Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:22"
1,024 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-41062 |
medium | 6.5 | 0.0072 | 2026-04-21 | WWBN AVideo is an open source video platform. In versions 29.0 and below, the directory traversal fi | |
CVE-2026-4502 |
medium | 6.5 | 0.0027 | 2026-04-30 | IBM Langflow Desktop 1.2.0 through 1.8.4 Langflow could allow an authenticated attacker to traverse | |
CVE-2026-3345 |
medium | 6.5 | 0.0037 | 2026-04-30 | IBM Langflow Desktop <=1.8.4 Langflow could allow a remote attacker to traverse directories on the s | |
CVE-2026-6262 |
medium | 6.5 | 0.0035 | 2026-05-05 | The Betheme theme for WordPress is vulnerable to Arbitrary File Deletion in versions up to, and incl | |
CVE-2026-43975 |
medium | 6.5 | 0.0073 | 2026-05-06 | FolderUploadsFileManager in Apache Wicket does not validate or sanitize the uploadFieldId parameter | |
CVE-2026-41885 |
medium | 6.5 | 0.0022 | 2026-05-08 | i18next-locize-backend is a simple i18next backend for locize.com which can be used in Node.js, in t | |
CVE-2026-20685 |
medium | 6.5 | 0.0027 | 2026-05-18 | An attacker in a privileged network position may be able to leak sensitive information. A path handl | |
CVE-2026-40724 |
medium | 6.5 | 0.0041 | 2026-06-17 | CP Client Arbitrary File Download in Client Portal (Pro) <= 5.6.2 versions. | |
CVE-2026-52716 |
medium | 6.5 | 0.0034 | 2026-06-17 | Unauthenticated Arbitrary File Deletion in WorkScout-Core <= 1.7.11 versions. | |
CVE-2026-12568 |
medium | 6.5 | 0.0025 | 2026-06-17 | The postman_download module uses the workspace name field from the Postman API to construct the loca | |
CVE-2026-48129 |
medium | 6.5 | 0.0036 | 2026-06-19 | Kestra is an open-source, event-driven orchestration platform. Prior to versions 1.3.19, 1.2.19, 1.1 | |
CVE-2026-42867 |
medium | 6.5 | 0.0047 | 2026-06-23 | Langflow is a tool for building and deploying AI-powered agents and workflows. Prior to 1.9.0, Langf | |
CVE-2026-31978 |
medium | 6.5 | 0.0034 | 2026-06-24 | motionEye (mEye) is an online interface for motion software, which is a video surveillance program w | |
CVE-2026-9774 |
medium | 6.5 | 0.0151 | 2026-06-24 | ATEN Unizon updateLicense Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerabil | |
CVE-2026-9775 |
medium | 6.5 | 0.0151 | 2026-06-24 | ATEN Unizon uploadSSL Directory Traversal Arbitrary File Deletion Vulnerability. This vulnerability | |
CVE-2026-9153 |
medium | 6.5 | 0.0045 | 2026-06-25 | Arbitrary File Read vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated | |
CVE-2026-9154 |
medium | 6.5 | 0.0041 | 2026-06-25 | Arbitrary File Write vulnerability in Rapid7 InsightConnect Sed Plugin on Linux allows authenticated | |
CVE-2026-48944 |
medium | 6.5 | 0.0044 | 2026-06-25 | The K2 frontend article-save handler accepts an `attachment[N][existing]` POST field that is concate | |
CVE-2026-48314 |
medium | 6.5 | 0.0062 | 2026-06-30 | ColdFusion versions 2025.9, 2023.20 and earlier are affected by an Improper Limitation of a Pathname | |
CVE-2026-54468 |
medium | 6.5 | 0.0045 | 2026-07-10 | Dell Unisphere for PowerMax, version(s) 10.3.0.5 and prior, contain(s) a path traversal vulnerabilit | |
CVE-2026-55469 |
medium | 6.5 | 0.0059 | 2026-07-10 | Snipe-IT is an IT asset/license management system. Prior to 8.6.2, an authenticated user with import | |
CVE-2026-12482 |
medium | 6.5 | 0.0033 | 2026-07-14 | A vulnerability in keras-team/keras version 3.12.0 allows an attacker to craft a malicious tar archi | |
CVE-2026-49488 |
medium | 6.5 | 0.0070 | 2026-07-14 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apac | |
CVE-2026-14903 |
medium | 6.5 | 0.0118 | 2026-07-14 | Path traversal in Ivanti Xtraction before version 2026.2.1 allows a remote authenticated attacker t | |
