Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:22"
1,024 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2026-44022 |
medium | 5.5 | 0.0021 | 2026-06-24 | Docling simplifies document processing by parsing diverse formats and providing integrations with th | |
CVE-2026-55439 |
medium | 5.5 | 0.0041 | 2026-06-25 | Halo is an open source website building tool. Prior to 2.24.3, a path traversal vulnerability in the | |
CVE-2026-54557 |
medium | 5.5 | 0.0018 | 2026-06-26 | mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.1, the mise HTTP bac | |
CVE-2026-13503 |
medium | 5.5 | 0.0077 | 2026-06-28 | A vulnerability was detected in antlr ANTLR4 up to 4.13.2. Affected by this issue is the function ge | |
CVE-2026-14628 |
medium | 5.5 | 0.0077 | 2026-07-04 | A vulnerability was detected in NousResearch hermes-agent up to 2026.5.16. This impacts the function | |
CVE-2026-14635 |
medium | 5.5 | 0.0062 | 2026-07-04 | A security flaw has been discovered in kirilkirkov Ecommerce-CodeIgniter-Bootstrap up to 222ff31c066 | |
CVE-2026-15204 |
medium | 5.5 | 0.0060 | 2026-07-09 | A vulnerability was detected in TOTOLINK X5000R 9.1.0cu.2415_B20250515/9.1.0cu.2350_B20230313. Affec | |
CVE-2026-59839 |
medium | 5.5 | 0.0025 | 2026-07-14 | A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fo | |
CVE-2026-58414 |
medium | 5.5 | 0.0019 | 2026-07-20 | Network-AI is a TypeScript/Node.js multi-agent orchestrator. Prior to version 5.12.2, `EnvironmentMa | |
CVE-2026-47144 |
medium | 5.5 | 0.0018 | 2026-07-20 | Shamefile is a linter for undocumented linter warnings. Prior to version 0.1.7, a path traversal vul | |
CVE-2026-16653 |
medium | 5.5 | 0.0069 | 2026-07-23 | A security flaw has been discovered in boazsegev facil.io up to 0.7.58. This affects the function ht | |
CVE-2026-16767 |
medium | 5.5 | 0.0068 | 2026-07-23 | A vulnerability was detected in Ne-Lexa php-zip up to 4.0.2. This affects the function ZipFile::extr | |
CVE-2026-18646 |
medium | 5.5 | 0.0077 | 2026-08-03 | A weakness has been identified in danpros HTMLy up to 3.1.1. This vulnerability affects unknown code | |
CVE-2026-70592 |
medium | 5.5 | 0.0044 | 2026-08-04 | Ghost is a Node.js content management system. From 1.20.1 until 6.54.1, an Administrator-level user | |
CVE-2026-18991 |
medium | 5.5 | 0.0062 | 2026-08-06 | A security vulnerability has been detected in nanocoai NanoClaw up to 2.0.64. This affects an unknow | |
CVE-2026-15059 |
medium | 5.5 | 0.0016 | 2026-08-10 | Local unprivileged users can terminate arbitrary local processes via a systemd-oomd IPC API due to a | |
CVE-2026-68922 |
medium | 5.5 | 0.0046 | 2026-08-18 | MobSF is a mobile application security testing tool used. Prior to 4.5.1, find_icon_path_zip in mobs | |
CVE-2026-73973 |
medium | 5.5 | 0.0029 | 2026-08-18 | Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. | |
CVE-2026-86928 |
medium | 5.5 | 0.0017 | 2026-10-20 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Ga | |
CVE-2026-75520 |
medium | 5.4 | 0.0028 | 2026-10-28 | Domoticz is a free, open source home automation system for Linux, Windows, macOS, and Raspberry Pi. | |
CVE-2026-40923 |
medium | 5.4 | 0.0022 | 2026-04-21 | Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting | |
CVE-2026-13426 |
medium | 5.4 | 0.0029 | 2026-06-26 | The Mattermost Go module github.com/mattermost/mattermost/server/public versions < v0.1.22 fail to v | |
CVE-2026-9108 |
medium | 5.4 | 0.0018 | 2026-07-14 | A path traversal security issue exists within Studio 5000 Logix Designer® due to improper limitation | |
CVE-2026-26032 |
medium | 5.4 | 0.0051 | 2026-07-15 | The PackagerResolver of Apache Ivy is able to download online artifacts and to (re)package them in a | |
CVE-2026-7869 |
