Weaknesses of type CWE-22

4,785 results
CVE-2025-9566HIGHPodman: podman kube play command may overwrite host filesEPSS 1.0%CVE-2022-46171MEDIUMTauri vulnerable to path traversalEPSS 1.0%CVE-2024-5147CRITICALWPZOOM Addons for Elementor (Templates, Widgets) <= 1.1.37 - Unauthenticated Local File InclusionEPSS 1.0%CVE-2024-34060HIGHArbitrary File Write in IRIS EVTX PipelineEPSS 1.0%CVE-2022-0673—A flaw was found in LemMinX in versions prior to 0.19.0. Cache poisoning of external schema files due to directory traversal.EPSS 1.0%CVE-2022-36113MEDIUMExtracting malicious crates can corrupt arbitrary filesEPSS 1.0%CVE-2024-6707HIGHOpen WebUI Arbitrary File Upload + Path TraversalEPSS 1.0%CVE-2023-48166HIGHA directory traversal vulnerability in the SOAP Server integrated in Atos Unify OpenScape Voice V10 before V10R3.26.1 allows a remote attackEPSS 1.0%CVE-2025-32779MEDIUMlabsai/eddi Vulnerable to Path Traversal (Zip Slip) in ZIP Import FunctionEPSS 1.0%CVE-2023-45686HIGHArbitrary file write via WebDAV path traversal in Titan MFT and Titan SFTP serversEPSS 1.0%CVE-2025-2328HIGHDrag and Drop Multiple File Upload for Contact Form 7 <= 1.3.8.7 - Unauthenticated Arbitrary File DeletionEPSS 1.0%CVE-2024-5153CRITICALStartklar Elementor Addons <= 1.7.15 - Unauthenticated Path Traversal to Arbitrary Directory DeletionEPSS 1.0%CVE-2025-1282HIGHCar Dealer Automotive WordPress Theme – Responsive <= 1.6.3 - Authenticated (Subscriber+) Arbitrary File Deletion and ReadEPSS 1.0%CVE-2024-34033HIGHPath Traversal vulnerability in Delta Electronics DIAEnergie EPSS 1.0%CVE-2023-30620HIGHArbitrary File Write when Extracting a Remotely retrieved Tarball in mindsdb/mindsdbEPSS 1.0%CVE-2023-30852MEDIUMPimcore Arbitrary File Read in Admin JS CSS filesEPSS 1.0%CVE-2021-33724—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system contains an Arbitrary File DeletionEPSS 1.0%CVE-2023-23169MEDIUMSynapsoft pdfocus 1.17 is vulnerable to local file inclusion and server-side request forgery Directory Traversal.EPSS 1.0%CVE-2021-33725—A vulnerability has been identified in SINEC NMS (All versions < V1.0 SP2 Update 1). The affected system allows to delete arbitrary files orEPSS 1.0%CVE-2022-29253LOWPath Traversal in XWiki PlatformEPSS 1.0%