TYPE DE FAIBLESSE

CWE-24

125 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-24 (en anglais) →

CVE-2025-27920Les serveurs Output Messenger antérieurs à la version 2.0.63 sont vulnérables à une faille de traversée de répertoire (directory traversal) qui permet à des attaquants de lire des … KEV 7.2 ÉLEVÉE

CVE-2025-46646In Artifex Ghostscript before 10.05.0, decode_utf8 in base/gp_utf8.c mishandles overlong UTF-8 encoding. NOTE: this issue exists because of an incomplete fix for CVE-2024-46954. 4.5 MOYENNE

CVE-2024-53636An arbitrary file upload vulnerability via writefile.php of Serosoft Academia Student Information System (SIS) EagleR-1.0.118 allows attackers to execute arbitrary code via ../ in … 6.4 MOYENNE

CVE-2025-43928In Infodraw Media Relay Service (MRS) 7.1.0.0, the MRS web server (on port 12654) allows reading arbitrary files via ../ directory traversal in the username field. Reading ServerPa… 5.8 MOYENNE

CVE-2025-43919GNU Mailman 2.1.39, as bundled in cPanel (and WHM), allows unauthenticated attackers to read arbitrary files via ../ directory traversal at /mailman/private/mailman (aka the privat… 5.8 MOYENNE

CVE-2025-32807A path traversal vulnerability in FusionDirectory before 1.5 allows remote attackers to read arbitrary files on the host that end with .png (and .svg or .xpm for some configuration… 5.3 MOYENNE

CVE-2025-2961A vulnerability classified as problematic was found in opensolon up to 3.1.0. This vulnerability affects the function render_mav of the file /aa of the component org.noear.solon.co… 5.3 MOYENNE

CVE-2025-30343A directory traversal issue was discovered in OpenSlides before 4.2.5. Files can be uploaded to OpenSlides meetings and organized in folders. The interface allows users to download… 3.0 FAIBLE

CVE-2025-1599A vulnerability was found in SourceCodester Best Church Management Software 1.0. It has been rated as problematic. Affected by this issue is some unknown functionality of the file … 5.3 MOYENNE

CVE-2025-1588A vulnerability has been found in PHPGurukul Online Nurse Hiring System 1.0 and classified as critical. This vulnerability affects unknown code of the file /admin/manage-nurse.php.… 6.9 MOYENNE

CVE-2025-1584A vulnerability classified as problematic was found in opensolon Solon up to 3.0.8. This vulnerability affects unknown code of the file solon-projects/solon-web/solon-web-staticfil… 5.3 MOYENNE

CVE-2025-1086A vulnerability has been found in Safetytest Cloud-Master Server up to 1.1.1 and classified as critical. This vulnerability affects unknown code of the file /static/. The manipulat… 6.9 MOYENNE

CVE-2025-0390A vulnerability classified as critical was found in Guangzhou Huayi Intelligent Technology Jeewms up to 20241229. This vulnerability affects unknown code of the file /wmOmNoticeHCo… 6.9 MOYENNE

CVE-2024-13130A vulnerability was found in Dahua IPC-HFW1200S, IPC-HFW2300R-Z, IPC-HFW5220E-Z and IPC-HDW1200S up to 20241222. It has been rated as problematic. Affected by this issue is some un… 5.3 MOYENNE

CVE-2024-12897A vulnerability was found in Intelbras VIP S3020 G2, VIP S4020 G2, VIP S4020 G3 and VIP S4320 G2 up to 20241222. It has been classified as critical. This affects an unknown part of… 5.3 MOYENNE

CVE-2024-12482A vulnerability was found in cjbi wetech-cms 1.0/1.1/1.2. It has been rated as problematic. Affected by this issue is the function backup of the file wetech-cms-master\wetech-basic… 5.3 MOYENNE

CVE-2022-20656A vulnerability in the web-based management interface of Cisco PI and Cisco EPNM could allow an authenticated, remote attacker to conduct a path traversal attack on an af… 6.5 MOYENNE

CVE-2024-10379A vulnerability classified as problematic was found in ESAFENET CDG 5. Affected by this vulnerability is the function actionViewDecyptFile of the file /com/esafenet/servlet/client/… 5.3 MOYENNE

CVE-2024-6786The vulnerability allows an attacker to craft MQTT messages that include relative path traversal sequences, enabling them to read arbitrary files on the system. This could lead to … 6.0 MOYENNE

CVE-2024-8409A vulnerability classified as problematic has been found in ABCD ABCD2 up to 2.2.0-beta-1. This affects an unknown part of the file /common/show_image.php. The manipulation of the … 5.3 MOYENNE

CVE-2024-37403Ivanti Docs@Work for Android, before 2.26.0 is affected by the 'Dirty Stream' vulnerability. The application fails to properly sanitize file names, resulting in a path traversal-af… 5.5 MOYENNE

CVE-2024-23657Les applications utilisant Nuxt Devtools dans un environnement de développement sont concernées. Un attaquant peut inciter un développeur à visiter une page web malveillante, laque… 8.8 ÉLEVÉE

CVE-2024-6746A vulnerability classified as problematic was found in NaiboWang EasySpider 0.6.2 on Windows. Affected by this vulnerability is an unknown functionality of the file \EasySpider\res… 5.3 MOYENNE

