CVE Daily
← All tags

Tag: Path Traversal

All CVEs associated with "Path Traversal". Page 72/72 • 8590 CVEs.

Subscribe CVEs: RSS for “Path Traversal”  ·  RSS (High+Critical only)

About “Path Traversal”

A curated feed of “Path Traversal”-related CVEs appears below. We currently track 8590 CVEs for this tag (all time). In the last 365 days, 1472 were published. Average CVSS is 6.8 (all time; 6.9 over 365d), and 49% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), CWE-23 - Relative Path Traversal, CWE-35 - Path Traversal: '.../...//'.

In our taxonomy this topic maps to a MODERATE impact class. Common exploitation patterns for this weakness can lead to moderate. Use the filters to triage high risk first and validate exposure in your environment. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.

CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).

CVSS ≥ 0.0
2001-06-27
Medium

CVE-2001-0491

Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as (1) .... in CWD, (2) .. in NLST, or (3)…

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0495

Directory traversal in DataWizard WebXQ server 1.204 allows remote attackers to view files outside of the web root via a .. (dot dot) attack.

CVSS: 5.0 CWE: N/A View on NVD
2001-06-23
Critical

CVE-2001-1162

Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is use…

CVSS: 10.0 CWE: N/A View on NVD
2001-06-18
Medium

CVE-2001-0404

Directory traversal vulnerability in JavaServer Web Dev Kit (JSWDK) 1.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP request to the WEB-INF directory.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0420

Directory traversal vulnerability in talkback.cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the article parameter.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0466

Directory traversal vulnerability in ustorekeeper 1.61 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.

CVSS: 5.0 CWE: N/A View on NVD
2001-06-02
Medium

CVE-2001-0206

Directory traversal vulnerability in Soft Lite ServerWorx 3.00 allows remote attackers to read arbitrary files by inserting a .. (dot dot) or ... into the requested pathname of an HTTP GET request.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0210

Directory traversal vulnerability in commerce.cgi CGI program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the page parameter.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0211

Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the sp.nextform parameter.

CVSS: 5.0 CWE: N/A View on NVD
High

CVE-2001-0212

Directory traversal vulnerability in HIS Auktion 1.62 allows remote attackers to read arbitrary files via a .. (dot dot) in the menue parameter, and possibly execute commands via shell metacharacters.

CVSS: 7.5 CWE: N/A View on NVD
Medium

CVE-2001-0217

Directory traversal vulnerability in PALS Library System pals-cgi program allows remote attackers to read arbitrary files via a .. (dot dot) in the documentName parameter.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0253

Directory traversal vulnerability in hsx.cgi program in iWeb Hyperseek 2000 allows remote attackers to read arbitrary files and directories via a .. (dot dot) attack in the show parameter.

CVSS: 5.0 CWE: N/A View on NVD
2001-05-27
Medium

CVE-2001-1335

Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a filename that contains a ...%5c (modifie…

CVSS: 5.0 CWE: N/A View on NVD
2001-05-03
Medium

CVE-2001-0186

Directory traversal vulnerability in Free Java Web Server 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0199

Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the HTTP GET request.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0205

Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. (dot dot) attack.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0226

Directory traversal vulnerability in BiblioWeb web server 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) or ... attack in an HTTP GET request.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0228

Directory traversal vulnerability in GoAhead web server 2.1 and earlier allows remote attackers to read arbitrary files via a .. attack in an HTTP GET request.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0272

Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the templ parameter.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0283

Directory traversal vulnerability in SunFTP build 9 allows remote attackers to read arbitrary files via .. (dot dot) characters in various commands, including (1) GET, (2) MKDIR, (3) RMDIR, (4) RENAM…

CVSS: 6.4 CWE: N/A View on NVD
Medium

CVE-2001-0286

Directory traversal vulnerability in A1 HTTP server 1.0a allows remote attackers to read arbitrary files via a .. (dot dot) in an HTTP GET request.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0293

Directory traversal vulnerability in FtpXQ FTP server 2.0.93 allows remote attackers to read arbitrary files via a .. (dot dot) in the GET command.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0294

Directory traversal vulnerability in TYPSoft FTP Server 0.85 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in a GET command, or (2) a ... in a CWD command.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0295

Directory traversal vulnerability in War FTP 1.67.04 allows remote attackers to list directory contents and possibly read files via a "dir *./../.." command.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0297

Directory traversal vulnerability in Simple Server HTTPd 1.0 (originally Free Java Server) allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0304

Directory traversal vulnerability in Caucho Resin 1.2.2 allows remote attackers to read arbitrary files via a "\.." (dot dot) in a URL request.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0305

Directory traversal vulnerability in store.cgi in Thinking Arts ES.One package allows remote attackers to read arbitrary files via a .. (dot dot) in the StartID parameter.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0306

Directory traversal vulnerability in ITAfrica WEBactive HTTP Server 1.00 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.

