8 High2025-11-04
CVE-2025-64107 Cursor is Vulnerable to Path Manipulation Using Backslashes on Windows — cursor 8.8 High2025-11-04
CVE-2025-12493 ShopLentor <= 3.2.5 - Unauthenticated Local PHP File Inclusion via 'load_template' — ShopLentor – All-in-One WooCommerce Growth & Store Enhancement Plugin 9.8 Critical2025-11-04
CVE-2025-12626 jeecgboot jeewx-boot WxActGoldeneggsPrizesController.java getImgUrl path traversal — jeewx-boot 4.3 Medium2025-11-03
CVE-2025-8385 Zombify <= 1.7.5 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Read — Zombify 6.8 Medium2025-10-31
CVE-2025-10897 WooCommerce Designer Pro <= 1.9.28 - Unauthenticated Arbitrary File Read — WooCommerce Designer Pro 8.6 High2025-10-31
CVE-2025-3356 IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations — Tivoli Monitoring 8.6 High2025-10-30
CVE-2025-3355 IBM Tivoli Monitoring is vulnerable to unauthenticated file read and write operations — Tivoli Monitoring 7.5 High2025-10-30
CVE-2025-12060 Keras keras.utils.get_file Utility Path Traversal Vulnerability — Keras 5.3AIMediumAI2025-10-30
CVE-2025-11466 Allegra DatabaseBackupBL Directory Traversal Information Disclosure Vulnerability — Allegra 6.5AIMediumAI2025-10-29
CVE-2025-11201 MLflow Tracking Server Model Creation Directory Traversal Remote Code Execution Vulnerability — MLflow 9.8AICriticalAI2025-10-29

Vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)) represent 3352 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.