Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-21

6 published CVEs are weaknesses of this kind, as the records or NVD name it.

Published CVEs
6
Last 12 months
0
Critical
1
Known exploited
0

Critical 1High 0Medium 5Low 0Not scored 0

CVEs per yearBy the year they were published

  1. 20141
  2. 20161
  3. 20191
  4. 20232
  5. 20241

Newest CVEs

  • CVE-2024-7738

    yzane vscode-markdown-pdf Markdown File pathname traversal

    yzane · vscode-markdown-pdf

    Medium4.8
  • CVE-2016-15017

    fabarea media_upload UploadFileService.php getUploadedFileList pathname traversal

    fabarea · media_upload

    Medium5.5
  • CVE-2015-10030

    SUKOHI Surpass Surpass.php pathname traversal

    SUKOHI · Surpass

    Medium5.5
  • CVE-2019-11626

    routers/ajaxRouter.php in doorGets 7.0 has a web site physical path leakage vulnerability, as demonstrated by an ajax/index.php?uri=1234%5c request.

    Product not named

    Medium5.3
  • CVE-2016-1505

    The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as…

    Product not named

    Critical10.0
  • CVE-2014-2232

    Absolute path traversal vulnerability in the MapAPI in Infoware MapSuite before 1.0.36 and 1.1.x before 1.1.49 allows remote attackers to read arbitrary files…

    Product not named

    Medium5.0

Vendors it comes up for most

  1. SUKOHI1
  2. fabarea1
  3. yzane1