CWE:

	Tytuł	Data	Autor
Med.	C-MOR Video Surveillance 5.2401 Path Traversal	10.09.2024	Matthias Deeg
Med.	Artica Proxy 4.40 / 4.50 Local File Inclusion / Traversal	06.03.2024	Jaggar Henry
Low	WordPress User Meta Lite / Pro 2.4.3 Path Traversal	31.05.2022	Julien Ahrens
Med.	SAP Solution Manager 7.2 File Disclosure / Denial Of Service	15.06.2021	Pablo Artuso
Med.	WordPress 5.1.1 Liberator Themes Arbitrary File Download	18.03.2019	KingSkrupellos
Med.	WordPress 5.1.1 Green_Farming_New Themes Arbitrary File Download	18.03.2019	KingSkrupellos
Med.	WordPress 4.8.9 Rowe Themes Arbitrary File Download	18.03.2019	KingSkrupellos
High	D-Link DWR-116 Arbitrary File Download	07.04.2017	Smash_
High	Wordpress Plugin Membership Simplified v1.58 - Arbitrary File Download	16.03.2017	Munir Njiru
Med.	QNAP QTS 4.2.1 Build 20160601 Arbitrary File Overwrite	19.08.2016	Sebastian Nerz
High	MiCasaVerde VeraLite 1.5.408 Traversal & Authorization & CSRF & Disclosure	02.08.2013	Daniel Crowley

---

Common Weakness Enumeration (CWE)

CVE

Szczegóły

Opis

2024-10-21

CVE-2024-10200

Updating...

Administrative Management System from Wellchoose has a Path Traversal vulnerability, allowing unauthenticated remote attackers to exploit this vulnerability to download arbitrary files on the server.

2024-10-16

	CVE-2024-47637	Updating...	: Relative Path Traversal vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Path Traversal.This issue affects LiteSpeed Cache: from n/a through 6.4.1.
	CVE-2024-49253	Updating...	Relative Path Traversal vulnerability in James Park Analyse Uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through 0.5.

2024-10-14

	CVE-2024-9922	Updating...	The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files.
	CVE-2024-9923	Updating...	The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with administrator privileges to move arbitrary system files to the website root directory and access them.

2024-10-11

CVE-2024-6985

Updating...

A path traversal vulnerability exists in the api open_personality_folder endpoint of parisneo/lollms-webui. This vulnerability allows an attacker to read any folder in the personality_folder on the victim's computer, even though sanitize_path is set. The issue arises due to improper sanitization of the personality_folder parameter, which can be exploited to traverse directories and access arbitrary files.

2024-10-08

	CVE-2024-47949	Updating...	In JetBrains TeamCity before 2024.07.3 path traversal allowed backup file write to arbitrary location
	CVE-2024-47948	Updating...	In JetBrains TeamCity before 2024.07.3 path traversal leading to information disclosure was possible via server backups
	CVE-2024-43614	Updating...	Microsoft Defender for Endpoint for Linux Spoofing Vulnerability

2024-10-04

CVE-2024-47651

Updating...

This vulnerability exists in Shilpi Client Dashboard due to improper handling of multiple parameters in the API endpoint. An authenticated remote attacker could exploit this vulnerability by including multiple �??userid�?� parameters in the API request body leading to unauthorized access of sensitive information belonging to other users.

 

---

Copyright 2024, cxsecurity.com