Weaknesses of type CWE-22

4,734 results
CVE-2019-19297HIGHA vulnerability has been identified in SiNVR/SiVMS Video Server (All versions < V5.0.0). The streaming service (default port 5410/tcp) of thEPSS 2.7%CVE-2023-40514MEDIUMLG Simple Editor FileManagerController getImageByFilename Directory Traversal Information Disclosure VulnerabilityEPSS 2.7%CVE-2023-40513MEDIUMLG Simple Editor UserManageController getImageByFilename Directory Traversal Information Disclosure VulnerabilityEPSS 2.7%CVE-2023-40512MEDIUMLG Simple Editor PlayerController getImageByFilename Directory Traversal Information Disclosure VulnerabilityEPSS 2.7%CVE-2023-3533CRITICALChamilo LMS Unauthenticated Remote Code Execution via Arbitrary File WriteEPSS 2.7%CVE-2024-1483HIGHPath Traversal Vulnerability in mlflow/mlflowEPSS 2.7%CVE-2023-42033HIGHVisualware MyConnection Server doPostUploadfiles Directory Traversal Remote Code Execution VulnerabilityEPSS 2.7%CVE-2019-25213CRITICALAdvanced Access Manager <= 5.9.8.1 - Unauthenticated Arbitrary File ReadEPSS 2.7%CVE-2025-24786CRITICALPath traversal opening Sqlite3 database in WhoDBEPSS 2.7%CVE-2026-25895CRITICALFUXA Unauthenticated Remote Code Execution via Arbitrary File Write in Upload APIEPSS 2.7%CVE-2022-23457HIGHPath Traversal in ESAPIEPSS 2.7%CVE-2021-1385MEDIUMCisco IOx Application Environment Path Traversal VulnerabilityEPSS 2.7%CVE-2012-10048HIGHZenoss 3.x showDaemonXMLConfig Command ExecutionEPSS 2.7%CVE-2021-22651—When loading a specially crafted file, Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1, Luxion KeyShot NEPSS 2.6%CVE-2020-3401MEDIUMCisco SD-WAN vManage Software Path Traversal VulnerabilityEPSS 2.6%CVE-2020-3381HIGHCisco SD-WAN vManage Software Directory Traversal VulnerabilityEPSS 2.6%CVE-2012-10054CRITICALUmbraco CMS < 4.7.1 codeEditorSave.asmx RCEEPSS 2.6%CVE-2021-24375—Motor theme < 3.1.0 - Local File InclusionEPSS 2.6%CVE-2018-14654MEDIUMThe Gluster file system through version 4.1.4 is vulnerable to abuse of the 'features/index' translator. A remote attacker with access to moEPSS 2.6%CVE-2025-30567HIGHWordPress WP01 plugin <= 2.6.2 - Arbitrary File Download VulnerabilityEPSS 2.6%