File and Path Handling

Every one of the 43 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Progress Software WhatsUp Gold GetFileWithoutZip Directory Traversal - Remote Code ExecutionCVE-2024-4885Progress Software Corporation · CVSS 9.8 · 99% likely

   CWE-22

2. RCE vulnerability in Progress ShareFile Storage Zones Controller (SZC)CVE-2026-2701Progress · CVSS 9.1 · 55% likelycovered by CyberSIXT

   CWE-434

3. WhatsUp Gold WriteDataFile Directory Traversal Remote Code Execution VulnerabilityCVE-2024-46909Progress Software Corporation · CVSS 9.8 · 49% likely

   CWE-22

4. WhatsUp Gold - SnmpExtendedActiveMonitor path traversalCVE-2024-12105Progress Software Corporation · CVSS 6.5 · 43% likely

   CWE-22

5. WhatsUp Gold APM Unrestricted File Upload Remote Code Execution VulnerabilityCVE-2024-5008Progress Software Corporation · CVSS 8.8 · 17% likely

   CWE-434

6. WS_FTP Server Directory TraversalCVE-2023-42657Progress Software Corporation · CVSS 9.9 · 16% likely

   CWE-22

7. Directory traversal vulnerability in report/reportViewAction.jsp in Progress Software OpenEdge 11.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the selec…CVE-2014-8555Progress · 7.5% likely

   CWE-22

8. Absolute path traversal vulnerability in the RadAsyncUpload control in the RadControls in Telerik UI for ASP.NET AJAX before Q3 2012 SP2 allows remote attackers to write to arbitr…CVE-2014-2217Progress · 4.2% likely

   CWE-22

9. A Directory Traversal issue was discovered in SSHServerAPI.dll in Progress ipswitch WS_FTP Server 2018 before 8.6.1. An attacker can supply a string using special patterns via the…CVE-2019-12143Progress · 2.0% likely

   CWE-22

10. Chef Software's mixlib-archive versions 0.3.0 and older are vulnerable to a directory traversal attack allowing attackers to overwrite arbitrary files by using ".." in tar archive…CVE-2017-1000026Progress · 1.9% likely

    CWE-22

11. WhatsUp Gold AppProfileImport path traversal vulnerabilityCVE-2024-5017Progress Software Corporation · CVSS 6.5 · 1.6% likely

    CWE-22

12. WS_FTP Server Arbitrary File UploadCVE-2023-42659Progress Software Corporation · CVSS 9.1 · 1.1% likely

    CWE-434

13. An arbitrary file upload vulnerability in Progress Sitefinity CMS versions 4.0 through 11.0 related to image uploads.CVE-2018-17055Progress · 1.0% likely

    CWE-434

14. Arbitrary file write via path traversal in Progress ShareFile Storage Zones Controller potentially leading to remote code executionCVE-2026-16139Progress · CVSS 7.2 · 0.9% likely

    CWE-22

15. An issue was discovered in Progress Sitefinity 13.3 before 13.3.7647, 14.0 before 14.0.7736, 14.1 before 14.1.7826, 14.2 before 14.2.7930, and 14.3 before 14.3.8025. There is pote…CVE-2023-29375Progress · CVSS 9.8 · 0.8% likely

    CWE-434

16. WhatsUp Gold LoadCSSUsingBasePath Directory Traversal Information Disclosure VulnerabilityCVE-2024-5019Progress Software Corporation · CVSS 5.3 · 0.8% likely

    CWE-22

17. WhatsUp Gold LoadUsingBasePath Directory Traversal Information Disclosure VulnerabilityCVE-2024-5018Progress Software Corporation · CVSS 5.3 · 0.8% likely

    CWE-22

18. In Progress Flowmon Packet Investigator before 12.1.0, a Flowmon user with access to Flowmon Packet Investigator could leverage a path-traversal vulnerability to retrieve files on…CVE-2023-26101Progress · CVSS 7.5 · 0.7% likely

    CWE-22

19. Path traversal via unsanitized upload filename leads to arbitrary file write in Progress ShareFile Storage Zones ControllerCVE-2026-16137Progress · CVSS 7.2 · 0.7% likely

    CWE-22

20. AppDataStorageProvider Path Traversal Deserialization Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-13186Progress Software · CVSS 8.1 · 0.7% likely

    CWE-22

21. Virtual Folder Path Confinement Bypass in Progress WS_FTP ServerCVE-2026-90866Progress Software · CVSS 9.1 · 0.7% likelycovered by CyberSIXT

    CWE-221 article

22. Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in Progress WS_FTP ServerCVE-2024-7744Progress Software Corporation · CVSS 6.5 · 0.7% likely

    CWE-22

23. Telerik Document Processing Path TraversalCVE-2024-11343Progress Software · CVSS 8.3 · 0.7% likely

    CWE-22

24. Authenticated Path Traversal allows MOVEit admins to view arbitrary system filesCVE-2026-8650Progress · CVSS 4.5 · 0.6% likely

    CWE-23

25. Progress Application Server (PAS) for OpenEdge File Upload via Directory TraversalCVE-2023-40051Progress Software Corporation · CVSS 9.1 · 0.6% likely

    CWE-434

26. File Extension Restriction Bypass in MOVEit TransferCVE-2026-8801Progress · CVSS 3.5 · 0.5% likely

    CWE-46

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.