Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CWE-36 (绝对路径遍历) — Vulnerability Class 103

103 vulnerabilities classified as CWE-36 (绝对路径遍历). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2025-53079 SAMSUNG DMS 安全漏洞 — Data Management Server 4.9 Medium2025-07-29
CVE-2025-8009 Security Ninja – Secure Firewall & Secure Malware Scanner - 5.201 - 5.242 - Authenticated (Administrator+) Arbitrary File Read — Security Ninja – WordPress Security Plugin & Firewall 4.9 Medium2025-07-24
CVE-2025-6381 BeeTeam368 Extensions <= 2.3.4 - Authenticated (Subscriber+) Directory Traversal to Arbitrary File Deletion — BeeTeam368 Extensions 8.8 High2025-06-28
CVE-2025-53392 Netgate pfSense CE 安全漏洞 — pfSense 5.0 Medium2025-06-28
CVE-2025-5927 Everest Forms (Pro) <= 1.9.4 - Unauthenticated Path Traversal to Arbitrary File Deletion — Everest Forms Pro 7.5 High2025-06-25
CVE-2025-4799 WP-DownloadManager <= 1.68.10 - Authenticated (Administrator+) Arbitrary File Deletion — WP-DownloadManager 7.2 High2025-06-11
CVE-2025-36574 Dell Wyse Management Suite WMS 安全漏洞 — Wyse Management Suite 8.2 High2025-06-10
CVE-2024-13945 Stored Absolute Path Traversal — ASPECT-Enterprise 6.0 Medium2025-05-23
CVE-2024-48850 Authenticated Absolute Path Traversal — ASPECT-Enterprise 7.2 High2025-05-22
CVE-2025-46822 Unauthenticated Arbitrary File Read via Absolute Path — Java-springboot-codebase 7.5AIHighAI2025-05-21
CVE-2024-10833 Arbitrary File Write in eosphoros-ai/db-gpt — eosphoros-ai/db-gpt 8.8 -2025-03-20
CVE-2024-12375 Local File Inclusion in automatic1111/stable-diffusion-webui — automatic1111/stable-diffusion-webui 7.5 -2025-03-20
CVE-2024-6854 Arbitrary File Overwrite in h2oai/h2o-3 — h2oai/h2o-3 7.5 -2025-03-20
CVE-2024-10047 Directory Listing Vulnerability in parisneo/lollms-webui — parisneo/lollms-webui 5.3 -2025-03-20
CVE-2024-10831 Arbitrary File Write through Absolute Path Traversal in eosphoros-ai/db-gpt — eosphoros-ai/db-gpt 7.5 -2025-03-20
CVE-2024-8501 Arbitrary File Download in modelscope/agentscope — modelscope/agentscope 8.8 -2025-03-20
CVE-2024-48248 Nakivo Backup & Replication 安全漏洞 — Backup & Replication Director 8.6 High2025-03-04
CVE-2025-0001 authenticated arbitrary file read vulnerability — Abacus 6.5 Medium2025-02-17
CVE-2024-6097 Absolute Path Traversal Vulnerability — Progress® Telerik® Reporting 5.3 Medium2025-02-12
CVE-2024-57966 KDE Ark 安全漏洞 — ark 5.0 Medium2025-02-03
CVE-2025-0851 Path traversal issue in Deep Java Library — DeepJavaLibrary 9.8 Critical2025-01-29
CVE-2024-13159 Ivanti EPM 安全漏洞 — Endpoint Manager 9.8 Critical2025-01-14
CVE-2024-13160 Ivanti EPM 安全漏洞 — Endpoint Manager 9.8 Critical2025-01-14
CVE-2024-13161 Ivanti EPM 安全漏洞 — Endpoint Manager 9.8 Critical2025-01-14
CVE-2024-10811 Ivanti EPM 安全漏洞 — Endpoint Manager 9.8 Critical2025-01-14
CVE-2024-51549 Absolute Path Traversal — ASPECT-Enterprise 10.0 Critical2024-12-05
CVE-2024-11978 Interinfo DreamMaker - Arbitrary File Reading through Path Traversal — DreamMaker 7.5 High2024-11-29
CVE-2024-10651 CHANGING Information Technology IDExpert - Arbitrary File Read through Path Traversal — IDExpert 4.9 Medium2024-11-01
CVE-2024-47883 Butterfly has path/URL confusion in resource handling leading to multiple weaknesses — simile-butterfly 9.1 Critical2024-10-24
CVE-2024-20379 Cisco Secure Firewall Management Center 安全漏洞 — Cisco Firepower Management Center 6.5 Medium2024-10-23

Vulnerabilities classified as CWE-36 (绝对路径遍历) represent 103 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.