medium | 5.4 | 0.0032 | 2026-08-05 | IBM Langflow OSS 1.0.0 through 1.10.3 is vulnerable to Path Traversal in the Knowledge Bases API (`P | |
CVE-2026-81163 |
medium | 5.4 | 0.0027 | 2026-10-22 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Drup | |
CVE-2026-95628 |
medium | 5.4 | 0.0034 | 2026-10-26 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apac | |
CVE-2026-95629 |
medium | 5.4 | 0.0034 | 2026-10-26 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apac | |
CVE-2026-76614 |
medium | 5.3 | 0.0040 | 2026-08-19 | OpenEMR before 8.3.0 contains a path traversal vulnerability in the EDI archive restore function. Th | |
CVE-2026-61702 |
medium | 5.3 | 0.0042 | 2026-10-15 | OpenPrinting CUPS is an open source printing system for Linux and other Unix-like operating systems. | |
CVE-2026-113738 |
medium | 5.3 | 0.0041 | 2026-10-21 | A vulnerability has been found in R6410418 Jackrong-llm-finetuning-guide up to ef2b17f2798cd18cd8537 | |
CVE-2026-114402 |
medium | 5.3 | 0.0042 | 2026-10-21 | Trudesk through 1.2.11 contains a path traversal and authorization bypass vulnerability in accountsC | |
CVE-2026-114376 |
medium | 5.3 | 0.0029 | 2026-10-21 | A weakness has been identified in leomoon-studios wiki-go up to 1.9.1. Affected by this vulnerabilit | |
CVE-2026-117509 |
medium | 5.3 | 0.0041 | 2026-10-27 | A vulnerability was detected in crownpku Rasa_NLU_Chi up to 0.12.2. Affected is the function Persist | |
CVE-2026-86388 |
medium | 5.3 | 0.0031 | 2026-10-28 | Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release version | |
CVE-2023-33524 |
medium | 5.3 | 0.0095 | 2023-06-05 | Advent/SSC Inc. Tamale RMS < 23.1 is vulnerable to Directory Traversal. If one traverses to the affe | |
CVE-2025-2707 |
medium | 5.3 | 0.0073 | 2025-03-24 | A vulnerability was determined in zhijiantianya ruoyi-vue-pro 2.4.1. This impacts an unknown functio | |
CVE-2025-2708 |
medium | 5.3 | 0.0074 | 2025-03-24 | A vulnerability was identified in zhijiantianya ruoyi-vue-pro 2.4.1. Affected is an unknown function | |
CVE-2026-0394 |
medium | 5.3 | 0.0043 | 2026-03-27 | When dovecot has been configured to use per-domain passwd files, and they are placed one path compon | |
CVE-2026-35483 |
medium | 5.3 | 0.0032 | 2026-04-07 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4. | |
CVE-2026-35484 |
medium | 5.3 | 0.0032 | 2026-04-07 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4. | |
CVE-2026-35487 |
medium | 5.3 | 0.0026 | 2026-04-07 | text-generation-webui is an open-source web interface for running Large Language Models. Prior to 4. | |
CVE-2026-35583 |
medium | 5.3 | 0.0032 | 2026-04-07 | Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, the configuration API endpoint | |
CVE-2026-40152 |
medium | 5.3 | 0.0040 | 2026-04-09 | PraisonAIAgents is a multi-agent teams system. Prior to 1.5.128, he list_files() tool in FileTools v | |
CVE-2026-40086 |
medium | 5.3 | 0.0059 | 2026-04-10 | Rembg is a tool to remove images background. Prior to 2.0.75, a path traversal vulnerability in the | |
CVE-2026-21726 |
medium | 5.3 | 0.0041 | 2026-04-15 | The CVE-2021-36156 fix validates the namespace parameter for path traversal sequences after a single | |
CVE-2026-32147 |
medium | 5.3 | 0.0035 | 2026-04-21 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erla | |
CVE-2026-6829 |
medium | 5.3 | 0.0026 | 2026-04-21 | nesquena hermes-webui contains a trust-boundary failure vulnerability that allows authenticated atta | |
CVE-2026-42028 |
medium | 5.3 | 0.0040 | 2026-05-08 | novaGallery is a php image gallery. Prior to version 2.1.1, a path traversal vulnerability has been | |
CVE-2026-44373 |
medium | 5.3 | 0.0045 | 2026-05-13 | Nitro is a next generation server toolkit. Prior to 3.0.260429-beta, an attacker could bypass a prox |