File and Path Handling

Every one of the 6 is a mark on the map. Named now: 1 to 6, most at risk first.

1. NCH IVM Attendant v5.12 and earlier suffers from a directory traversal weakness upon uploading plugins in a ZIP archive. This can lead to code execution if a ZIP element's pathnam…CVE-2021-37444Nchsoftware · 1.9% likely

   CWE-22

2. In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentdelete?file=/.. for file deletion.CVE-2021-37447Nchsoftware · 1.6% likely

   CWE-22

3. In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via logprop?file=/.. for file reading.CVE-2021-37445Nchsoftware · 1.4% likely

   CWE-22

4. NCH IVM Attendant v5.12 and earlier allows path traversal via the logdeleteselected check0 parameter for file deletion.CVE-2021-37443Nchsoftware · 1.2% likely

   CWE-22

5. NCH IVM Attendant v5.12 and earlier allows path traversal via viewfile?file=/.. to read files.CVE-2021-37442Nchsoftware · 1.2% likely

   CWE-22

6. In NCH Quorum v2.03 and earlier, an authenticated user can use directory traversal via documentprop?file=/.. for file reading.CVE-2021-37446Nchsoftware · 1.2% likely

   CWE-22

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.