Vulnerabilities (CVE)

Filtered by CWE-23
Total 543 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2016-20023 1 Cksource 1 Ckfinder 2026-06-17 N/A 5.0 MEDIUM
In CKSource CKFinder before 2.5.0.1 for ASP.NET, authenticated users could download any file from the server if the correct path to a file was provided.
CVE-2012-6069 1 3s-software 1 Codesys Runtime System 2026-06-16 10.0 HIGH 10.0 CRITICAL
The CoDeSys Runtime Toolkit’s file transfer functionality does not perform input validation, which allows an attacker to access files and directories outside the intended scope. This may allow an attacker to upload and download any file on the device. This could allow the attacker to affect the availability, integrity, and confidentiality of the device.
CVE-2012-5972 1 Specview 1 Specview 2026-06-16 2.6 LOW N/A
Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... (dot dot dot) in a URI.