CWE:
 

Topic
Date
Author
Med.
Ulterius Server < 1.9.5.0 Directory Traversal
15.11.2017
Rick Osgood
Med.
3CX Phone System 15.5.3554.1 Directory Traversal
18.10.2017
Jens Regel
Med.
WordPress Smush Image 2.7.4.1 Directory Traversal
05.10.2017
Ricardo Sanchez
Med.
Cloudview NMS 2.00b Writable Directory Traversal Execution
17.09.2017
james fitts
Med.
Carlo Gavazzi Powersoft 2.1.1.1 Directory Traversal
15.09.2017
james fitts
Med.
Indusoft Web Studio - Directory Traversal Information Disclosure
14.09.2017
james fitts
Med.
Huawei HG255s Directory Traversal
08.09.2017
Ahmet Mersin
High
Automated Logic WebCTRL 6.1 Path Traversal Arbitrary File Write
23.08.2017
Gjoko 'LiquidWorm' Krs...
Low
Cisco DDR2200 / 2201v1 Insecure Direct Object Reference / Path Traversal
17.07.2017
Matheus Bernardes
Med.
Schneider Electric Pelco VideoXpert Core Admin Portal Directory Traversal
11.07.2017
Gjoko 'LiquidWorm' Krs...
Med.
Kaspersky Anti-Virus File Server 8.0.3.297 - Multiple Vulnerabilities
29.06.2017
CORE
Med.
WordPress Photo Gallery 1.3.34 / 1.3.42 Path Traversal
21.06.2017
Tom Adams
Med.
Home FTP Server 1.14.0 Build 176 Directory Traversal
31.05.2017
Sultan Albalawi
Med.
Trend Micro Threat Discovery Appliance 2.6.1062r1 logoff.cgi Directory Traversal
20.04.2017
Steven Seeley
Med.
XiongMai uc-http 1.0.0 Local File Inclusion / Directory Traversal
13.04.2017
keksec
Med.
MyBB <1.8.11 Directory Traversal
12.04.2017
Zhiyang Zeng
Med.
Miele Professional PG 8528 Directory Traversal
25.03.2017
Jens Regel
Med.
OpenSSH On Cygwin SFTP Client Directory Traversal
22.03.2017
jannh
Med.
HttpServer 1.0 Directory Traversal
20.03.2017
malwrforensics
High
dnaLIMS Code Execution / XSS / Traversal / Session Hijacking
11.03.2017
Nicholas von Pechmann
Med.
Joomla Akeeba Backup 5.2.5 Directory Traversal
08.03.2017
Persian Hack Team
High
Ettercap 0.8.2 Etterfilter Out-Of-Bounds Read
06.03.2017
AromalUllas
Med.
Simplessus Files 3.7.7 Path Traversal
19.02.2017
Dr. Adrian Vollmer
High
Trendmicro InterScan 6.5-SP2_Build_Linux_1548 Remote Root
18.02.2017
Matt Bergin (@thatguyl...
Med.
Trendmicro InterScan 6.5-SP2_Build_Linux_1548 Arbitrary File Write
18.02.2017
Matt Bergin
Med.
Coppermine Gallery 1.5.44 Directory Traversal
16.02.2017
Hacker Fantastic
Med.
Horos 2.1.0 Web Portal Remote Information Disclosure / Directory Traversal
18.12.2016
Gjoko 'LiquidWorm' Krs...
Med.
Shuttle Tech ADSL Wireless 920 WM XSS / Directory Traversal
06.12.2016
Persian Hack Team
High
Apache ActiveMQ 5.11.1 / 5.13.2 Directory Traversal / Command Execution
04.12.2016
David Jorm
Low
Biesta Billing 4.0 Beta Cross Site Request Forgery / Traversal
29.11.2016
TaurusOmar
High
Crestron AM-100 1.2.1 Path Traversal / Hard-Coded Credentials
23.11.2016
Zach Lanier
Low
Atlassian Confluence AppFusions Doxygen 1.3.0 Path Traversal
22.11.2016
RCE
Med.
SAP NetWeaver AS ABAP 7.4 Directory Traversal
19.11.2016
Daria Prosochkina
Med.
Oracle Netbeans IDE 8.1 Directory Traversal
21.10.2016
hyp3rlinx
Low
SPIP 3.1.2 File Enumeration / Path Traversal
20.10.2016
Nicolas CHATELAIN
Med.
Kajona 4.7 Cross Site Scripting / Directory Traversal
17.09.2016
Tim Coen
Med.
E-Cidade 2.3.52 Directory Traversal
28.08.2016
vesp3r
Med.
WordPress 4.5.3 Core Ajax Handlers Path Traversal
22.08.2016
sumofpwn
Med.
Lepton CMS 2.2.0 / 2.2.1 Directory Traversal
17.08.2016
hyp3rlinx
Low
WebNMS Framework 5.2 SP1 Traversal / Weak Obfuscation / User Impersonation
10.08.2016
agileinfosec
Med.
PHP Power Browse 1.2 Path Traversal
06.08.2016
Manuel Mancera
Med.
Atutor 2.2.1 Path Traversal
04.08.2016
High-Tech Bridge Secur...
Med.
Avaya VOSS 4.1.0.0 SPB Traffic Traversal
28.07.2016
Dragan
Med.
PHP File Vault 0.9 Directory Traversal / File Read
26.07.2016
N_A
Med.
SAP NetWeaver AS JAVA 7.5 Directory Traversal
18.06.2016
Vahagn Vardanyan
Med.
jbFileManager Path Traversal
17.06.2016
HaHwul
Med.
Gemalto Sentinel License Manager 18.0.1 Directory Traversal
17.06.2016
Gjoko 'LiquidWorm' Krs...
Med.
