Search CVEs
Unified search with smart filters. Use vendor:apache, cwe:79, epss>=80, cvss>=9, kev:, poc: in your query.
Results for "cwe:22"
1,001 found
Export CSV
| CVE | Severity | CVSS | EPSS | Published | Flags | Description |
|---|---|---|---|---|---|---|
CVE-2018-20250 |
— | — | — | — | KEV | WinRAR Absolute Path Traversal vulnerability leads to Remote Code Execution |
CVE-2019-19781 |
— | — | — | — | KEV | Citrix ADC, Citrix Gateway, and multiple Citrix SD-WAN WANOP appliance models contain an unspecified |
CVE-2020-3452 |
— | — | — | — | KEV | Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input |
CVE-2021-3199 |
— | — | — | — | KEV | ONLYOFFICE Docs contains a path traversal vulnerability that can occur when JWT is used, via a /.. s |
CVE-2021-21972 |
— | — | — | — | KEV | VMware vCenter Server vSphere Client contains a remote code execution vulnerability in a vCenter Ser |
CVE-2021-27065 |
— | — | — | — | KEV | Microsoft Exchange Server contains an unspecified vulnerability that allows for remote code executio |
CVE-2021-20023 |
— | — | — | — | KEV | SonicWall Email Security contains a path traversal vulnerability that allows a post-authenticated at |
CVE-2021-40444 |
— | — | — | — | KEV | Microsoft MSHTML contains a unspecified vulnerability that allows for remote code execution. |
CVE-2021-41277 |
— | — | — | — | KEV | Metabase contains a local file inclusion vulnerability in the custom map support in the API to read |
CVE-2022-27925 |
— | — | 0.9868 | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) contains flaw in the mboximport functionality, allowing an |
CVE-2022-30333 |
— | — | 0.9923 | — | KEV | RARLAB UnRAR on Linux and UNIX contains a directory traversal vulnerability, allowing an attacker to |
CVE-2022-37042 |
— | — | 0.9207 | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) contains an authentication bypass vulnerability in MailboxI |
CVE-2022-41352 |
— | — | 0.9548 | — | KEV | Synacor Zimbra Collaboration Suite (ZCS) allows an attacker to upload arbitrary files using cpio pac |
CVE-2023-26293 |
— | — | 0.0025 | 2023-04-11 | A vulnerability has been identified in Totally Integrated Automation Portal (TIA Portal) V15 (All ve | |
CVE-2023-38950 |
— | — | 0.9247 | — | KEV | ZKTeco BioTime contains a path traversal vulnerability in the iclock API that allows an unauthentica |
CVE-2023-41266 |
— | — | 0.8484 | — | KEV | Qlik Sense contains a path traversal vulnerability that allows a remote, unauthenticated attacker to |
CVE-2023-47246 |
— | — | 0.9885 | — | KEV | SysAid Server (on-premises version) contains a path traversal vulnerability that leads to code execu |
CVE-2024-7399 |
— | — | 0.9194 | — | KEV | Samsung MagicINFO 9 Server contains a path traversal vulnerability that could allow an attacker to w |
CVE-2024-41713 |
— | — | 0.9721 | — | KEV | Mitel MiCollab contains a path traversal vulnerability that could allow an attacker to gain unauthor |
CVE-2024-11667 |
— | — | 0.0293 | — | KEV | Multiple Zyxel firewalls contain a path traversal vulnerability in the web management interface that |
CVE-2024-55550 |
— | — | 0.3816 | — | KEV | Mitel MiCollab contains a path traversal vulnerability that could allow an authenticated attacker wi |
CVE-2024-57727 |
— | — | 0.9683 | — | KEV | SimpleHelp remote support software contains multiple path traversal vulnerabilities that allow unaut |
CVE-2025-61884 |
— | — | 0.9589 | — | KEV | Oracle E-Business Suite contains a server-side request forgery (SSRF) vulnerability in the Runtime c |
CVE-2025-8110 |
— | — | 0.8520 | — | KEV | Gogs contains a path traversal vulnerability affecting improper Symbolic link handling in the PutCon |
CVE-2026-4660 |
