Weaknesses of type CWE-22

4,841 results
CVE-2023-39401CRITICALParameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be reaEPSS 0.4%CVE-2026-27969CRITICALVitess users with backup storage access can write to arbitrary file paths on restoreEPSS 0.4%CVE-2025-48267HIGHWordPress WP Pipes plugin <= 1.4.2 - Arbitrary File Deletion VulnerabilityEPSS 0.4%CVE-2025-64757LOWAstro Development Server is Vulnerable to Arbitrary Local File ReadEPSS 0.4%CVE-2025-49879HIGHWordPress Litho theme <= 3.0 - Arbitrary File Deletion VulnerabilityEPSS 0.4%CVE-2023-39402CRITICALParameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be reaEPSS 0.4%CVE-2023-39400CRITICALParameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be reaEPSS 0.4%CVE-2025-3547MEDIUMfrdel Agent-Zero get_work_dir_files path traversalEPSS 0.4%CVE-2026-11846HIGHIEI Integration Corp｜iVEC-IEI Virtualization Edge Computer - Arbitrary File DeletionEPSS 0.4%CVE-2026-40258CRITICALGramps Web API has Zip Slip Path Traversal in Media Archive ImportEPSS 0.4%CVE-2025-27299MEDIUMWordPress MyTicket Events plugin <= 1.2.4 - Non-Arbitrary File Read vulnerabilityEPSS 0.4%CVE-2023-38176HIGHAzure Arc-Enabled Servers Elevation of Privilege VulnerabilityEPSS 0.4%CVE-2020-12499HIGHPHOENIX CONTACT PLCnext Engineer version 2020.3.1 and earlier: Improper path sanitation vulnerability.EPSS 0.4%CVE-2026-24488MEDIUMOpenEMR Vulnerable to Arbitrary File Exfiltration via Fax EndpointEPSS 0.4%CVE-2026-30893CRITICALWazuh cluster sync path traversal in decompress_files() enables arbitrary file write and code execution from authenticated cluster peerEPSS 0.4%CVE-2025-6020HIGHLinux-pam: linux-pam directory traversalEPSS 0.4%CVE-2026-32733HIGHHalloy has a file transfer path traveral vulnerabilityEPSS 0.4%CVE-2026-47277MEDIUMRuntipi: Unauthenticated arbitrary file read through app-store logo symlinksEPSS 0.4%CVE-2024-53844MEDIUMImproper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in labsai/eddiEPSS 0.4%CVE-2022-46305MEDIUMChangingTec ServiSign - Path TraversalEPSS 0.4%