ALPINE-CVE-2021-3996

A logic error was found in the libmount library of util-linux in the function that allows an unprivileged user to unmount a FUSE filesystem. This flaw allows a local user on a vulnerable system to unmount other users' filesystems that are either world-writable themselves like /tmp or mounted in a...

DEBIAN-CVE-2021-3997

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp...

AZL-10638 CVE-2021-3997 affecting package systemd for versions less than 250.3-21

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp...

DEBIAN-CVE-2021-3701

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...

PYSEC-2022-43067

A flaw was found in ansible-runner where the default temporary files configuration in ansible-2.0.0 are written to world R/W locations. This flaw allows an attacker to pre-create the directory, resulting in reading private information or forcing ansible-runner to write files as the legitimate use...

CVE-2021-3997

A flaw was found in systemd. An uncontrolled recursion in systemd-tmpfiles may lead to a denial of service at boot time when too many nested directories are created in /tmp...

PT-2022-23988

Name of the Vulnerable Software and Affected Versions Neo4j APOC versions 4.3.0.0 through 4.3.0.6 Neo4j APOC versions 4.4.0.0 through 4.4.0.7 Description A Directory Traversal issue exists, allowing access to sibling directories via the apoc.log.stream function. This issue is limited to sibling...

CVE-2022-37423: Improper Limitation of a Pathname to a Restricted Directory

Neo4j APOC Awesome Procedures on Cypher before 4.3.0.7 and 4.x before 4.4.0.8 allows Directory Traversal to sibling directories via apoc.log.stream...

GHSA-2JQ9-6XX7-3H29 `temporary` makes use of uninitialized memory

Uninitialized memory is used as a RNG seed in temporary. This has been resolved in the 0.6.4 release. The crate is not intended to be used outside of a testing environment. For a general purpose crate to create temporary directories, tempfile is an alternative for this crate...

The vulnerability of the Jenkins Deployer Framework Plugin involves incorrect path name restrictions for restricted access directories, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins Deployer Framework Plugin is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

GLSA-202208-05 : Icinga Web 2: Multiple Vulnerabilities

The remote host is affected by the vulnerability described in GLSA-202208-05 Icinga Web 2: Multiple Vulnerabilities - Icinga Icinga Web2 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 has a Directory Traversal vulnerability which allows an attacker to access arbitrary files that are readable by the process...

Synology Storage Analyzer 路径遍历漏洞

Synology Storage Analyzer is a storage analyzer from Synology China. It allows you to quickly view overall Synology NAS usage trends, create and manage tasks to analyze storage space, and generate detailed reports on volume usage. A path traversal vulnerability exists in Synology Storage Analyzer...

AZL-10461 CVE-2022-29154 affecting package rsync for versions less than 3.2.5-1

An issue was discovered in rsync before 3.2.5 that allows malicious remote servers to write arbitrary files inside the directories of connecting peers. The server chooses which files/directories are sent to the client. However, the rsync client performs insufficient validation of file names. A...

Path Traversal

org.dspace:dspace-jspui is vulnerable to path traversal. The vulnerability exists due to the resumable upload implementations in SubmissionController and FileUploadRequest components, which allows an attacker to modify request parameters during submission and create files or directories anywhere ...

Directory traversal

Sanic is an opensource python web server/framework. Affected versions of sanic allow access to lateral directories when using app.static if using encoded %2F URLs. Parent directory traversal is not impacted. Users are advised to upgrade. There is no known workaround for this issue...

CVE-2022-35920

CVE-2022-35920 affects Sanic, a Python web framework. Affected versions allow access to lateral directories when using app.static with encoded %2F URLs; parent directory traversal is not impacted. Root cause: improper handling/escaping of encoded path separators in static file handling. Practical...

Fedora: Security Advisory for ohmybackup (FEDORA-2022-5038c3236c)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2022-2479

Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from internal file directories via a crafted HTML page...

CVE-2022-2479

Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from internal file directories via a crafted HTML page...

CVE-2022-2479

Insufficient validation of untrusted input in File in Google Chrome on Android prior to 103.0.5060.134 allowed an attacker who convinced a user to install a malicious app to obtain potentially sensitive information from internal file directories via a crafted HTML page...