File and Path Handling

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

1. ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to upload files to arbitrary locations due to a path traversal vulnerability. This could l…CVE-2018-15694Tenable · 1.5% likely

   CWE-22

2. A vulnerability was reported where through modifying the scan variables, an authenticated user in Tenable products, that has Scan Policy Configuration roles, could manipulate audi…CVE-2022-4313Tenable · CVSS 8.8 · 1.2% likely

   CWE-427

3. ASUSTOR Data Master 3.1.5 and below allows authenticated remote non-administrative users to delete any file on the file system due to a path traversal vulnerability in wallpaper.c…CVE-2018-15695Tenable · 1.0% likely

   CWE-22

4. Arbitrary File WriteCVE-2023-3252Tenable · CVSS 6.8 · 0.8% likely

   CWE-427

5. Tenable Agent Path Traversal Leading to Remote Code ExecutionCVE-2026-15265tenable · CVSS 9.1 · 0.6% likelycovered by CyberSIXT

   CWE-22

6. Tenable Plugin Feed ID #202306261202 Fixes Privilege Escalation VulnerabilityCVE-2023-2005Tenable · CVSS 6.3 · 0.4% likely

   CWE-427

7. Junction File ManipulationCVE-2026-33694Tenable, Inc. · CVSS 7.4 · 0.2% likelycovered by CyberSIXT

   CWE-59

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.