Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CVEs (9,563)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-0231 1Juniper 1Junos Jun 17, 2026 Apr 22, 2021 N/A· v4 6.5 MEDIUM· v3 6.8 MEDIUM· v2 A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 v...Show more A path traversal vulnerability in the Juniper Networks SRX and vSRX Series may allow an authenticated J-web user to read sensitive system files. This issue affects Juniper Networks Junos OS on SRX and vSRX Series: 19.3 versions prior to 19.3R2-S6, 19.3R3-S1; 19.4 versions prior to 19.4R2-S4, 19.4R3; 20.1 versions prior to 20.1R1-S4, 20.1R2; 20.2 versions prior to 20.2R1-S3, 20.2R2; This issue does not affect Juniper Networks Junos OS versions prior to 19.3R1.Show less
CVE-2021-27278 1Parallels 1Parallels Desktop Jun 17, 2026 Apr 22, 2021 N/A· v4 8.2 HIGH· v3 4.6 MEDIUM· v2 This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest...Show more This vulnerability allows local attackers to escalate privileges on affected installations of Parallels Desktop 16.1.1-49141. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists within the Toolgate component. The issue results from the lack of proper validation of a user-supplied path prior to using it in file operations. An attacker can leverage this vulnerability to escalate privileges and execute code in the context of the current user on the host system. Was ZDI-CAN-12130.Show less
CVE-2020-7861 1Anysupport 1Anysupport Jun 17, 2026 Apr 22, 2021 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 AnySupport (Remote support solution) before 2019.3.21.0 allows directory traversing because of swprintf function to copy file from a management PC to a client PC. This can be lead to arbitrary file execution.
CVE-2020-7858 1Cdnetworks 1Aquanplayer Jun 17, 2026 Apr 22, 2021 N/A· v4 8.6 HIGH· v3 5.0 MEDIUM· v2 There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhost and an attacker can traverse directories using "dot dot" sequences(../../) to v...Show more There is a directory traversing vulnerability in the download page url of AquaNPlayer 2.0.0.92. The IP of the download page url is localhost and an attacker can traverse directories using "dot dot" sequences(../../) to view host file on the system. This vulnerability can cause information leakage.Show less
CVE-2021-29466 1Discord 1Discord Recon Jun 17, 2026 Apr 22, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is able to read local files from the server that can disclose important information. As a workaround, a...Show more Discord-Recon is a bot for the Discord chat service. In versions of Discord-Recon 0.0.3 and prior, a remote attacker is able to read local files from the server that can disclose important information. As a workaround, a bot maintainer can locate the file `app.py` and add `.replace('..', '')` into the `Path` variable inside of the `recon` function. The vulnerability is patched in version 0.0.4.Show less
CVE-2021-20023 1Sonicwall 11Email Security Email Security Appliance 3300 FirmwareEmail Security Appliance 4300 Firmware+8 more Jun 17, 2026 Apr 20, 2021 N/A· v4 4.9 MEDIUM· v3 4.0 MEDIUM· v2 SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host.
CVE-2021-27030 1Autodesk 1Fbx Review Jun 17, 2026 Apr 19, 2021 N/A· v4 7.8 HIGH· v3 9.3 HIGH· v2 A user may be tricked into opening a malicious FBX file which may exploit a Directory Traversal Remote Code Execution vulnerability in FBX’s Review causing it to run arbitrary code on the system.
CVE-2021-22720 1Schneider Electric 1C Bus Toolkit Jun 17, 2026 Apr 13, 2021 N/A· v4 7.2 HIGH· v3 6.5 MEDIUM· v2 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring a project.
CVE-2021-22719 1Schneider Electric 1C Bus Toolkit Jun 17, 2026 Apr 13, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when a file is uploaded.
CVE-2021-22718 1Schneider Electric 1C Bus Toolkit Jun 17, 2026 Apr 13, 2021 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when restoring project files.
CVE-2021-22717 1Schneider Electric 1C Bus Toolkit Jun 17, 2026 Apr 13, 2021 N/A· v4 8.8 HIGH· v3 6.5 MEDIUM· v2 A CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability exists in C-Bus Toolkit (V1.15.7 and prior) that could allow a remote code execution when processing config files.
CVE-2021-29425 4Apache DebianNetapp+1 more 60Access Manager Active Iq Unified ManagerAgile Engineering Data Management+57 more Jun 17, 2026 Apr 13, 2021 N/A· v4 4.8 MEDIUM· v3 5.8 MEDIUM· v2 In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files...Show more In Apache Commons IO before 2.7, When invoking the method FileNameUtils.normalize with an improper input string, like "//../foo", or "\\..\foo", the result would be the same value, thus possibly providing access to files in the parent directory, but not further above (thus "limited" path traversal), if the calling code would use the result to construct a path value.Show less
CVE-2021-22190 1Gitlab 1Gitlab Jun 17, 2026 Apr 12, 2021 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 A path traversal vulnerability via the GitLab Workhorse in all versions of GitLab could result in the leakage of a JWT token
CVE-2021-25361 1Google 1Android Jun 17, 2026 Apr 9, 2021 N/A· v4 8.8 HIGH· v3 7.2 HIGH· v2 An improper access control vulnerability in stickerCenter prior to SMR APR-2021 Release 1 allows local attackers to read or write arbitrary files of system process via untrusted applications.
CVE-2020-24137 1Wcms 1Wcms Jun 17, 2026 Apr 7, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the path parameter to wex/cssjs.php.
CVE-2020-24136 1Wcms 1Wcms Jun 17, 2026 Apr 7, 2021 N/A· v4 8.6 HIGH· v3 7.8 HIGH· v2 Directory traversal in Wcms 0.3.2 allows an attacker to read arbitrary files on the server that is running an application via the pagename parameter to wex/html.php.
CVE-2021-20692 1Eikisoft 1Archive Collectively Operation Utility Jun 17, 2026 Apr 7, 2021 N/A· v4 7.1 HIGH· v3 5.8 MEDIUM· v2 Directory traversal vulnerability in Archive collectively operation utility Ver.2.10.1.0 and earlier allows an attacker to create or overwrite files by leading a user to expand a malicious ZIP archives.
CVE-2020-13419 1Openiam 1Openiam Jun 17, 2026 Apr 6, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 OpenIAM before 4.2.0.3 allows Directory Traversal in the Batch task.
CVE-2021-28658 3Debian DjangoprojectFedoraproject 3Debian Linux DjangoFedora Jun 17, 2026 Apr 6, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vu...Show more In Django 2.2 before 2.2.20, 3.0 before 3.0.14, and 3.1 before 3.1.8, MultiPartParser allowed directory traversal via uploaded files with suitably crafted file names. Built-in upload handlers were not affected by this vulnerability.Show less
CVE-2021-28172 1Deltaflow Project 1Deltaflow Jun 17, 2026 Apr 6, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a Path Traversal vulnerability in the file download function of Vangene deltaFlow E-platform. Remote attackers can access credential data with this leakage.

Previous 1...286287288...479 Next