CVSS: 5.0 CWE: N/A View on NVD
2001-03-26
Medium

CVE-2001-0189

Directory traversal vulnerability in LocalWEB2000 HTTP server allows remote attackers to read arbitrary commands via a .. (dot dot) attack in an HTTP GET request.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0231

Directory traversal vulnerability in newsdesk.cgi in News Desk 1.2 allows remote attackers to read arbitrary files via a .. in the "t" parameter.

CVSS: 5.0 CWE: N/A View on NVD
2001-03-12
Medium

CVE-2001-0123

Directory traversal vulnerability in eXtropia bbs_forum.cgi 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the file parameter.

CVSS: 5.0 CWE: N/A View on NVD
2001-02-16
Medium

CVE-2001-0037

Directory traversal vulnerability in HomeSeer before 1.4.29 allows remote attackers to read arbitrary files via a URL containing .. (dot dot) specifiers.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0054

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant…

CVSS: 5.0 CWE: CWE-22 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') View on NVD
2001-02-12
Medium

CVE-2001-0009

Directory traversal vulnerability in Lotus Domino 5.0.5 web server allows remote attackers to read arbitrary files via a .. attack.

CVSS: 5.0 CWE: N/A View on NVD
Low

CVE-2001-0020

Directory traversal vulnerability in Arrowpoint (aka Cisco Content Services, or CSS) allows local unprivileged users to read arbitrary files via a .. (dot dot) attack.

CVSS: 2.1 CWE: N/A View on NVD
Medium

CVE-2001-0074

Directory traversal vulnerability in print.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the board parameter.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2001-0075

Directory traversal vulnerability in main.cgi in Technote allows remote attackers to read arbitrary files via a .. (dot dot) attack in the filename parameter.

CVSS: 5.0 CWE: N/A View on NVD
2001-01-09
Medium

CVE-2000-1101

Directory traversal vulnerability in Winsock FTPd (WFTPD) 3.00 and 2.41 with the "Restrict to home directory" option enabled allows local users to escape the home directory via a "/../" string, a var…

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-1171

Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. (dot dot) attack in the "thesection" parameter.

CVSS: 5.0 CWE: N/A View on NVD
High

CVE-2000-1176

Directory traversal vulnerability in YaBB search.pl CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catsearch" form field.

CVSS: 7.5 CWE: N/A View on NVD
Medium

CVE-2000-1188

Directory traversal vulnerability in Quikstore shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "page" parameter.

CVSS: 5.0 CWE: N/A View on NVD
2000-12-31
Medium

CVE-2000-1229

Directory traversal vulnerability in Phorum 3.0.7 allows remote Phorum administrators to read arbitrary files via ".." (dot dot) sequences in the default .langfile name field in the Master Settings a…

CVSS: 5.0 CWE: N/A View on NVD
2000-12-19
High

CVE-2000-0900

Directory traversal vulnerability in ssi CGI program in thttpd 2.19 and earlier allows remote attackers to read arbitrary files via a "%2e%2e" string, a variation of the .. (dot dot) attack.

CVSS: 7.5 CWE: N/A View on NVD
Medium

CVE-2000-0903

Directory traversal vulnerability in Voyager web server 2.01B in the demo disks for QNX 405 allows remote attackers to read arbitrary files via a .. (dot dot) attack.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-0906

Directory traversal vulnerability in Moreover.com cached_feed.cgi script version 4.July.00 allows remote attackers to read arbitrary files via a .. (dot dot) attack on the category or format paramete…

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-0919

Directory traversal vulnerability in PHPix Photo Album 1.0.2 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-0920

Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" i…

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-0921

Directory traversal vulnerability in Hassan Consulting shop.cgi shopping cart program allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page parameter.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-0922

Directory traversal vulnerability in Bytes Interactive Web Shopper shopping cart program (shopper.cgi) 2.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack on the…

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-0924

Directory traversal vulnerability in search.cgi CGI script in Armada Master Index allows remote attackers to read arbitrary files via a .. (dot dot) attack in the "catigory" parameter.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-0940

Directory traversal vulnerability in Metertek pagelog.cgi allows remote attackers to read arbitrary files via a .. (dot dot) attack on the "name" or "display" parameter.

