CWE-31

CVEs per yearBy the year they were published

1. 202411
2. 20265

Newest CVEs

• CVE-2026-94346

  PowerProtect Data Domain Virtual Edition, Feature Release versions 7.7.1.0 through 8.7, LTS2024 release versions 7.13.1.0 through 7.13.1.70, LTS2025 release…

  Dell · PowerProtect Data Domain Virtual Edition

  High7.2
• CVE-2026-108120

  path traversal inKoozali - SME Server

  koozali · SME Server

  High7.7
• CVE-2026-104810

  Mitel MiVoice Office 400 File Management File Browser path traversal vulnerability

  Mitel · Mitel MiVoice Office 400

  High8.4
• CVE-2026-104806

  Mitel MiVoice Office 400 System Logs Path Traversal Information Disclosure

  Mitel · Mitel MiVoice Office 400

  Medium5.5
• CVE-2026-104706

  Mitel MiVoice Office 400 view system files path traversal

  Mitel · Mitel MiVoice Office 400

  High8.4
• CVE-2024-41376

  dzzoffice 2.02.1 is vulnerable to Directory Traversal via user/space/about.php.

  Product not named

  High8.8
• CVE-2023-35860

  A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the…

  Product not named

  Medium5.3
• CVE-2024-36857

  Jan v0.4.12 was discovered to contain an arbitrary file read vulnerability via the /v1/app/readFileSync interface.

  Product not named

  High7.5
• CVE-2024-35429

  ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via eventRecord.

  Product not named

  Medium6.5
• CVE-2024-35431

  ZKTeco ZKBio CVSecurity 6.1.1 is vulnerable to Directory Traversal via photoBase64. An unauthenticated user can download local files from the server. NOTE:…

  Product not named

  High7.5

Vendors it comes up for most

1. Mitel3
2. Dell1
3. Ivanti1
4. koozali1
5. pgadmin.org1