Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-22 (对路径名的限制不恰当(路径遍历)) — Vulnerability Class 3363

3363 vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2023-52332 Allegra serveMathJaxLibraries Directory Traversal Information Disclosure Vulnerability — Allegra 7.5 -2024-11-22
CVE-2023-51648 Allegra getFileContentAsString Directory Traversal Information Disclosure Vulnerability — Allegra 6.5 -2024-11-22
CVE-2023-51647 Allegra saveInlineEdit Directory Traversal Remote Code Execution Vulnerability — Allegra 8.8 -2024-11-22
CVE-2023-51646 Allegra uploadSimpleFile Directory Traversal Remote Code Execution Vulnerability — Allegra 8.8 -2024-11-22
CVE-2023-51645 Allegra unzipFile Directory Traversal Remote Code Execution Vulnerability — Allegra 8.8 -2024-11-22
CVE-2023-51643 Allegra uploadFile Directory Traversal Remote Code Execution Vulnerability — Allegra 8.8 -2024-11-22
CVE-2023-51640 Allegra extarctZippedFile Directory Traversal Remote Code Execution Vulnerability — Allegra 8.8 -2024-11-22
CVE-2023-51639 Allegra downloadExportedChart Directory Traversal Authentication Bypass Vulnerability — Allegra 9.8 -2024-11-22
CVE-2024-10220 Arbitrary command execution through gitRepo volume — kubelet 8.1 High2024-11-22
CVE-2024-37043 QTS, QuTS hero — QTS 4.9 -2024-11-22
CVE-2024-37046 QTS, QuTS hero — QTS 4.9 -2024-11-22
CVE-2024-52056 Application Delete Path Traversal in Wowza Streaming Engine — Streaming Engine 6.5AIMediumAI2024-11-21
CVE-2024-52055 Application Copy Path Traversal in Wowza Streaming Engine — Streaming Engine 4.9AIMediumAI2024-11-21
CVE-2024-52054 Application Creation Path Traversal in Wowza Streaming Engine — Streaming Engine 6.5AIMediumAI2024-11-21
CVE-2024-52448 WordPress Ultimate Classified Listings plugin <= 1.7 - Local File Inclusion vulnerability — Ultimate Classified Listings 7.5 High2024-11-20
CVE-2024-52449 WordPress WordPress Bootscraper plugin <= 2.1.0 - Local File Inclusion vulnerability — Bootscraper 7.5 High2024-11-20
CVE-2024-52444 WordPress Opal Woo Custom Product Variation plugin <= 1.1.3 - Arbitrary File Deletion vulnerability — Opal Woo Custom Product Variation 7.5 High2024-11-20
CVE-2024-52600 Statamic CMS has Path Traversal in Asset Upload — cms 5.3 Medium2024-11-19
CVE-2024-47820 MarkUs vulnerable to Path Traversal — Markus 5.7 Medium2024-11-18
CVE-2020-26071 Cisco SD-WAN vEdge Arbitrary File Creation Vulnerability — Cisco Catalyst SD-WAN Manager 8.4 High2024-11-18
CVE-2024-11303 Path Traversal — JetPort 5601 7.5AIHighAI2024-11-18
CVE-2024-41971 WAGO: Arbitrary File Overwrite in Multiple Devices — CC100 0751-9x01 8.1 High2024-11-18
CVE-2024-9935 PDF Generator Addon for Elementor Page Builder <= 2.0.0 - Unauthenticated Arbitrary File Download — PDF Generator for WordPress Elementor 7.5 High2024-11-16
CVE-2024-11239 Landray EKP API Interface import.do deleteFile path traversal — EKP 5.4 Medium2024-11-15
CVE-2024-11238 Landray EKP sysUiComponent.do delPreviewFile path traversal — EKP 6.5 Medium2024-11-15
CVE-2024-42499 FitNesse 路径遍历漏洞 — FitNesse 7.5AIHighAI2024-11-15
CVE-2024-52378 WordPress DigiPass plugin <= 0.3.0 - Arbitrary File Download vulnerability — DigiPass 7.5 High2024-11-14
CVE-2024-52396 WordPress WOLF plugin <= 1.0.8.3 - CSV Limited Path Traversal vulnerability — WOLF 4.9 Medium2024-11-14
CVE-2024-52371 WordPress Global Gateway e4 plugin <= 2.0 - Arbitrary File Deletion vulnerability — Global Gateway e4 | Payeezy Gateway | 8.6 High2024-11-14
CVE-2024-11210 EyouCMS FilemanagerLogic.php editFile path traversal — EyouCMS 5.4 Medium2024-11-14

Vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)) represent 3363 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.