path traversal vulnerabilities and exploits

(subscribe to this query)

7.5

CVSSv3

This affects all versions of package github.com/u-root/u-root/pkg/cpio. It is vulnerable to leading, non-leading relative path traversal attacks and symlink based (relative and absolute) path traversal attacks in cpio file extraction....

U-root U-root1 Github repository available

NA

Absolute path traversal vulnerability in index.php in 321soft PhP-Gallery 0.9 allows remote attackers to browse arbitrary directories via the path parameter....

321soft Php-gallery 0.91 EDB exploit available

7.5

CVSSv3

Path traversal in simplehttpserver <v0.2.1 allows listing any file on the server....

Simplehttpserver Project Simplehttpserver

7.5

CVSSv3

stattic node module suffers from a Path Traversal vulnerability due to lack of validation of path, which allows a malicious user to read content of any file with known path....

Stattic Project Stattic 0.2.3

7.1

CVSSv3

An Absolute Path Traversal issue was discovered in Advantech WebAccess Version 8.1 and prior. The absolute path traversal vulnerability has been identified, which may allow an attacker to traverse the file system to access restricted files or directories....

Advantech Webaccess

9.8

CVSSv3

A path traversal flaw was found in spacewalk-proxy, all versions through 2.9, in the way the proxy processes cached client tokens. A remote, unauthenticated attacker could use this flaw to test the existence of arbitrary files, if they have access to the proxy's filesystem,...

Redhat Satellite 5.0 Redhat Spacewalk

8.8

CVSSv3

DNN (formerly DotNetNuke) through 9.4.4 allows Path Traversal (issue 2 of 2)....

Dnnsoftware Dotnetnuke

7.5

CVSSv3

tecrail Responsive FileManager 9.13.4 allows remote attackers to read arbitrary file via path traversal with the path parameter, through the get_file action in ajax_calls.php....

Tecrail Responsive Filemanager 9.13.4

6.5

CVSSv3

The NextGEN Gallery plugin before 2.1.15 for WordPress allows ../ Directory Traversal in path selection....

Imagely Nextgen Gallery

7.5

CVSSv3

The _g_file_remove_directory function in file-utils.c in File Roller 3.5.4 through 3.20.2 allows remote attackers to delete arbitrary files via a symlink attack on a folder in an archive....

Get Started

« PREV 1 2 3 4 5 6 7 8 9 10 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook