CWE-25 · weakness in File and Path Handling
Path Traversal: '/../filedir'
12 CVEs · 1 exploited
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- exploited in the wild
- 1
Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.
- Cisco SD-WAN Software Privilege Escalation Vulnerability
- Riello UPS NetMan 208 Application before 1.12 allows cgi-bin/certsupload.cgi /../ directory traversal for file upload with resultant code execution.
- Path traversal via crafted cpio archives in Engrampa archivers
- Path Traversal in Neutron IP Camera
- Best WordPress Gallery Plugin – FooGallery <= 2.4.16 - Authenticated (Contributor+) Directory Traversal
- Path Traversal vulnerability in Franklin Fueling System EVO 550/5000
- SKYSEA Client View and SKYMEC IT Manager contain a path traversal vulnerability. If this vulnerability is exploited, an attacker who can log in to a Windows system on which the af…
- Cisco SD-WAN Software Privilege Escalation Vulnerabilities
- Directory Traversal & Filesystem can be accessed by a non-admin user
- Path Traversal in VGuard IP Camera Network Recorder
- Tsinghua Unigroup Electronic Archives System exampleDownload.html path traversal
- Denial of service (DoS) vulnerability in the office service. Successful exploitation of this vulnerability may affect availability.
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.