CVE-2026-58481 |
medium | 6.5 | 0.0019 | 2026-07-20 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `AgentRuntime` | |
CVE-2026-64872 |
medium | 6.5 | 0.0033 | 2026-07-23 | Joomla Extension - regularlabs.com - Path traversal in Cache Cleaner Pro extension - Custom purge an | |
CVE-2026-65713 |
medium | 6.5 | 0.0033 | 2026-07-23 | Joomla Extension - regularlabs.com - Insecure path handling in Modals Pro extension - Modals gallery | |
CVE-2026-66063 |
medium | 6.5 | 0.0034 | 2026-07-28 | goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, th | |
CVE-2026-13723 |
medium | 6.5 | 0.0048 | 2026-07-29 | A vulnerability in the `zipx.Unzip` extraction routine of Develar's app-builder allows an attacker t | |
CVE-2026-44615 |
medium | 6.5 | 0.0080 | 2026-07-31 | Path traversal vulnerability in Apache Zeppelin. When FileSystemNotebookRepo is configured, an authe | |
CVE-2026-9335 |
medium | 6.5 | 0.0077 | 2026-08-02 | A vulnerability in keras-team/keras versions <= 3.14.0 allows arbitrary local HDF5 file content disc | |
CVE-2026-14194 |
medium | 6.5 | 0.0044 | 2026-08-04 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Bili | |
CVE-2026-7646 |
medium | 6.5 | 0.0050 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 allows users to read arbitrary files from the server filesyste | |
CVE-2026-7658 |
medium | 6.5 | 0.0051 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 does not properly validate the username field, allowing attack | |
CVE-2026-28146 |
medium | 6.5 | 0.0044 | 2026-08-06 | Contributor Arbitrary File Download in Unlimited Elements For Elementor (Free Widgets, Addons, Templ | |
CVE-2026-72604 |
medium | 6.5 | 0.0052 | 2026-08-11 | A path traversal vulnerability in Intelliants Subrion CMS through 4.2.1 allows authenticated adminis | |
CVE-2026-17266 |
medium | 6.5 | 0.0066 | 2026-08-12 | IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain sensitive informa | |
CVE-2026-63667 |
medium | 6.5 | 0.0046 | 2026-08-17 | ApostropheCMS is an open-source Node.js content management system. Prior to 3.6.2, the import-export | |
CVE-2026-17424 |
medium | 6.5 | 0.0037 | 2026-08-20 | IBM AIX 7.2, and 7.3 and IBM PowerVM VIOS 4.1 could allow a remote attacker to bypass security restr | |
CVE-2026-106489 |
medium | 6.5 | 0.0029 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin | |
CVE-2026-106490 |
medium | 6.5 | 0.0037 | 2026-10-06 | Backstage is an open framework for building developer portals. Prior to 2.2.4, the @backstage/plugin | |
CVE-2026-112311 |
medium | 6.5 | 0.0034 | 2026-10-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in ACF | |
CVE-2026-114623 |
medium | 6.5 | 0.0065 | 2026-10-23 | baserCMS is a website development framework. In versions 5.0.0 before 5.3.2 and 5.4.0 before 5.4.2, | |
CVE-2026-105947 |
medium | 6.5 | 0.0039 | 2026-10-26 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Inno | |
CVE-2026-115194 |
medium | 6.5 | 0.0044 | 2026-10-26 | A path traversal vulnerability exists in the Mautic Asset API. When creating a local asset through t | |
CVE-2026-115923 |
medium | 6.5 | 0.0032 | 2026-10-26 | Backstage is an open framework for building developer portals. Prior to 3.9.2 and from 4.0.0 until 4 | |
CVE-2026-104309 |
medium | 6.5 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to obtain sensitiv | |
CVE-2026-77819 |
medium | 6.5 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote authenticated attacker to overwrite arbit | |
CVE-2026-110190 |
medium | 6.5 | — | 2026-10-29 | IBM Langflow OSS 1.0.0 through 1.12.4 could allow an authenticated user to traverse directories on t | |
CVE-2026-66493 |
medium | 6.4 | 0.0047 | 2026-08-07 | Joomla Extension - phoca.cz - Path Traversal vulnerability in Phoca Commander 1.0.0-6.1.3 - Improper |