Vulnerabilities (CVE)

Filtered by CWE-22
Total 10257 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-8827 2 Microsoft, Nvidia 2 Windows, Geforce Experience 2026-06-17 5.0 MEDIUM 6.5 MEDIUM
NVIDIA GeForce Experience 3.x before GFE 3.1.0.52 contains a vulnerability in NVIDIA Web Helper.exe where a local web API endpoint, /VisualOPS/v.1.0./, lacks proper access control and parameter validation, allowing for information disclosure via a directory traversal attack.
CVE-2016-8593 1 Trendmicro 1 Threat Discovery Appliance 2026-06-17 6.5 MEDIUM 8.8 HIGH
Directory traversal vulnerability in upload.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote authenticated users to execute arbitrary code via a .. (dot dot) in the dID parameter.
CVE-2016-8343 1 Indasengineering 1 Web Scada 2026-06-17 5.0 MEDIUM 7.5 HIGH
Directory traversal vulnerability in INDAS Web SCADA before 3 allows remote attackers to read arbitrary files via unspecified vectors.
CVE-2016-8280 1 Huawei 1 Esight 2026-06-17 4.0 MEDIUM 6.5 MEDIUM
Directory traversal vulnerability in Huawei eSight before V300R003C20SPC005 allows remote authenticated users to read arbitrary files via unspecified vectors.
CVE-2016-8211 1 Dell 1 Emc Data Protection Advisor 2026-06-17 5.0 MEDIUM 7.5 HIGH
EMC Data Protection Advisor 6.1.x, EMC Data Protection Advisor 6.2, EMC Data Protection Advisor 6.2.1, EMC Data Protection Advisor 6.2.2, EMC Data Protection Advisor 6.2.3 prior to patch 446 has a path traversal vulnerability that may potentially be exploited by malicious users to compromise the affected system.
CVE-2016-8207 1 Brocade 1 Network Advisor 2026-06-17 5.0 MEDIUM 7.5 HIGH
A Directory Traversal vulnerability in CliMonitorReportServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to read arbitrary files including files with sensitive user information.
CVE-2016-8206 1 Brocade 1 Network Advisor 2026-06-17 6.4 MEDIUM 7.5 HIGH
A Directory Traversal vulnerability in servlet SoftwareImageUpload in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to write to arbitrary files, and consequently delete the files.
CVE-2016-8205 1 Brocade 1 Network Advisor 2026-06-17 10.0 HIGH 9.8 CRITICAL
A Directory Traversal vulnerability in DashboardFileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.
CVE-2016-8204 1 Broadcom 1 Brocade Network Advisor 2026-06-17 10.0 HIGH 9.8 CRITICAL
A Directory Traversal vulnerability in FileReceiveServlet in the Brocade Network Advisor versions released prior to and including 14.0.2 could allow remote attackers to upload a malicious file in a section of the file system where it can be executed.
CVE-2016-7982 1 Spip 1 Spip 2026-06-17 5.0 MEDIUM 7.5 HIGH
Directory traversal vulnerability in ecrire/exec/valider_xml.php in SPIP 3.1.2 and earlier allows remote attackers to enumerate the files on the system via the var_url parameter in a valider_xml action.
CVE-2016-7843 1 Hibara Software 3 Attachecase For Java, Attachecase Lite, Attachecase Pro 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
Directory traversal vulnerability in AttacheCase for Java 0.60 and earlier, AttacheCase Lite 1.4.6 and earlier, and AttacheCase Pro 1.5.7 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file.
CVE-2016-7842 1 Hibara 1 Attachecase 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
Directory traversal vulnerability in AttacheCase 2.8.2.8 and earlier and 3.2.0.4 and earlier allows remote attackers to read arbitrary files via specially crafted ATC file.
CVE-2016-7826 1 Buffalotech 2 Wnc01wh, Wnc01wh Firmware 2026-06-17 4.0 MEDIUM 6.5 MEDIUM
Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted POST requests.
CVE-2016-7825 1 Buffalotech 2 Wnc01wh, Wnc01wh Firmware 2026-06-17 4.0 MEDIUM 6.5 MEDIUM
Directory traversal vulnerability in Buffalo WNC01WH devices with firmware version 1.0.0.8 and earlier allows authenticated attackers to read arbitrary files via specially crafted commands.
CVE-2016-7802 1 Cybozu 1 Garoon 2026-06-17 4.0 MEDIUM 6.5 MEDIUM
Directory traversal vulnerability in Cybozu Garoon 3.0.0 to 4.2.2 allows remote authenticated attackers to read arbitrary files via unspecified vectors.
CVE-2016-7569 1 Docker2aci Project 1 Docker2aci 2026-06-17 4.3 MEDIUM 5.5 MEDIUM
Directory traversal vulnerability in docker2aci before 0.13.0 allows remote attackers to write to arbitrary files via a .. (dot dot) in the embedded layer data in an image.
CVE-2016-7552 1 Trendmicro 1 Threat Discovery Appliance 2026-06-17 10.0 HIGH 9.8 CRITICAL
On the Trend Micro Threat Discovery Appliance 2.6.1062r1, directory traversal when processing a session_id cookie allows a remote, unauthenticated attacker to delete arbitrary files as root. This can be used to bypass authentication or cause a DoS.
CVE-2016-7169 1 Wordpress 1 Wordpress 2026-06-17 6.5 MEDIUM 6.3 MEDIUM
Directory traversal vulnerability in the File_Upload_Upgrader class in wp-admin/includes/class-file-upload-upgrader.php in the upgrade package uploader in WordPress before 4.6.1 allows remote authenticated users to access arbitrary files via a crafted urlholder parameter.
CVE-2016-7135 1 Plone 1 Plone 2026-06-17 4.0 MEDIUM 4.9 MEDIUM
Directory traversal vulnerability in Plone CMS 5.x through 5.0.6 and 4.2.x through 4.3.11 allows remote administrators to read arbitrary files via a .. (dot dot) in the path parameter in a getFile action to Plone/++theme++barceloneta/@@plone.resourceeditor.filemanager-actions.
CVE-2016-7116 2 Debian, Qemu 2 Debian Linux, Qemu 2026-06-17 2.1 LOW 6.0 MEDIUM
Directory traversal vulnerability in hw/9pfs/9p.c in QEMU (aka Quick Emulator) allows local guest OS administrators to access host files outside the export path via a .. (dot dot) in an unspecified string.