CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
NAKIVO Backup & Replication Absolute Path Traversal and Arbitrary File Read Vulnerability (CVE-2024-48248) Analysis & Mitigation Guide
[Affected Scope] NAKIVO Backup & Replication versions prior to 11.0.0.88174
[Impact] Unauthenticated remote attackers can exploit absolute path traversal to read arbitrary system files, potentially leading to enterprise-wide Remote Code Execution (RCE) due to cleartext credentials stored in PhysicalDiscovery.
[Mitigation] Immediately upgrade NAKIVO Backup & Replication to version 11.0.0.88174 or later and restrict external access.
Ivanti Endpoint Manager (EPM) Absolute Path Traversal and Information Disclosure Vulnerability (CVE-2024-13161) Security Advisory
[Affected Scope] Ivanti EPM versions prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update
[Impact] Remote unauthenticated attackers can exploit absolute path traversal to leak highly sensitive system information
[Mitigation] Immediately apply the official Ivanti security updates and restrict access to the EPM management interfaces
CVE-2024-13160 Technical Vulnerability Analysis & Patch Advisory (CVSS 7.5)
[Affected Scope] Systems running unpatched versions impacted by CVE-2024-13160
[Impact] Absolute path traversal in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote...
[Mitigation] Apply vendor security patches and restrict external network exposure.
Ivanti Endpoint Manager (EPM) Absolute Path Traversal Vulnerability (CVE-2024-13159) Security Advisory
[Affected Scope] Ivanti EPM 2024 prior to the January 2025 Security Update, and EPM 2022 SU6 prior to the January 2025 Security Update
[Impact] A remote unauthenticated attacker can exploit an absolute path traversal vulnerability to leak highly sensitive system information and credentials
[Mitigation] Immediately apply the official Ivanti January 2025 Security Update and restrict access to the EPM management console
WinRAR UNACEV2.dll Path Traversal and Remote Code Execution Vulnerability (CVE-2018-20250)
[Affected Scope] WinRAR versions 5.61 and prior (including UNACEV2.dll library)
[Impact] Attackers can bypass extraction path restrictions to drop malicious executables into arbitrary directories, such as the Windows Startup folder, leading to system compromise [1, 2, https://research.checkpoint.com/extracting-code-execution-from-winrar/]
[Mitigation] Immediately upgrade WinRAR to version 5.70 or later, or manually delete the vulnerable UNACEV2.dll file [1, https://research.checkpoint.com/extracting-code-execution-from-winrar/]