CWE-36
152 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 5 of them as exploited in the wild.
- 152Published CVEs152 of them scored
- 59Last 12 monthspublished in the last year
- 18Critical71 more rated high
- 5Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2024-48248
NAKIVO Backup & Replication before 11.0.0.88174 allows absolute path traversal for reading files via getImageByPath to /c/router (this may lead to remote code…
NAKIVO · Backup & Replication Director
ExploitedHigh8.6 - CVE-2024-13159
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated…
Ivanti · Endpoint Manager
ExploitedCritical9.8 - CVE-2024-13160
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated…
Ivanti · Endpoint Manager
ExploitedCritical9.8 - CVE-2024-13161
Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated…
Ivanti · Endpoint Manager
ExploitedCritical9.8 - CVE-2018-20250
In WinRAR versions prior to and including 5.61, There is path traversal vulnerability when crafting the filename field of the ACE format (in UNACEV2.dll). When…
Check Point Software Technologies Ltd. · WinRAR
ExploitedHigh7.8