CWE-25

13 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 1High 8Medium 3Low 1Not scored 0

CVEs per yearBy the year they were published

CVE-2022-20775
Cisco SD-WAN Software Privilege Escalation Vulnerability
Cisco · Cisco Catalyst SD-WAN
ExploitedHigh7.8

CVE-2026-68959
SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows…
Sky Co., LTD. · SKYSEA Client View
Medium5.8
CVE-2026-23877
Directory Traversal & Filesystem can be accessed by a non-admin user
swingmx · swingmusic
Medium5.3
CVE-2025-68916
Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.
Riello · NetMan
Critical9.1
CVE-2025-58286
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
Huawei · HarmonyOS
Low3.3
CVE-2025-0225
Tsinghua Unigroup Electronic Archives System exampleDownload.html path traversal
Tsinghua Unigroup · Electronic Archives System
Medium5.3
CVE-2023-6947
Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversal
https://fooplugins.com · FooGallery Premium
High7.7
CVE-2024-2442
Path Traversal vulnerability in Franklin Fueling System EVO 550/5000
Franklin Fueling System · EVO 550
High7.5
CVE-2023-52138
Path traversal via crafted cpio archives in Engrampa archivers
mate-desktop · engrampa
High8.2
CVE-2023-6919
Path Traversal in VGuard IP Camera Network Recorder
Biges Safe Life Technologies Electronics Inc. · VGuard
High7.5
CVE-2023-52076
Remote Code Execution Vulnerability in Atril's EPUB ebook parsing
mate-desktop · atril
High8.5