CVSS: 6.4 CWE: N/A View on NVD
Medium

CVE-2000-0975

Directory traversal vulnerability in apexec.pl in Anaconda Foundation Directory allows remote attackers to read arbitrary files via a .. (dot dot) attack.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-0992

Directory traversal vulnerability in scp in sshd 1.2.xx allows a remote malicious scp server to overwrite arbitrary files via a .. (dot dot) attack.

CVSS: 5.0 CWE: N/A View on NVD
2000-12-11
Medium

CVE-2000-1005

Directory traversal vulnerability in html_web_store.cgi and web_store.cgi CGI programs in eXtropia WebStore allows remote attackers to read arbitrary files via a .. (dot dot) attack on the page param…

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-1036

Directory traversal vulnerability in Extent RBS ISP web server allows remote attackers to read sensitive information via a .. (dot dot) attack on the Image parameter.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-1048

Directory traversal vulnerability in the logfile service of Wingate 4.1 Beta A and earlier allows remote attackers to read arbitrary files via a .. (dot dot) attack via an HTTP GET request that uses…

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-1051

Directory traversal vulnerability in Allaire JRun 2.3 server allows remote attackers to read arbitrary files via the SSIFilter servlet.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-1075

Directory traversal vulnerability in iPlanet Certificate Management System 4.2 and Directory Server 4.12 allows remote attackers to read arbitrary files via a .. (dot dot) attack in the Agent, End En…

CVSS: 5.0 CWE: N/A View on NVD
2000-10-20
Medium

CVE-2000-0731

Directory traversal vulnerability in Worm HTTP server allows remote attackers to read arbitrary files via a .. (dot dot) attack.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-0739

Directory traversal vulnerability in strong.exe program in NAI Net Tools PKI server 1.0 before HotFix 3 allows remote attackers to read arbitrary files via a .. (dot dot) attack in an HTTPS request t…

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-2000-0773

Bajie HTTP web server 0.30a allows remote attackers to read arbitrary files via a URL that contains a "....", a variant of the dot dot directory traversal attack.

CVSS: 5.0 CWE: N/A View on NVD
1999-12-31
Medium

CVE-1999-1177

Directory traversal vulnerability in nph-publish before 1.2 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the pathname for an upload operation.

CVSS: 5.0 CWE: N/A View on NVD
Low

CVE-1999-1590

Directory traversal vulnerability in Muhammad A. Muquit wwwcount (Count.cgi) 2.3 allows remote attackers to read arbitrary GIF files via ".." sequences in the image parameter, a different vulnerabili…

CVSS: 3.5 CWE: N/A View on NVD
1999-11-12
Medium

CVE-1999-1050

Directory traversal vulnerability in Matt Wright FormHandler.cgi script allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the reply_message_attach attachment parameter, or (2)…

CVSS: 5.0 CWE: N/A View on NVD
1999-11-04
Medium

CVE-1999-1509

Directory traversal vulnerability in Etype Eserv 2.50 web server allows a remote attacker to read any file in the file system via a .. (dot dot) in a URL.

CVSS: 5.0 CWE: N/A View on NVD
1999-10-08
Medium

CVE-1999-1082

Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack.

CVSS: 5.0 CWE: N/A View on NVD
Medium

CVE-1999-1083

Directory traversal vulnerability in Jana proxy web server 1.45 allows remote attackers to ready arbitrary files via a .. (dot dot) attack.

CVSS: 5.0 CWE: N/A View on NVD
1999-09-24
Medium

CVE-1999-1351

Directory traversal vulnerability in KVIrc IRC client 0.9.0 with the "Listen to !nick <soundname> requests" option enabled allows remote attackers to read arbitrary files via a .. (dot dot) in a DCC…

CVSS: 5.0 CWE: N/A View on NVD
1998-04-03
Medium

CVE-1999-0270

Directory traversal vulnerability in pfdispaly.cgi program (sometimes referred to as "pfdisplay") for SGI's Performer API Search Tool (performer_tools) allows remote attackers to read arbitrary files.

CVSS: 5.0 CWE: N/A View on NVD
1997-11-08
Medium

CVE-1999-1069

Directory traversal vulnerability in carbo.dll in iCat Carbo Server 3.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the icatcommand parameter.

CVSS: 5.0 CWE: N/A View on NVD