SAP MII 15.0 Directory Traversal
17.05.2016
Dmitry Chastuhin
Med.
OXID eShop Path Traversal Vulnerability
05.05.2016
LSE
Med.
OXID eShop CE 4.9.7 Path Traversal / Privilege Escalation
04.05.2016
Tim Herres
High
Ovidentia Troubletickets 7.6 Remote File Inclusion
13.04.2016
bd0rk
Med.
DotCMS 3.5 Beta Directory Traversal
12.04.2016
Piaox From Pingan Prod...
Med.
Apache OpenMeetings 3.1.0 Path Traversal
31.03.2016
Andreas Lindh
High
ATutor 2.2.1 Directory Traversal / Remote Code Execution
30.03.2016
mr_me
Med.
WordPress eBook Download 1.1 Directory Traversal
22.03.2016
Wadeek
Med.
WordPress Import CSV 1.1 Directory Traversal
22.03.2016
Wadeek
Med.
Apache Tomcat 8.0.26 Limited Directory Traversal
23.02.2016
Apache Tomcat security...
High
SIMOGEO FileManager 2.3.0 Path Traversal
12.02.2016
HaHwul
High
File Replication Pro 7.2.0 Command Execution / File Disclosure / Traversal
12.02.2016
Jerold Hoong
High
D-Link DVG-N5402SP Path Traversal / Information Disclosure
05.02.2016
Karn Ganeshen
Med.
Roundcube 1.1.3 Path Traversal
15.01.2016
High-Tech Bridge Secur...
Med.
PFSense 2.2.5 Directory Traversal
19.12.2015
R-73eN
High
Ovidentia absences 2.64 Remote File Inclusion
16.12.2015
bd0rk
High
Ovidentia bulletindoc 2.9 Remote File Inclusion
16.12.2015
bd0rk
Med.
Polycom VVX-Series Path Traversal
15.12.2015
Jake Reynolds
Med.
4images 1.7.11 Path Traversal
14.12.2015
Tim Coen
Med.
bitrix.scan Bitrix 1.0.3 Path Traversal
11.12.2015
High-Tech Bridge Secur...
High
YesWiki 1 / 2 File Upload / Directory Traversal
09.12.2015
indoushka
High
WordPress Squirrel Theme 1.6.4 Remote File Inclusion
09.12.2015
indoushka
Med.
Awesome Media Gallery 1.0 Directory Traversal
08.12.2015
indoushka
High
WordPress Gwolle Guestbook 1.5.3 Remote File Inclusion
03.12.2015
High-Tech Bridge Secur...
Low
XCart 5.2.6 Path Traversal
17.11.2015
Curesec
High
D-Link DIR-825 Buffer Overflow / Directory Traversal
17.11.2015
Samuel Huntley
High
AlegroCart 1.2.8 Local / Remote File Inclusion
16.11.2015
Curesec
Med.
ClipperCMS 1.3.0 Path Traversal
16.11.2015
Curesec
Med.
YESWIKI 0.2 Path Traversal
11.11.2015
HaHwul
Med.
Pligg CMS 2.0.2 Directory Traversal
31.10.2015
Tim Coen
Med.
Belkin Router N150 Path Traversal
20.10.2015
Rahul Pratap Singh
Med.
ElasticSearch Snapshot API Directory Traversal
16.10.2015
Multiple
Med.
F5 BigIP 10.2.4 Build 595.0 HF3 Path Traversal
13.10.2015
Karn Ganeshen
High
WordPress Font 7.5 Path Traversal
13.10.2015
David Moore
Med.
WordPress Easy2Map 1.2.9 Local File Inclusion / Directory Traversal
06.10.2015
Ibéria Medeiros
Med.
RSA OneStep 6.9 Path Traversal
30.09.2015
RSA Customer Support
High
Kirby CMS 2.1.0 Authentication Bypass / Traversal
18.09.2015
Dawid Golunski
High
Openfire 3.10.2 Remote File Inclusion
15.09.2015
hyp3rlinx
Med.
Elasticsearch 1.6.0 Directory Traversal
17.07.2015
Benjamin Smith
Med.
Pimcore CMS Build 3450 Directory Traversal
15.07.2015
Josh Foote
High
AjaxControlToolkit File Upload Directory Traversal
15.07.2015
Brian Cardinale
Med.
Simple Online Planning Tool 1.3.2 XSS / SQL Injection / Traversal
13.07.2015
Huy-Ngoc DAU
Med.
ZenPhoto 1.4.8 XSS / SQL Injection / Traversal
13.07.2015
Tim Coen
Low
Polycom RealPresence Resource Manager (RPRM) Disclosure / Traversal
27.06.2015
SEC
Med.
EMC Documentum Thumbnail Server Directory Traversal
24.06.2015
EMC
High
ManageEngine SupportCenter Plus 7.90 - Multiple Vulnerabilities
20.06.2015
Vulnerability Lab
Med.
Wonder CMS 0.6-Beta File Inclusion / Traversal / Disclosure
19.06.2015
indoushka
High
Audio Share 2.0.2 Cross Site Scripting / Remote File Inclusion
18.06.2015
indoushka
Med.
Bonita BPM 6.5.1 Directory Traversal / Open Redirect
10.06.2015
High-Tech Bridge Secur...
Med.
Logstash 1.4.2 Directory Traversal
10.06.2015
Colin Coghill
Low
SQLBuddy 1.3.3 Path Traversal
15.05.2015
John Page
Med.
eFront 3.6.15 Path Traversal
09.05.2015
Filippo Roncari
Med.
Album Streamer 2.0 iOS Directory Traversal Vulnerability
08.05.2015
Vulnerability Lab


