Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-22 (对路径名的限制不恰当(路径遍历)) — Vulnerability Class 3357

3357 vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2022-46255 Improper Limitation of a Pathname to a Restricted Directory in GitHub Enterprise Server leading to RCE — GitHub Enterprise Server 9.8 -2022-12-14
CVE-2022-46256 Path traversal in GitHub Enterprise Server leading to remote code execution in GitHub Pages — GitHub Enterprise Server 8.8 -2022-12-14
CVE-2022-40264 Mitsubishi Electric GENESIS64 路径遍历漏洞 — GENESIS64 6.3 Medium2022-12-13
CVE-2022-4402 RainyGao DocSys ZIP File Decompression path traversal — DocSys 4.7 Medium2022-12-11
CVE-2022-45829 WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Arbitrary File Deletion — Easy WP SMTP 8.7 High2022-12-06
CVE-2022-45833 WordPress Easy WP SMTP Plugin <= 1.5.1 is vulnerable to Directory Traversal — Easy WP SMTP 6.8 Medium2022-12-06
CVE-2022-46154 Arbitrary file access in KodExplorer — KodExplorer 8.6 High2022-12-06
CVE-2022-23470 Arbitrary file access in the Galaxy data analysis platform — galaxy 8.6 High2022-12-06
CVE-2022-2969 ICSA-22-307-03 Delta Industrial Automation DIALink Path traversal — DIALink 8.1 High2022-12-01
CVE-2022-29837 Path traversal Vulnerability in Western Digital My Cloud Home, My Cloud Home Duo and SanDisk ibi Devices — My Cloud Home 4.7 Medium2022-12-01
CVE-2022-3361 Ultimate Member – User Profile, User Registration, Login & Membership Plugin <= 2.5.0 - Authenticated (Contributor+) Directory Traversal via Shortcodes — Ultimate Member – User Profile, Registration, Login, Member Directory, Content Restriction & Membership Plugin 4.3 Medium2022-11-29
CVE-2022-4031 Simple:Press <= 6.8 - Authenticated (Admin+) Path Traversal to Arbitrary File Modification — Simple:Press Forum 3.8 Low2022-11-29
CVE-2022-4030 Simple:Press <= 6.8 - Authenticated (Subscriber+) Path Traversal to Arbitrary File Deletion — Simple:Press Forum 8.1 High2022-11-29
CVE-2022-44635 Apache Fineract allowed an authenticated user to perform remote code execution due to path traversal — Apache Fineract 8.8 -2022-11-29
CVE-2022-41158 eyoom builder Remote Code Execution Vulnerability — eyoom builder 7.2 High2022-11-25
CVE-2022-40977 PILZ: PASvisu and PMI affected by ZipSlip — PASvisu 7.5 High2022-11-24
CVE-2022-40976 PILZ: Multiple products affected by ZipSlip — PAScal 5.5 Medium2022-11-24
CVE-2022-44749 Opening workflows from untrusted resources may override arbitrary file system contents — KNIME Analytics Platform 5.5 Medium2022-11-24
CVE-2022-44748 Uploading workflows to KNIME Server may override arbitrary file system contents — KNIME Server 7.1 High2022-11-24
CVE-2022-4065 cbeust testng XML File Parser JarFileUtils.java testngXmlExistsInJar path traversal — testng 5.5 Medium2022-11-19
CVE-2022-41840 WordPress Welcart eCommerce plugin <= 2.7.7 - Unauth. Directory Traversal vulnerability — Welcart e-Commerce (WordPress plugin) 7.5 High2022-11-18
CVE-2022-3090 Red Lion Controls Crimson 路径遍历漏洞 — Crimson 3.0 7.5 High2022-11-17
CVE-2022-41920 Zip slip in Lancet — lancet 6.3 Medium2022-11-17
CVE-2022-39347 Missing path sanitation with `drive` channel in FreeRDP — FreeRDP 2.6 Low2022-11-16
CVE-2022-3966 Ultimate Member Plugin Template class-shortcodes.php load_template pathname traversal — Ultimate Member Plugin 4.3 Medium2022-11-13
CVE-2022-3976 MZ Automation libiec61850 MMS File Services mms_client_files.c path traversal — libiec61850 5.5 Medium2022-11-13
CVE-2022-3939 lanyulei ferry API file.go path traversal — ferry 6.3 Medium2022-11-11
CVE-2022-3940 lanyulei ferry task.go path traversal — ferry 3.5 Low2022-11-11
CVE-2022-41607 ETIC Telecom Remote Access Server Path Traversal — Remote Access Server (RAS) 6.2 Medium2022-11-10
CVE-2022-43753 SUMA/UYUNI arbitrary file disclosure vulnerability in ScapResultDownload — SUSE Linux Enterprise Module for SUSE Manager Server 4.2 4.3 Medium2022-11-10

Vulnerabilities classified as CWE-22 (对路径名的限制不恰当(路径遍历)) represent 3357 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.