Vulnerabilities (CVE)

Filtered by CWE-25
Total 4 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-6947 1 Fooplugins 1 Foogallery 2025-02-24 N/A 7.7 HIGH
The Best WordPress Gallery Plugin – FooGallery plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.26. This makes it possible for authenticated attackers, with contributor level or higher to read the contents of arbitrary folders on the server, which can contain sensitive information such as folder structure.
CVE-2025-0225 2025-01-05 4.0 MEDIUM 4.3 MEDIUM
A vulnerability classified as problematic was found in Tsinghua Unigroup Electronic Archives System 3.2.210802(62532). Affected by this vulnerability is an unknown functionality of the file /setting/ClassFy/exampleDownload.html. The manipulation of the argument name leads to path traversal: '/../filedir'. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
CVE-2024-2442 2024-11-21 N/A 7.5 HIGH
Franklin Fueling System EVO 550 and EVO 5000 are vulnerable to a Path Traversal vulnerability that could allow an attacker to access sensitive files on the system.
CVE-2023-6919 1 Biges 18 Vg-255-bv, Vg-255-bv Firmware, Vg-255-df and 15 more 2024-11-21 N/A 7.5 HIGH
Path Traversal: '/../filedir' vulnerability in Biges Safe Life Technologies Electronics Inc. VGuard allows Absolute Path Traversal.This issue affects VGuard: before V500.0003.R008.4011.C0012.B351.C.