Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-22 (对路径名的限制不恰当(路径遍历)) — Vulnerability Class 3364

3364 vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2023-5257 WhiteHSBG JNDIExploit HTTPServer.java handleFileRequest path traversal — JNDIExploit 3.5 Low2023-09-29
CVE-2023-43662 Arbitrary file read vulnerability in Shoko Server — ShokoServer 8.6 High2023-09-28
CVE-2023-43044 IBM License Metric Tool directory traversal — License Metric Tool 5.3 Medium2023-09-28
CVE-2023-40026 Path traversal allows leaking out-of-bound Helm charts from Argo CD repo-server — argo-cd 5.0 Medium2023-09-27
CVE-2023-42657 WS_FTP Server Directory Traversal — WS_FTP Server 9.9 Critical2023-09-27
CVE-2023-42487 Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') — Soundminer 7.5 High2023-09-27
CVE-2023-42462 File deletion through document upload process in GLPI — glpi 7.7 High2023-09-26
CVE-2023-41888 Phishing through a login page malicious URL in GLPI — glpi 5.3 Medium2023-09-26
CVE-2023-42819 Path traversal in Jumpserver — jumpserver 8.9 High2023-09-26
CVE-2023-2315 Path Traversal in OpenCart versions 4.0.0.0 to 4.0.2.2 — Opencart 8.1 High2023-09-26
CVE-2022-4244 Codehaus-plexus: directory traversal — RHINT Camel-K-1.10.1 7.5 High2023-09-25
CVE-2023-41302 Huawei HarmonyOS 安全漏洞 — HarmonyOS--2023-09-25
CVE-2023-39407 Huawei HarmonyOS 路径遍历漏洞 — HarmonyOS 9.1 -2023-09-25
CVE-2023-5142 H3C ER6300G2 Config File userLogin.asp path traversal — GR-1100-P 3.7 Low2023-09-24
CVE-2023-4760 Remote Code Execution in Eclipse RAP on Windows — Eclipse RAP 7.6 High2023-09-21
CVE-2023-4152 Frauscher FDS101 for FAdC/FAdCi path traversal vulnerability — FDS101 for FAdC/FAdCi 7.5 High2023-09-21
CVE-2022-45447 Path Traversal in M4 PDF plugin for Prestashop sites — M4 PDF plugin 6.5 Medium2023-09-20
CVE-2023-38256 Dover Fueling Solutions MAGLINK LX Console Path Traversal — MAGLINK LX Web Console Configuration 6.8 Medium2023-09-11
CVE-2022-33164 IBM Security Directory Server path traversal — Security Directory Integrator 8.7 High2023-09-08
CVE-2023-4782 Terraform Allows Arbitrary File Write During Init Operation — Terraform 6.3 Medium2023-09-08
CVE-2021-35980 Adobe Acrobat Reader SpellDictionaryExport Path Traversal Remote Code Execution Vulnerability — Acrobat Reader 7.8 High2023-09-06
CVE-2021-28644 Adobe Acrobat SpellDictionaryCreate Path Traversal Remote Code Execution Vulnerability — Acrobat Reader 7.8 High2023-09-06
CVE-2023-4748 Yongyou UFIDA-NC PrintTemplateFileServlet.java path traversal — UFIDA-NC 6.3 Medium2023-09-05
CVE-2023-41057 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in hyper-bump-it — hyper-bump-it 5.5 Medium2023-09-04
CVE-2023-4616 thumbnail Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability — LG-LED Assistant 7.5 High2023-09-04
CVE-2023-4615 updateFile Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability — LG-LED Assistant 7.5 High2023-09-04
CVE-2023-4614 setThumbnailRC Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability — LG-LED Assistant 9.8 Critical2023-09-04
CVE-2023-4613 Upload Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability — LG-LED Assistant 9.8 Critical2023-09-04
CVE-2023-41747 Acronis Cloud Manager 输入验证错误漏洞 — Acronis Cloud Manager 7.5 -2023-08-31
CVE-2023-41044 Partial path traversal vulnerability in Support Bundle feature of Graylog — graylog2-server 3.3 Low2023-08-31

Vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)) represent 3364 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.