Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

CVEs (10,890)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2019-10220 3Canonical DebianLinux 3Debian Linux Linux KernelUbuntu Linux Jun 17, 2026 Nov 27, 2019 N/A· v4 8.8 HIGH· v3 9.3 HIGH· v2 Linux kernel CIFS implementation, version 4.9.0 is vulnerable to a relative paths injection in directory entry lists.
CVE-2015-9538 1Imagely 1Nextgen Gallery Nov 21, 2024 Nov 26, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection.
CVE-2011-4350 2Debian Yaws 2Debian Linux Yaws Nov 21, 2024 Nov 26, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request.
CVE-2019-16765 1Microsoft 1Codeql Jun 17, 2026 Nov 25, 2019 N/A· v4 7.8 HIGH· v3 6.8 MEDIUM· v2 If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbitrary code of the attacker's choosing may be executed on the user's beh...Show more If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbitrary code of the attacker's choosing may be executed on the user's behalf. This is fixed in version 1.0.1 of the extension. Users should upgrade to this version using Visual Studio Code Marketplace's upgrade mechanism. After upgrading, the codeQL.cli.executablePath setting can only be set in the per-user settings, and not in the per-workspace settings. More information about VS Code settings can be found here.Show less
CVE-2019-17406 1Nokia 1Impact Jun 17, 2026 Nov 25, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Nokia IMPACT < 18A has path traversal that may lead to RCE if chained with CVE-2019-1743
CVE-2015-1396 2Debian Gnu 2Debian Linux Patch Nov 21, 2024 Nov 25, 2019 N/A· v4 7.5 HIGH· v3 6.4 MEDIUM· v2 A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-...Show more A Directory Traversal vulnerability exists in the GNU patch before 2.7.4. A remote attacker can write to arbitrary files via a symlink attack in a patch file. NOTE: this issue exists because of an incomplete fix for CVE-2015-1196.Show less
CVE-2019-17404 1Nokia 1Impact Jun 17, 2026 Nov 25, 2019 N/A· v4 4.3 MEDIUM· v3 4.0 MEDIUM· v2 Nokia IMPACT < 18A: allows full path disclosure
CVE-2019-13157 1Naver 1Vaccine Jun 17, 2026 Nov 22, 2019 N/A· v4 7.5 HIGH· v3 6.4 MEDIUM· v2 nsGreen.dll in Naver Vaccine 2.1.4 allows remote attackers to overwrite arbitary files via directory traversal sequences in a filename within nsz archive.
CVE-2013-3311 1Loftek 1Nexus 543 Firmware Nov 21, 2024 Nov 21, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 Directory traversal vulnerability in the Loftek Nexus 543 IP Camera allows remote attackers to read arbitrary files via a .. (dot dot) in the URL of an HTTP GET request.
CVE-2019-16758 1Lexmark 1Services Monitor Firmware Jun 17, 2026 Nov 21, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 In Lexmark Services Monitor 2.27.4.0.39 (running on TCP port 2070), a remote attacker can use a directory traversal technique using /../../../ or ..%2F..%2F..%2F to obtain local files on the host operating system.
CVE-2019-10767 1Iobroker 1Iobroker.js Controller Jun 17, 2026 Nov 21, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". It is exploited using the administrative web panel with a request for an adap...Show more An attacker can include file contents from outside the `/adapter/xxx/` directory, where `xxx` is the name of an existent adapter like "admin". It is exploited using the administrative web panel with a request for an adapter file. Note: The attacker has to be logged in if the authentication is enabled (by default isn't enabled).Show less
CVE-2019-16540 1Jenkins 1Support Core Jun 17, 2026 Nov 21, 2019 N/A· v4 6.5 MEDIUM· v3 5.5 MEDIUM· v2 A path traversal vulnerability in Jenkins Support Core Plugin 2.63 and earlier allows attackers with Overall/Read permission to delete arbitrary files on the Jenkins master.
CVE-2019-10765 1Iobroker 1Iobroker.admin Jun 17, 2026 Nov 20, 2019 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 iobroker.admin before 3.6.12 allows attacker to include file contents from outside the `/log/file1/` directory.
CVE-2019-3423 1Ztehome 1C520v21 Firmware Jun 17, 2026 Nov 18, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 permission and access control vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can construct a URL for directory traversal and access to other unauthorized files or r...Show more permission and access control vulnerability, which exists in V2.1.14 and below versions of C520V21 smart camera devices. An attacker can construct a URL for directory traversal and access to other unauthorized files or resources.Show less
CVE-2019-18978 3Canonical DebianRack Cors Project 3Debian Linux Rack CorsUbuntu Linux Jun 17, 2026 Nov 14, 2019 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in...Show more An issue was discovered in the rack-cors (aka Rack CORS Middleware) gem before 1.0.4 for Ruby. It allows ../ directory traversal to access private resources because resource matching does not ensure that pathnames are in a canonical format.Show less
CVE-2013-3073 1Netgear 1Wndr4700 Firmware Nov 21, 2024 Nov 14, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 A Symlink Traversal vulnerability exists in NETGEAR Centria WNDR4700 Firmware 1.0.0.34.
CVE-2019-3662 1Mcafee 1Advanced Threat Defense Jun 17, 2026 Nov 14, 2019 N/A· v4 6.5 MEDIUM· v3 4.0 MEDIUM· v2 Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to gain unintended access to files on the system via carefully constructed...Show more Path Traversal: '/absolute/pathname/here' vulnerability in McAfee Advanced Threat Defense (ATD) prior to 4.8 allows remote authenticated attacker to gain unintended access to files on the system via carefully constructed HTTP requests.Show less
CVE-2019-18951 1Sibsoft 1Xfilesharing Jun 17, 2026 Nov 13, 2019 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 SibSoft Xfilesharing through 2.5.1 allows op=page&tmpl=../ directory traversal to read arbitrary files.
CVE-2013-4657 1Netgear 2Wnr3500l Firmware Wnr3500u Firmware Nov 21, 2024 Nov 13, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Symlink Traversal vulnerability in NETGEAR WNR3500U and WNR3500L due to misconfiguration in the SMB service.
CVE-2013-4654 1Tp Link 2Tl 1043nd Firmware Tl Wdr4300 Firmware Nov 21, 2024 Nov 13, 2019 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 Symlink Traversal vulnerability in TP-LINK TL-WDR4300 and TL-1043ND..

Previous 1...383384385...545 Next