File and Path Handling

Every one of the 13 is a mark on the map. Named now: 1 to 13, most at risk first.

1. Netgate pfSense CE Suricata Package v7.0.8_2 Directory Traversal Information DisclosureCVE-2025-34176Netgate · CVSS 5.3 · 20% likely

   CWE-22

2. Netgate pfSense CE Suricata Path Traversal Remote Code Execution VulnerabilityCVE-2025-12490Netgate · CVSS 8.8 · 17% likely

   CWE-22

3. An issue was discovered in pfSense through 2.4.4-p3. widgets/widgets/picture.widget.php uses the widgetkey parameter directly without sanitization (e.g., a basename call) for a pa…CVE-2019-16915Netgate · 3.7% likely

   CWE-22

4. Multiple directory traversal vulnerabilities in pfSense before 2.1.4 allow (1) remote attackers to read arbitrary .info files via a crafted path in the pkg parameter to pkg_mgr_in…CVE-2014-4690Netgate · 3.5% likely

   CWE-22

5. Absolute path traversal vulnerability in pkg_edit.php in pfSense before 2.1.4 allows remote attackers to read arbitrary XML files via a full pathname in the xml parameter.CVE-2014-4689Netgate · 2.8% likely

   CWE-22

6. In Netgate pfSense CE 2.8.0, the "WebCfg - Diagnostics: Command" privilege allows reading arbitrary files via diag_command.php dlPath directory traversal. NOTE: the Supplier's per…CVE-2025-53392Netgate · CVSS 5 · 1.9% likely

   CWE-36

7. In Netgate pfSense Plus before 26.07 and pfSense CE before 2.9.0, a Local File Inclusion (LFI) vulnerability in the Dashboard (index.php) widget sequence data handling allows an a…CVE-2026-97730Netgate · CVSS 8.5 · 1.0% likely

   CWE-24

8. Netgate pfSense CE Snort package v4.1.6_25 Directory Traversal Information DisclosureCVE-2025-34173Netgate · CVSS 5.3 · 1.0% likely

   CWE-22

9. Netgate pfSense CE through 2.9.0 Local File Read via Dynamic DNS Update URLCVE-2026-111230Netgate · CVSS 4.9 · 0.8% likely

   CWE-73

10. Netgate AMITI Antivirus build 23.0.305 Unquoted Service Path Privilege EscalationCVE-2016-20058Netgate · CVSS 7.8 · 0.7% likely

    CWE-428

11. NETGATE Registry Cleaner build 16.0.205 Unquoted Service Path Privilege EscalationCVE-2016-20057Netgate · CVSS 7.8 · 0.7% likely

    CWE-428

12. NETGATE Data Backup 3.0.620 - 'NGDatBckpSrv' Unquoted Service PathCVE-2019-25271NETGATE · CVSS 7.8 · 0.4% likely

    CWE-428

13. Amiti Antivirus 25.0.640 - Unquoted Service Path VulnerabilityCVE-2019-25269Netgate · CVSS 7.8 · 0.4% likely

    CWE-428

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.