Mitel Networks MiCollab 路径遍历漏洞

Mitel Networks MiCollab is a mobile application from Mitel Networks Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees.A security vulnerability exists in versions of Mitel Networks MiCollab prior to 9.2 FP2, which could be exploited by an...

PT-2021-3788

Name of the Vulnerable Software and Affected Versions Cisco Packet Tracer for Windows affected versions not specified Description A vulnerability in Cisco Packet Tracer for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit thi...

Python pip Path Traversal

The vulnerability of the Python programming language’s pip module is related to shortcomings in pathname restrictions when specifying software for installation via URLs. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...

Ark archive viewer Job::onEntry pathname restriction Directory Data Compromise

The vulnerability in the Job::onEntry function in the jobs.cpp file of the Ark archive viewer is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to compromise the integrity of the protected information...

CVE-2021-32662

Backstage is an open platform for building developer portals, and techdocs-common contains common functionalities for Backstage's TechDocs. In @backstage/techdocs-common versions prior to 0.6.3, a malicious actor could read sensitive files from the environment where TechDocs documentation is buil...

CVE-2021-1536

A vulnerability in Cisco Webex Meetings Desktop App for Windows, Cisco Webex Meetings Server, Cisco Webex Network Recording Player for Windows, and Cisco Webex Teams for Windows could allow an authenticated, local attacker to perform a DLL injection attack on an affected device. To exploit this...

Cisco Webex Teams代码问题漏洞

Cisco Webex Teams is a software for team collaboration from Cisco USA. The software provides online communication for teams with features such as shared files, digital whiteboards, and video conferencing. A code issue vulnerability exists in multiple Cisco products, which is caused by incorrect...

Linux fs/nfsd/nfs3xdr.c Code Execution

The vulnerability of the fs/nfsd/nfs3xdr.c component in the Linux operating system is related to an incorrect limitation on the path name for the restricted-access directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by calling READDIRPLUS...

Debian: Security Advisory (DLA-2661-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2021-29022

In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory...

CVE-2021-29022

In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory...

CVE-2021-29022

In InvoicePlane 1.5.11, the upload feature discloses the full path of the file upload directory...

PT-2021-6008

Name of the Vulnerable Software and Affected Versions iOS versions prior to 14.5 iPadOS versions prior to 14.5 tvOS versions prior to 14.5 watchOS versions prior to 7.4 macOS versions prior to 11.3 macOS Catalina versions prior to Security Update 2021-002 macOS Mojave versions prior to Security...

PT-2021-2764

Name of the Vulnerable Software and Affected Versions: SonicWall Email Security version 10.0.9.x Description: The issue is related to incorrect restriction of a directory path with limited access. This allows a remote attacker to gain unauthorized access to protected information. Specifically, it...

CVE-2021-26075

The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before 8.13.4, and from version 8.14.0 before 8.15.1 allowed remote authenticated attackers to obtain the full path of the Jira application data directory via an...

CVE-2021-26075

The Jira importers plugin AttachTemporaryFile rest resource in Jira Server and Data Center before version 8.5.12, from version 8.6.0 before 8.13.4, and from version 8.14.0 before 8.15.1 allowed remote authenticated attackers to obtain the full path of the Jira application data directory via an...

rack/directory.rb check_forbidden Confidential Data

The vulnerability of the checkforbidden function in the rack/directory.rb module of the Rack framework, which is used between web servers and web applications, relates to an incorrect restriction on the path to the directory. Exploiting this vulnerability could allow a malicious actor to gain...

SaltStack salt-api Confidential Data Access

The vulnerability of the salt-api component in the SaltStack configuration management system is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain access to confidential data...

Cisco Network Services Orchestrator Unauthorized Access

The vulnerability of the API component and the web interface of the Cisco Network Services Orchestrator software relates to incorrect restrictions on the path name to the directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

PT-2021-5236

Name of the Vulnerable Software and Affected Versions OPPO 5G router affected versions not specified Description The issue is related to a web application vulnerability in the OPPO 5G router, specifically concerning incorrect restriction of a directory path name with limited access. Exploitation ...