Weaknesses of type CWE-22

4,766 results
CVE-2018-3715—glance node module before 3.0.4 suffers from a Path Traversal vulnerability due to lack of validation of path passed to it, which allows a mEPSS 1.4%CVE-2022-2945MEDIUMWordPress Infinite Scroll – Ajax Load More <= 5.5.3 - Directory TraversalEPSS 1.4%CVE-2019-25687CRITICALPegasus CMS 1.0 Remote Code Execution via extra_fields.phpEPSS 1.4%CVE-2022-46137HIGHAeroCMS v0.0.1 is vulnerable to Directory Traversal. The impact is: obtain sensitive information (remote). The component is: AeroCMS v0.0.1.EPSS 1.4%CVE-2021-33005HIGHmySCADA myPRO Path TraversalEPSS 1.4%CVE-2025-58438CRITICALinternetarchive is vulnerable to Directory Traversal through file downloadsEPSS 1.4%CVE-2019-3902MEDIUMA flaw was found in Mercurial before 4.9. It was possible to use symlinks and subrepositories to defeat Mercurial's path-checking logic and EPSS 1.4%CVE-2022-34026HIGHICEcoder v8.1 allows attackers to execute a directory traversal.EPSS 1.4%CVE-2022-48285HIGHloadAsync in JSZip before 3.8.0 allows Directory Traversal via a crafted ZIP archive.EPSS 1.4%CVE-2022-34662MEDIUMApache DolphinScheduler prior to 3.0.0 allows path traversalEPSS 1.4%CVE-2025-34023HIGHKarel IP Phone IP1211 Path TraversalEPSS 1.4%CVE-2021-34860MEDIUMThis vulnerability allows network-adjacent attackers to disclose sensitive information on affected installations of D-Link DAP-2020 1.01rc00EPSS 1.4%CVE-2020-10634—SAE IT-systems FW-50 Remote Telemetry Unit (RTU). A specially crafted request could allow an attacker to view the file structure of the affeEPSS 1.4%CVE-2023-24960HIGHIBM InfoSphere Information Server information disclosureEPSS 1.4%CVE-2023-45685CRITICALArbitrary file write via "zip slip" in Titan MFT and Titan SFTP serversEPSS 1.4%CVE-2021-41131HIGHClient metadata path-traversal in python-tufEPSS 1.4%CVE-2025-23084MEDIUMA vulnerability has been identified in Node.js, specifically affecting the handling of drive names in the Windows environment. Certain Node.EPSS 1.4%CVE-2010-10012HIGHhttpdASM 0.92 Path TraversalEPSS 1.4%CVE-2026-27606HIGHRollup 4 has Arbitrary File Write via Path TraversalEPSS 1.4%CVE-2025-49656HIGHApache Jena: Administrative users can create files outside the server directory space via the admin UIEPSS 1.4%