CWE-21

Total CVEs
6
Vulnerabilities
Avg CVSS v3
7.6
High
Avg CVSS v2
4.9
Medium
Latest CVE
2024
Most Recent

Severity Distribution

Critical 2
33.3%
High 0
0%
Medium 4
66.7%
Low 0
0%

External References

MITRE CWE
Official CWE definition
NIST NVD
Search CVEs by CWE

All CVEs (6)

Page 1 of 1

CVE-2016-1505

CRITICAL
CVSS:10.0(Critical)

The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.

CWE-212016

CVE-2016-15017

CRITICAL
CVSS:9.8(Critical)

A vulnerability has been found in fabarea media_upload on TYPO3 and classified as critical. This vulnerability affects the function getUploadedFileList of the file Classes/Service/UploadFileService.ph...

CWE-212016

CVE-2024-7738

MEDIUM
CVSS:7.8(High)

A vulnerability, which was classified as problematic, has been found in yzane vscode-markdown-pdf 1.5.0. Affected by this issue is some unknown functionality of the component Markdown File Handler. Th...

CWE-212024

CVE-2019-11626

MEDIUM
CVSS:5.3(Medium)

routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c request.

CWE-212019

CVE-2015-10030

MEDIUM
CVSS:5.3(Medium)

A vulnerability has been found in SUKOHI Surpass and classified as critical. This vulnerability affects unknown code of the file src/Sukohi/Surpass/Surpass.php. The manipulation of the argument dir le...

CWE-212015

CVE-2014-2232

MEDIUM
CVSS:5.0(Medium)

Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files via unspecified vectors.

CWE-212014