CWE-32

Total CVEs
2
Vulnerabilities
Avg CVSS v3
7.5
High
Latest CVE
2024
Most Recent

Severity Distribution

Critical 0
0%
High 2
100%
Medium 0
0%
Low 0
0%

External References

All CVEs (2)

Page 1 of 1
CVSS:7.5(High)

The web server of Lawo AG vsm LTC Time Sync (vTimeSync) is affected by a "..." (triple dot) path traversal vulnerability. By sending a specially crafted HTTP request, an unauthenticated remote attacke...

CWE-322024
CVSS:7.5(High)

IBM Sterling Secure Proxy 6.0.0.0, 6.0.0.1, 6.0.0.2, 6.0.0.3, and 6.1.0.0 could allow a remote attacker to traverse directories on the system. An attacker could send a specially crafted URL request co...

CWE-322024