Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS : Dompdf vulnerabilities (USN-6277-1)

The remote Ubuntu 16.04 ESM / 18.04 ESM / 20.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-6277-1 advisory. It was discovered that Dompdf was not properly validating untrusted input when processing HTML content under certain circumstance...

CVE-2023-35308: External Control of File Name or Path

Windows MSHTML Platform Security Feature Bypass Vulnerability...

CVE-2023-2554: External Control of File Name or Path

External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-1105

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1105: External Control of File Name or Path

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1070: External Control of File Name or Path

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...

CVE-2022-39952: External Control of File Name or Path

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via...

CVE-2023-21800: External Control of File Name or Path

Windows Installer Elevation of Privilege Vulnerability...

CVE-2023-21566: External Control of File Name or Path

Visual Studio Elevation of Privilege Vulnerability...

CVE-2022-43513: External Control of File Name or Path

A vulnerability has been identified in Automation License Manager V5 All versions, Automation License Manager V6 All versions V6.0 SP9 Upd4, TeleControl Server Basic V3 All versions V3.1.2. The affected components allow to rename license files with user chosen input without authentication. This...

CVE-2022-45213: External Control of File Name or Path

perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL...

CVE-2022-45918: Externally Controlled Reference to a Resource in Another Sphere

ILIAS before 7.16 allows External Control of File Name or Path...

CVE-2022-2400: External Control of File Name or Path

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...

CVE-2022-34765

CVE-2022-34765 is a CWE-73 vulnerability (External Control of File Name or Path) affecting Schneider Electric X80 advanced RTU Communication Module BMENOR2200H (V2.01 and later) and OPC UA Modicon Communication Module BMENUA0100 (V1.10 and prior). The issue arises when user-controlled data can in...

CVE-2022-34765: External Control of File Name or Path

A CWE-73: External Control of File Name or Path vulnerability exists that could cause loading of unauthorized firmware images when user-controlled data is written to the file path. Affected Products: X80 advanced RTU Communication Module BMENOR2200H V2.01 and later, OPC UA Modicon Communication...

CVE-2021-3845

ws-scrcpy is vulnerable to External Control of File Name or Path...

CVE-2021-3845 External Control of File Name or Path in netristv/ws-scrcpy

ws-scrcpy is vulnerable to External Control of File Name or Path...

CVE-2021-3845: External Control of File Name or Path

ws-scrcpy is vulnerable to External Control of File Name or Path...

CVE-2021-38477: External Control of File Name or Path

There are multiple API function codes that permit reading and writing data to or from files and directories, which could lead to the manipulation and/or the deletion of files...

CVE-2020-2003: External Control of File Name or Path

An external control of filename vulnerability in the command processing of PAN-OS allows an authenticated administrator to delete arbitrary system files affecting the integrity of the system or causing denial of service to all PAN-OS services. This issue affects: All versions of PAN-OS 7.1 and 8....