CVE-2024-26185: External Control of File Name or Path

Windows Compressed Folder Tampering Vulnerability...

CVE-2023-26282: External Control of File Name or Path

IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and specific knowledge of the system to modify files or data on the system. IBM X-Force ID: 248415...

CVE-2024-20652: External Control of File Name or Path

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2023-6569: External Control of File Name or Path

External Control of File Name or Path in h2oai/h2o-3...

CVE-2023-36019: External Control of File Name or Path

Microsoft Power Platform Connector Spoofing Vulnerability...

Mitsubishi Electric FA Engineering Software Products

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Mitsubishi Electric Equipment : FA Engineering Software Products Vulnerability : External Control of File Name or Path 2. RISK EVALUATION Successful exploitation of this vulnerability could allow a malicious...

CVE-2023-4749: External Control of File Name or Path

A vulnerability, which was classified as critical, was found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file index.php. The manipulation of the argument page leads to file inclusion. It is possible to launch the attack remotely. The exploit has been...

CVE-2023-35384: External Control of File Name or Path

Windows HTML Platforms Security Feature Bypass Vulnerability...

CVE-2023-35308: External Control of File Name or Path

Windows MSHTML Platform Security Feature Bypass Vulnerability...

CVE-2023-2554: External Control of File Name or Path

External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0...

CVE-2023-1105: External Control of File Name or Path

External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...

CVE-2023-1070: External Control of File Name or Path

External Control of File Name or Path in GitHub repository nilsteampassnet/teampass prior to 3.0.0.22...

CVE-2022-39952: External Control of File Name or Path

A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via...

CVE-2023-21566: External Control of File Name or Path

Visual Studio Elevation of Privilege Vulnerability...

CVE-2023-21800: External Control of File Name or Path

Windows Installer Elevation of Privilege Vulnerability...

CVE-2022-43513: External Control of File Name or Path

A vulnerability has been identified in Automation License Manager V5 All versions, Automation License Manager V6 All versions V6.0 SP9 Upd4, TeleControl Server Basic V3 All versions V3.1.2. The affected components allow to rename license files with user chosen input without authentication. This...

CVE-2022-45213: External Control of File Name or Path

perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL...

CVE-2022-45918: Externally Controlled Reference to a Resource in Another Sphere

ILIAS before 7.16 allows External Control of File Name or Path...

CVE-2022-2400: External Control of File Name or Path

External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...

CVE-2022-34765

CVE-2022-34765 is a CWE-73 vulnerability (External Control of File Name or Path) affecting Schneider Electric X80 advanced RTU Communication Module BMENOR2200H (V2.01 and later) and OPC UA Modicon Communication Module BMENUA0100 (V1.10 and prior). The issue arises when user-controlled data can in...