Lucene search
K

5 matches found

BDU FSTEC
BDU FSTEC
added 2025/02/26 12:0 a.m.3 views

The vulnerability of the org.springframework.web.multipart package in the Spring Web framework allows attackers to re-write files stored in web server directories.

The vulnerability of the org.springframework.web.multipart package in the Spring Web framework is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to re-upload files stored in the web server’s directory from a...

7.8CVSS5.6AI score
Exploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/11/05 12:0 a.m.4 views

The vulnerability of the OPC server WorkstationST, related to incorrect restrictions on the path name to the directory, allows a hacker to gain access to the server’s directory.

The vulnerability of the OPC server WorkstationST is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the server’s directory...

9.7CVSS5.5AI score
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2024/01/30 12:0 a.m.2 views

PT-2024-1736 · Honeywell · Honeywell Experion Controledge Virtualuoc +1

Name of the Vulnerable Software and Affected Versions: Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC affected versions not specified Description: The issue is related to incorrect restriction of directory path names with limited access, potentially allowing an attacker to read fil...

5.3CVSS6.7AI score0.0057EPSS
Exploits0References8
BDU FSTEC
BDU FSTEC
added 2021/03/15 12:0 a.m.1 views

The vulnerability of the API component and the web interface of the Cisco Network Services Orchestrator software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the API component and the web interface of the Cisco Network Services Orchestrator software relates to incorrect restrictions on the path name to the directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

5.3CVSS5.5AI score0.01606EPSS
Exploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2017/09/13 12:0 a.m.3 views

The vulnerability of the component supported by Git-style software, the GNU Patch Unix utility for operating systems like Ubuntu and Fedora, allows a hacker to modify any files they desire.

The vulnerability of the Git-style programmatic Unix utility GNU Patch for operating systems like Ubuntu and Fedora is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability allows a malicious actor to remotely modify arbitrary files with the target user’s...

7.8CVSS7.3AI score0.11199EPSS
Exploits0References11Affected Software3
Rows per page
Query Builder