125 matches found
CVE-2025-1686: External Control of File Name or Path
Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Name or Path via the include tag. A high privileged attacker can access sensitive local files by crafting malicious notification templates that leverage this tag to include files...
CVE-2025-25761: External Control of File Name or Path
HkCms v2.3.2.240702 was discovered to contain an arbitrary file write vulnerability in the component Appcenter.php...
CVE-2024-43451: External Control of File Name or Path
NTLM Hash Disclosure Spoofing Vulnerability...
CVE-2024-43581: External Control of File Name or Path
Microsoft OpenSSH for Windows Remote Code Execution Vulnerability...
CVE-2024-9142: External Control of File Name or Path
External Control of File Name or Path, : Incorrect Permission Assignment for Critical Resource vulnerability in Olgu Computer Systems e-Belediye allows Manipulating Web Input to File System Calls. This issue affects e-Belediye: before 2.0.642...
CVE-2024-9142 Local File Inclusion (LFI) in Olgu Computer Systems' e-Belediye
External Control of File Name or Path, : Incorrect Permission Assignment for Critical Resource vulnerability in Olgu Computer Systems e-Belediye allows Manipulating Web Input to File System Calls. This issue affects e-Belediye: before 2.0.642...
CVE-2024-38173: External Control of File Name or Path
Microsoft Outlook Remote Code Execution Vulnerability...
CVE-2024-38165: External Control of File Name or Path
Windows Compressed Folder Tampering Vulnerability...
CVE-2024-23317
The CVE-2024-23317 issue affects Gallagher Controller 6000 and Controller 7000 (versions 8.60 and earlier; 8.70 before 8.70.240520a; 8.80 before 8.80.240520a; 8.90 before 8.90.240520a; 9.00 before 9.00.240521a; 9.10 before 9.10.240520a). Root cause is External Control of File Name or Path (CWE-73...
CVE-2024-23317: External Control of File Name or Path
External Control of File Name or Path CWE-73 in the Controller 6000 and Controller 7000 allows an attacker with local access to the Controller to perform arbitrary code execution. This issue affects: 9.10 prior to vCR9.10.240520a distributed in 9.10.1268MR1, 9.00 prior to vCR9.00.240521a...
CVE-2024-25965: External Control of File Name or Path
Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to denial of service...
CVE-2024-1603: External Control of File Name or Path
paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...
CVE-2024-26185: External Control of File Name or Path
Windows Compressed Folder Tampering Vulnerability...
CVE-2023-26282: External Control of File Name or Path
IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and specific knowledge of the system to modify files or data on the system. IBM X-Force ID: 248415...
CVE-2024-20652: External Control of File Name or Path
Windows HTML Platforms Security Feature Bypass Vulnerability...
CVE-2023-6569: External Control of File Name or Path
External Control of File Name or Path in h2oai/h2o-3...
CVE-2023-36019: External Control of File Name or Path
Microsoft Power Platform Connector Spoofing Vulnerability...
Mitsubishi Electric FA Engineering Software Products
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Mitsubishi Electric Equipment : FA Engineering Software Products Vulnerability : External Control of File Name or Path 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious...
CVE-2023-4749: External Control of File Name or Path
A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...