— | — | 0.0058 | 2026-04-09 | HashiCorp’s go-getter library up to v1.8.5 may allow arbitrary file reads on the file system during | |
CVE-2025-61624 |
— | — | 0.0134 | — | KEV | FortiOS, FortiPAM, FortiProxy, and FortiSwitchManager contain a path traversal vulnerability that ma |
CVE-2026-40576 |
— | — | 0.0046 | 2026-04-21 | excel-mcp-server is a Model Context Protocol server for Excel file manipulation. A path traversal vu | |
CVE-2026-40611 |
— | — | 0.0042 | 2026-04-21 | Let's Encrypt client and ACME library written in Go (Lego). Prior to 4.34.0, the webroot HTTP-01 cha | |
CVE-2026-40982 |
— | — | 0.0073 | 2026-05-07 | Spring Cloud Config allows applications to serve arbitrary text and binary files through the spring- | |
CVE-2026-34909 |
— | — | 0.6803 | — | KEV | Ubiquiti UniFi OS contains a path traversal vulnerability which could allow a malicious actor with a |
CVE-2026-20262 |
— | — | 0.2912 | — | KEV | Cisco Catalyst SD-WAN Manager contains a directory or path traversal vulnerability that could allow |
CVE-2026-44017 |
— | — | 0.0071 | 2026-06-24 | Docling simplifies document processing by parsing diverse formats and providing integrations with th | |
CVE-2026-59310 |
— | — | 0.0256 | — | KEV | Broadcom VMware vCenter contains a path traversal vulnerability which could allow a threat actor wit |
CVE-2026-85706 |
— | — | 0.9736 | — | KEV | GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows |
CVE-2026-43691 |
— | — | 0.0018 | 2026-09-14 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Ga | |
CVE-2026-43791 |
— | — | 0.0046 | 2026-09-14 | A validation issue was addressed with improved input sanitization. This issue is fixed in macOS Gold | |
CVE-2026-64756 |
— | — | 0.0018 | 2026-09-14 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 27 and iPad | |
CVE-2026-64790 |
— | — | 0.0019 | 2026-09-14 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Ga | |
CVE-2026-65382 |
— | — | 0.0018 | 2026-09-14 | A parsing issue in the handling of directory paths was addressed with improved path validation. This | |
CVE-2026-65411 |
— | — | 0.0017 | 2026-09-14 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iP | |
CVE-2026-84534 |
— | — | 0.0018 | 2026-09-14 | A path handling issue was addressed with improved validation. This issue is fixed in iOS 26.7 and iP | |
CVE-2026-84541 |
— | — | 0.0018 | 2026-09-14 | An input validation issue was addressed with improved input validation. This issue is fixed in macOS | |
CVE-2026-84568 |
— | — | 0.0017 | 2026-09-14 | A path traversal issue was addressed with improved path validation. This issue is fixed in macOS Gol | |
CVE-2026-84598 |
— | — | 0.0050 | 2026-09-14 | A path traversal issue was addressed with improved path validation. This issue is fixed in iOS 26.7 | |
CVE-2026-84624 |
— | — | 0.0018 | 2026-09-14 | A permissions issue was addressed with improved path validation. This issue is fixed in iOS 26.7 and | |
CVE-2026-86886 |
— | — | 0.0017 | 2026-09-14 | A path traversal issue was addressed with improved input validation. This issue is fixed in iOS 26.7 | |
CVE-2026-86902 |
— | — | 0.0018 | 2026-09-14 | A parsing issue in the handling of directory paths was addressed with improved path validation. This | |
CVE-2026-86910 |
— | — | 0.0018 | 2026-09-14 | A permissions issue was addressed with improved path validation. This issue is fixed in macOS Golden | |
CVE-2026-93616 |
— | — | 0.9161 | — | KEV | Check Point Security Management Server, Multi-Domain Security Management Server, Log Server, Multi-D |
CVE-2026-86928 |
— | — | 0.0017 | 2026-10-20 | A path handling issue was addressed with improved validation. This issue is fixed in macOS Golden Ga |