CVEMAP Search Results

CVE
Details
Description
2017-10-30
High
CVE-2014-0115

Vendor: Apache
Software: Storm
 

 
Directory traversal vulnerability in the log viewer in Apache Storm 0.9.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter to log.

 
2017-10-24
Medium
CVE-2017-14695

Vendor: Saltstack
Software: SALT
 

 
Directory traversal vulnerability in minion id validation in SaltStack Salt before 2016.3.8, 2016.11.x before 2016.11.8, and 2017.7.x before 2017.7.2 allows remote minions with incorrect credentials to authenticate to a master via a crafted minion ID. NOTE: this vulnerability exists because of an incomplete fix for CVE-2017-12791.

 
2017-10-23
Medium
CVE-2014-3744

Vendor: Nodejs
Software: Node.js
 

 
Directory traversal vulnerability in the st module before 0.2.5 for Node.js allows remote attackers to read arbitrary files via a %2e%2e (encoded dot dot) in an unspecified path.

 
2017-10-19
Medium
CVE-2017-12285

Vendor: Cisco
Software: Prime networ...
 

 
A vulnerability in the web interface of Cisco Network Analysis Module Software could allow an unauthenticated, remote attacker to delete arbitrary files from an affected system, aka Directory Traversal. The vulnerability exists because the affected software does not perform proper input validation of HTTP requests that it receives and the software does not apply role-based access controls (RBACs) to requested HTTP URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request to the affected software. A successful exploit could allow the attacker to delete arbitrary files from the affected system. Cisco Bug IDs: CSCvf41365.

 
2017-10-18
Low
CVE-2017-15359

Vendor: 3CX
Software: 3CX
 

 
In the 3CX Phone System 15.5.3554.1, the Management Console typically listens to port 5001 and is prone to a directory traversal attack: "/api/RecordingList/DownloadRecord?file=" and "/api/SupportInfo?file=" are the vulnerable parameters. An attacker must be authenticated to exploit this issue to access sensitive information to aid in subsequent attacks.

 
2017-10-16
Medium
CVE-2014-3702

Vendor: Redhat
Software: Edeploy
 

 
Directory traversal vulnerability in eNovance eDeploy allows remote attackers to create arbitrary directories and files and consequently cause a denial of service (resource consumption) via a .. (dot dot) the session parameter.

 
2017-10-13
Medium
CVE-2017-15276

Vendor: Opentext
Software: Documentum c...
 

 
OpenText Documentum Content Server (formerly EMC Documentum Content Server) through 7.3 contains the following design gap, which allows an authenticated user to gain superuser privileges: Content Server allows uploading content using batches (TAR archives). When unpacking TAR archives, Content Server fails to verify the contents of an archive, which causes a path traversal vulnerability via symlinks. Because some files on the Content Server filesystem are security-sensitive, this leads to privilege escalation.

 
2017-10-09
Low
CVE-2017-14614

Vendor: Gridgain
Software: Gridgain
 

 
Directory traversal vulnerability in the Visor GUI Console in GridGain before 1.7.16, 1.8.x before 1.8.12, 1.9.x before 1.9.7, and 8.x before 8.1.5 allows remote authenticated users to read arbitrary files on remote cluster nodes via a crafted path.

 
2017-08-10
Medium
CVE-2017-7675

Vendor: Apache
Software: Tomcat
 

 
The HTTP/2 implementation in Apache Tomcat 9.0.0.M1 to 9.0.0.M21 and 8.5.0 to 8.5.15 bypassed a number of security checks that prevented directory traversal attacks. It was therefore possible to bypass security constraints using a specially crafted URL.

 
2017-05-17
Medium
CVE-2017-9031

Vendor: Deluge
Software: Deluge
 

 
The WebUI component in Deluge before 1.3.15 contains a directory traversal vulnerability involving a request in which the name of the render file is not associated with any template file.

 

 


Copyright 2017, cxsecurity.com

 

Back to Top