Weaknesses of type CWE-22

4,804 results
CVE-2016-20081HIGHWordPress Plugin HB Audio Gallery Lite 1.0.0 Path Traversal File DownloadEPSS 0.6%CVE-2018-25326HIGHGoogle Drive for WordPress 2.2 Path Traversal RCE via gdrive-ajaxs.phpEPSS 0.6%CVE-2017-20250HIGHWordPress Plugin Mac Photo Gallery 3.0 Arbitrary File DownloadEPSS 0.6%CVE-2022-3940LOWlanyulei ferry task.go path traversalEPSS 0.6%CVE-2017-20248HIGHWordPress Plugin Apptha Slider Gallery 1.0 Path Traversal File DownloadEPSS 0.6%CVE-2025-15449MEDIUMcld378632668 JavaMall MinioController.java delete path traversalEPSS 0.6%CVE-2026-30286CRITICALAn arbitrary file overwrite vulnerability in Funambol, Inc. Zefiro Cloud v32.0.2026011614 allows attackers to overwrite critical internal fiEPSS 0.6%CVE-2025-65418HIGHdocuFORM Managed Print Service Client 11.11c is vulnerable to a directory traversal allowing attackers to read arbitrary files via crafted uEPSS 0.6%CVE-2019-25333HIGHBullwark Momentum Series JAWS 1.0 - 'Momentum Series JAWS' Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')EPSS 0.6%CVE-2025-11336MEDIUMFour-Faith Water Conservancy Informatization Platform download.do;otherlogout.do path traversalEPSS 0.6%CVE-2025-11337MEDIUMFour-Faith Water Conservancy Informatization Platform download.do;othersusrlogout.do path traversalEPSS 0.6%CVE-2026-1921MEDIUMLoco Translate <= 2.8.2 - Authenticated (Translator+) Path Traversal to Limited File Read via 'ref' ParameterEPSS 0.6%CVE-2024-12217MEDIUMPath Traversal in gradio-app/gradioEPSS 0.6%CVE-2026-50234HIGHLyrion Music Server 9.2.0 Path Traversal File ReadEPSS 0.6%CVE-2026-28769MEDIUMLFI in /IDC_Logging/checkifdone.cgi, "file" parameter Allowing for File Existence Enumeration On IDC Satellite Receiver Web Management Interface Version 101EPSS 0.6%CVE-2026-23593HIGHUnauthenticated Limited File Read allows Data Exposure in Web InterfaceEPSS 0.6%CVE-2024-41717CRITICALKieback&Peter DDC4000 Series Path TraversalEPSS 0.6%CVE-2024-42007MEDIUMSPX (aka php-spx) through 0.4.15 allows SPX_UI_URI Directory Traversal to read arbitrary files.EPSS 0.6%CVE-2025-27716MEDIUMImproper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in the file/folder listing process of the USB stEPSS 0.6%CVE-2024-43440HIGHMoodle: lfi vulnerability when restoring malformed block backupsEPSS 0.6%