File and Path Handling

Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.

1. The 'checksum' parameter of the '/common/download_attachment.php' script in the Quest KACE System Management Appliance 8.0.318 can be abused to read arbitrary files with 'www' pri…CVE-2018-11137Quest · 6.3% likely

   CWE-22

2. This vulnerability allows remote attackers to create a denial-of-service condition on vulnerable installations of Quest NetVault Backup 11.2.0.13. Although authentication is requi…CVE-2018-1162Quest · 4.9% likely

   CWE-22

3. An issue was discovered in Quest KACE Desktop Authority before 11.2. /dacomponentui/profiles/profileitems/outlooksettings/Insertimage.aspx contains a vulnerability that could allo…CVE-2021-44031Quest · 2.2% likely

   CWE-434

4. Quest Foglight for Databases FileServlet External Control of File Path Information Disclosure VulnerabilityCVE-2026-92193Quest · CVSS 6.5 · 2.1% likely

   CWE-73

5. The 'IMAGES_JSON' and 'attachments_to_remove[]' parameters of the '/adminui/advisory.php' script in the Quest KACE System Management Virtual Appliance 8.0.318 can be abused to wri…CVE-2018-11141Quest · 2.0% likely

   CWE-22

6. Quest Foglight for Databases unzipFile Directory Traversal Remote Code Execution VulnerabilityCVE-2026-92197Quest · CVSS 8.8 · 1.3% likely

   CWE-22

7. Quest Foglight for Databases loadEvolveLicense Directory Traversal Remote Code Execution VulnerabilityCVE-2026-92195Quest · CVSS 8.8 · 1.3% likely

   CWE-22

8. Quest Foglight for Databases loadManageServerLicense Directory Traversal Remote Code Execution VulnerabilityCVE-2026-92194Quest · CVSS 8.8 · 1.3% likely

   CWE-22

9. Quest Foglight for Databases installLicense Directory Traversal Remote Code Execution VulnerabilityCVE-2026-92192Quest · CVSS 8.8 · 1.3% likely

   CWE-22

10. Quest Foglight for Databases extractAndCreateUploadInfoList Directory Traversal Remote Code Execution VulnerabilityCVE-2026-92187Quest · CVSS 8.8 · 1.3% likely

    CWE-22

11. Quest Foglight for Databases paFnUploadFileAndCreateInfo Directory Traversal Remote Code Execution VulnerabilityCVE-2026-92186Quest · CVSS 8.8 · 1.3% likely

    CWE-22

12. Quest Foglight for Databases writeTopologySectionToFile External Control of File Path Remote Code Execution VulnerabilityCVE-2026-92189Quest · CVSS 9.8 · 0.6% likely

    CWE-73

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.