CVE-2024-4790A vulnerability classified as problematic has been found in DedeCMS 5.7.114. This affects an unknown part of the file /sys_verifies.php?action=view. The manipulation of the argumen… 5.3 MOYENNE

CVE-2024-3686A vulnerability has been found in DedeCMS 5.7.112-UTF8 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file update_guide.php. The m… 4.3 MOYENNE

CVE-2024-3227A vulnerability was found in Panwei eoffice OA up to 9.5. It has been declared as critical. This vulnerability affects unknown code of the file /general/system/interface/theme_set/… 4.7 MOYENNE

CVE-2024-3218A vulnerability classified as critical has been found in Shibang Communications IP Network Intercom Broadcasting System 1.0. This affects an unknown part of the file /php/busyscree… 5.4 MOYENNE

CVE-2024-2825A vulnerability classified as critical has been found in lakernote EasyAdmin up to 20240315. This affects an unknown part of the file /ureport/designer/saveReportFile. The manipula… 6.3 MOYENNE

CVE-2024-22079Les enregistreurs de défauts numériques Elspec G5 (v1.1.4.15 et versions antérieures) présentent une faille dans la fonction de téléchargement des journaux permettant une traversée… 7.5 ÉLEVÉE

CVE-2024-2564A vulnerability was found in PandaXGO PandaX up to 20240310 and classified as critical. This issue affects the function ExportUser of the file /apps/system/api/user.go. The manipul… 6.3 MOYENNE

CVE-2024-2563A vulnerability has been found in PandaXGO PandaX up to 20240310 and classified as critical. This vulnerability affects the function DeleteImage of the file /apps/system/router/upl… 5.4 MOYENNE

CVE-2024-2318A vulnerability was found in ZKTeco ZKBio Media 2.0.0_x64_2024-01-29-1028. It has been classified as problematic. Affected is an unknown function of the file /pro/common/download o… 2.1 FAIBLE

CVE-2024-1459A path traversal vulnerability was found in Undertow. This issue may allow a remote attacker to append a specially-crafted sequence to an HTTP request for an application deployed t… 5.3 MOYENNE

CVE-2024-0989A vulnerability, which was classified as problematic, has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected by this issue is the function del_sn_db of the file /a… 5.4 MOYENNE

CVE-2024-0882A vulnerability was found in qwdigital LinkWechat 5.1.0. It has been classified as problematic. This affects an unknown part of the file /linkwechat-api/common/download/resource of… 4.3 MOYENNE

CVE-2023-52076Atril Document Viewer (versions antérieures à 1.26.2) sur les bureaux Linux MATE est sujet à une faille qui permet à un document spécialement conçu d'écrire de nouveaux fichiers pa… 8.5 ÉLEVÉE

CVE-2024-0465A vulnerability classified as problematic was found in code-projects Employee Profile Management System 1.0. This vulnerability affects unknown code of the file download.php. The m… 3.5 FAIBLE

CVE-2024-0417A vulnerability, which was classified as critical, was found in DeShang DSShop up to 2.1.5. This affects an unknown part of the file application/home/controller/MemberAuth.php. The… 5.4 MOYENNE

CVE-2024-0416A vulnerability, which was classified as critical, has been found in DeShang DSMall up to 5.0.3. Affected by this issue is some unknown functionality of the file application/home/c… 5.4 MOYENNE

CVE-2023-6699Les sites WordPress utilisant l'extension WP Compress – Image Optimizer (version 6.10.33 et antérieures) sont vulnérables à une faille de traversée de répertoire (directory travers… 9.1 CRITIQUE

CVE-2024-0354A vulnerability, which was classified as critical, has been found in unknown-o download-station up to 1.1.8. This issue affects some unknown processing of the file index.php. The m… 5.3 MOYENNE

CVE-2024-0341A vulnerability was found in Inis up to 2.0.1. It has been rated as problematic. This issue affects some unknown processing of the file /app/api/controller/default/File.php of the … 3.5 FAIBLE

CVE-2023-7134A vulnerability was found in SourceCodester Medicine Tracking System 1.0. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argumen… 6.3 MOYENNE

CVE-2023-7098** UNSUPPORTED WHEN ASSIGNED ** A vulnerability classified as problematic was found in icret EasyImages 2.8.3. This vulnerability affects unknown code of the file app/hide.php. The… 3.1 FAIBLE

CVE-2023-7058A vulnerability was found in SourceCodester Simple Student Attendance System 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality. The … 6.3 MOYENNE

CVE-2023-7041A vulnerability, which was classified as critical, has been found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this issue is some unknown functionality of the file /file-… 5.4 MOYENNE

CVE-2023-7040A vulnerability classified as problematic was found in codelyfe Stupid Simple CMS up to 1.2.4. Affected by this vulnerability is an unknown functionality of the file /file-manager/… 4.3 MOYENNE

CVE-2023-6900A vulnerability, which was classified as critical, has been found in rmountjoy92 DashMachine 0.5-4. Affected by this issue is some unknown functionality of the file /settings/delet… 4.6 MOYENNE

CVE-2018-25094A vulnerability was found in ระบบบัญชีออนไลน์ Online Accounting System up to 1.4.0 and classified as problematic. This issue affects some unknown processing of the file ckeditor/fi… 3.5 FAIBLE

CVE-2023-4171A vulnerability classified as problematic was found in Chengdu Flash Flood Disaster Monitoring and Warning System 2.0. This vulnerability affects unknown code of the file \Service\… 4.3 MOYENNE