5033 matches found
CVE-2024-45253 Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2024-45253 Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Avigilon – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2024-45253
CVE-2024-45253 describes a path traversal (CWE-22) in Avigilon products. The CVSS 3.1 vector indicates NETWORK exploitation, LOW attack complexity, no privileges required, and no user interaction, with the impact limited to confidentiality (HIGH) and no integrity/availability impact per the provi...
CVE-2024-47430
creationtimestamp| type| source ---|---|--- 2024-11-12 22:15:35+00:00| seen| https://t.me/cvedetector/10729...
CVE-2024-47440
creationtimestamp| type| source ---|---|--- 2024-11-12 22:15:27+00:00| seen| https://t.me/cvedetector/10723...
CVE-2024-49520
creationtimestamp| type| source ---|---|--- 2024-11-12 22:15:24+00:00| seen| https://t.me/cvedetector/10719...
CVE-2024-32117
An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in Fortinet FortiManager version 7.4.0 through 7.4.2 and below 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and below 7.2.5 & FortiAnalyzer-BigData version 7.4.0 and below 7.2.7 allows a...
CVE-2024-35274
CVE-2024-35274 describes a Path Traversal vulnerability affecting Fortinet FortiAnalyzer (versions below 7.4.2), FortiManager (below 7.4.2), and FortiAnalyzer-BigData (below 7.2.7 and 7.4.0). The underlying issue is an improper limitation of a pathname to a restricted directory, allowing a privil...
CVE-2024-32117
The CVE-2024-32117 entry describes a path traversal (CWE-22) vulnerability in Fortinet products impacting file access. Affected are: FortiManager 7.4.0–7.4.2 and below 7.2.5, FortiAnalyzer 7.4.0–7.4.2 and below 7.2.5, and FortiAnalyzer-BigData 7.4.0 and below 7.2.7 . The issue allows a privileged...
AZL-52227 CVE-2024-51744 affecting package kube-vip-cloud-provider for versions less than 0.0.2-22
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...
AZL-52257 CVE-2024-51744 affecting package cert-manager for versions less than 1.11.2-22
golang-jwt is a Go implementation of JSON Web Tokens. Unclear documentation of the error behavior in ParseWithClaims can lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by...
CVE-2022-32149 affecting package gh for versions less than 2.13.0-22
CVE-2022-32149 affecting package gh for versions less than 2.13.0-22. A patched version of the package is available...
openSUSE: Security Advisory for the Linux Kernel (Live Patch 22 for SLE 15 SP4) (SUSE-SU-2024:3805-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Fortinet FortiWeb Arbitrary file/directory deletion (FG-IR-21-158)
The version of FortiWeb installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-21-158 advisory. - An improper limitation of a pathname to a restricted directory 'Path Traversal' vulnerability CWE-22 in FortiWeb management...
CVE-2024-48919
creationtimestamp| type| source ---|---|--- 2024-10-22 23:49:34+00:00| seen| https://t.me/cvedetector/8648...
CVE-2024-39753
creationtimestamp| type| source ---|---|--- 2024-10-22 22:09:05+00:00| seen| https://t.me/cvedetector/8644...
CVE-2024-46902
creationtimestamp| type| source ---|---|--- 2024-10-22 22:09:01+00:00| seen| https://t.me/cvedetector/8640 2026-07-16 21:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mqs5dcfvkc2s...
CVE-2024-45518
creationtimestamp| type| source ---|---|--- 2024-10-22 20:28:39+00:00| seen| https://t.me/cvedetector/8637 2026-07-05 13:07:06+00:00| seen| https://bsky.app/profile/cyberhub.blog/post/3mpvneubtik2l...