CWE-29
64 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 64
- Last 12 months
- 9
- Critical
- 22
- Known exploited
- 0
Critical 22High 33Medium 7Low 2Not scored 0
CVEs per yearBy the year they were published
- 20221
- 202313
- 202427
- 202515
- 20268
Newest CVEs
- CVE-2026-66152
A Path traversal vulnerability in the SonicWall NetExtender Linux client file extractor component allows an attacker to write arbitrary file as root.
SonicWall · NetExtender
High8.8 - CVE-2026-10732
All versions of the package decompress are vulnerable to Arbitrary File Write via Archive Extraction (Zip Slip) when extracting a ZIP archive containing two…
decompress
Medium6.1 - CVE-2026-24217
NVIDIA BioNeMo Core for Linux contains a vulnerability where a user could cause a path traversal by loading a malicious file. A successful exploit of this…
NVIDIA · BioNeMo Framework
High8.8 - CVE-2026-5627
Path Traversal in mintplex-labs/anything-llm
mintplex-labs · mintplex-labs/anything-llm
Critical9.1 - CVE-2025-15036
Path Traversal Vulnerability in mlflow/mlflow
mlflow · mlflow/mlflow
Critical9.6 - CVE-2026-30828
Wallos: SSRF via url parameter leading to File Traversal
ellite · Wallos
High8.7 - CVE-2025-66608
A vulnerability has been found in FAST/TOOLS provided by Yokogawa Electric Corporation. This product does not properly validate URLs. An attacker could send…
Yokogawa Electric Corporation · FAST/TOOLS
High8.7 - CVE-2024-2356
Remote Code Execution due to LFI in '/reinstall_extension' in parisneo/lollms-webui
parisneo · parisneo/lollms-webui
Critical9.6 - CVE-2025-12790
Rubygem-mqtt: rubygem-mqtt hostname validation
Nicholas J Humfrey · ruby-mqtt
High7.4 - CVE-2025-58291
Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
Huawei · HarmonyOS
Low3.3