Weaknesses of type CWE-22

4,771 results
CVE-2021-43783HIGHPath Traversal in @backstage/plugin-scaffolder-backendEPSS 1.2%CVE-2019-25355HIGHGenivia gSOAP 2.8 - 'gSOAP' Path TraversalEPSS 1.2%CVE-2022-20724MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 1.2%CVE-2021-3916MEDIUMPath Traversal in bookstackapp/bookstackEPSS 1.2%CVE-2023-24449MEDIUMJenkins PWauth Security Realm Plugin 0.4 and earlier does not restrict the names of files in methods implementing form validation, allowing EPSS 1.2%CVE-2021-41152HIGHPath Traversal in Folder Component Leading to Local File InclusionEPSS 1.2%CVE-2021-47850HIGHMini Mouse 9.2.0 - Path TraversalEPSS 1.2%CVE-2024-29180HIGHwebpack-dev-middleware Path Traversal vulnerabilityEPSS 1.2%CVE-2016-10528—restafary is a REpresentful State Transfer API for Creating, Reading, Using, Deleting files on a server from the web. Restafary before 1.6.1EPSS 1.2%CVE-2023-29736CRITICALKeyboard Themes 1.275.1.164 for Android contains a dictionary traversal vulnerability that allows unauthorized apps to overwrite arbitrary fEPSS 1.2%CVE-2022-41231MEDIUMJenkins Build-Publisher Plugin 1.22 and earlier allows attackers with Item/Configure permission to create or replace any config.xml file on EPSS 1.2%CVE-2022-20721MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 1.2%CVE-2024-7950CRITICALWP Job Portal <= 2.1.6 - Missing Authorization to Unauthenticated Local File Inclusion, Arbitrary Settings Update, and User CreationEPSS 1.2%CVE-2022-20722MEDIUMCisco IOx Application Hosting Environment VulnerabilitiesEPSS 1.2%CVE-2025-61666HIGHTraccar Unauthenticated Local File Inclusion on Windows - Leakage of Traccar Config FileEPSS 1.2%CVE-2026-9775MEDIUMATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion VulnerabilityEPSS 1.2%CVE-2026-9774MEDIUMATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion VulnerabilityEPSS 1.2%CVE-2022-4779HIGHauthentication bypass in elvexys StreamX using StreamView HTML component with public web server featureEPSS 1.2%CVE-2026-8713CRITICALAvada (Fusion) Builder <= 3.15.3 - Unauthenticated Arbitrary File Deletion via Form Entry ValueEPSS 1.2%CVE-2022-46309MEDIUMGalaxy Software Services Corporation. Vitals ESP - Arbitrary Path File ReadingEPSS 1.2%