Total
7067 CVE
| CVE | Vendors | Products | Updated | CVSS v3.1 |
|---|---|---|---|---|
| CVE-2022-39034 | 1 Lcnet | 1 Smart Evision | 2024-11-21 | 6.5 Medium |
| Smart eVision has a path traversal vulnerability in the Report API function due to insufficient filtering for special characters in URLs. A remote attacker with general user privilege can exploit this vulnerability to bypass authentication, access restricted paths and download system files. | ||||
| CVE-2022-39033 | 1 Lcnet | 1 Smart Evision | 2024-11-21 | 9.8 Critical |
| Smart eVision’s file acquisition function has a path traversal vulnerability due to insufficient filtering for special characters in the URL parameter. An unauthenticated remote attacker can exploit this vulnerability to bypass authentication, access restricted paths to download and delete arbitrary system files to disrupt service. | ||||
| CVE-2022-39023 | 1 Edetw | 1 U-office Force | 2024-11-21 | 6.5 Medium |
| U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file. | ||||
| CVE-2022-39022 | 1 Edetw | 1 U-office Force | 2024-11-21 | 6.5 Medium |
| U-Office Force Download function has a path traversal vulnerability. A remote attacker with general user privilege can exploit this vulnerability to download arbitrary system file. | ||||
| CVE-2022-39001 | 1 Huawei | 3 Emui, Harmonyos, Magic Ui | 2024-11-21 | 7.5 High |
| The number identification module has a path traversal vulnerability. Successful exploitation of this vulnerability may cause data disclosure. | ||||
| CVE-2022-38794 | 1 Zaver Project | 1 Zaver | 2024-11-21 | 7.5 High |
| Zaver through 2020-12-15 allows directory traversal via the GET /.. substring. | ||||
| CVE-2022-38723 | 1 Gravitee | 1 Api Management | 2024-11-21 | 8.6 High |
| Gravitee API Management before 3.15.13 allows path traversal through HTML injection. | ||||
| CVE-2022-38638 | 1 Casbin | 1 Casdoor | 2024-11-21 | 9.1 Critical |
| Casdoor v1.97.3 was discovered to contain an arbitrary file write vulnerability via the fullFilePath parameter at /api/upload-resource. | ||||
| CVE-2022-38614 | 1 Bpcbt | 1 Smartvista Cardgen | 2024-11-21 | 7.5 High |
| An issue in the IGB Files and OutfileService features of SmartVista Cardgen v3.28.0 allows attackers to list and download arbitrary files via modifying the PATH parameter. | ||||
| CVE-2022-38613 | 1 Bpcbt | 1 Smartvista Cardgen | 2024-11-21 | 6.5 Medium |
| A Path Traversal vulnerability in SmartVista Cardgen v3.28.0 allows authenticated attackers to read arbitrary files in the system. | ||||
| CVE-2022-38485 | 1 Agevolt | 1 Agevolt | 2024-11-21 | 6.5 Medium |
| A directory traversal vulnerability exists in the AgeVolt Portal prior to version 0.1 that leads to Information Disclosure. A remote authenticated attacker could leverage this vulnerability to read files from any location on the target operating system with web server privileges. | ||||
| CVE-2022-38484 | 1 Agevolt | 1 Agevolt | 2024-11-21 | 8.8 High |
| An arbitrary file upload and directory traversal vulnerability exist in the file upload functionality of the System Setup menu in AgeVolt Portal prior to version 0.1. A remote authenticated attacker could leverage this vulnerability to upload files to any location on the target operating system with web server privileges. | ||||
| CVE-2022-38451 | 2 Freshtomato, Siretta | 3 Freshtomato, Quartz-gold, Quartz-gold Firmware | 2024-11-21 | 7.5 High |
| A directory traversal vulnerability exists in the httpd update.cgi functionality of FreshTomato 2022.5. A specially crafted HTTP request can lead to arbitrary file read. An attacker can send an HTTP request to trigger this vulnerability. | ||||
| CVE-2022-38424 | 1 Adobe | 1 Coldfusion | 2024-11-21 | 7.2 High |
| Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary file system write. Exploitation of this issue does not require user interaction, but does require administrator privileges. | ||||
| CVE-2022-38423 | 1 Adobe | 1 Coldfusion | 2024-11-21 | 4.9 Medium |
| Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in information disclosure. Exploitation of this issue does not require user interaction, but does require administrator privileges. | ||||
| CVE-2022-38422 | 1 Adobe | 1 Coldfusion | 2024-11-21 | 7.5 High |
| Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in information disclosure. Exploitation of this issue does not require user interaction. | ||||
| CVE-2022-38421 | 1 Adobe | 1 Coldfusion | 2024-11-21 | 7.2 High |
| Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction, but does require administrator privileges. | ||||
| CVE-2022-38418 | 1 Adobe | 1 Coldfusion | 2024-11-21 | 9.8 Critical |
| Adobe ColdFusion versions Update 14 (and earlier) and Update 4 (and earlier) are affected by an Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue does not require user interaction. | ||||
| CVE-2022-38340 | 1 Safe | 1 Fme Server | 2024-11-21 | 9.1 Critical |
| Safe Software FME Server v2021.2.5, v2022.0.0.2 and below was discovered to contain a Path Traversal vulnerability via the component fmedataupload. | ||||
| CVE-2022-38301 | 1 Onedev Project | 1 Onedev | 2024-11-21 | 8.8 High |
| Onedev v7.4.14 contains a path traversal vulnerability which allows attackers to access restricted files and directories via uploading a crafted JAR file into the directory /opt/onedev/lib. | ||||