98 matches found
ROS-20261001-73-0023
The vulnerability in glib2 relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the Check Point Security Management Server and Multi-Domain Security Management Server software lies in the improper limitation of the path name to the directory. This allows attackers to execute arbitrary code.
The vulnerability of the Check Point Security Management Server and Multi-Domain Security Management Server software lies in incorrect path name restrictions for accessing the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the ColdFusion software platform arises from incorrect restrictions on path names in the catalog, allowing attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the ColdFusion software platform arises from incorrect restrictions on path names in the catalog, allowing attackers to execute arbitrary code.
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...
The vulnerability of the ColdFusion software platform, related to incorrect restrictions on path names in the catalog, allows attackers to gain unauthorized access to protected information.
The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...
CVE-2026-50510
Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally...
GitHub Copilot Remote Code Execution Vulnerability
Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally...
ROS-20260713-73-0042
The vulnerability in python-mako is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
The vulnerability of the aiohttp HTTP client, related to incorrect pathname restrictions for directories, allows attackers to disclose protected information.
The vulnerability of the aiohttp HTTP client is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by the system...
The vulnerability of the Cisco Catalyst Center (formerly Cisco DNA Center) network infrastructure management system, related to incorrect path name restrictions, allows attackers to gain unauthorized access to protected information.
The vulnerability of the Cisco Catalyst Center formerly Cisco DNA Center network infrastructure management system is related to incorrect restrictions on path names in the catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...
EUVD-2026-39549
Certificates with wildcard DNS SANs e.g. .example.com bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permitted/excluded DNS name constraints could be accepted...
The vulnerability of the Cortex XSOAR platform for security organization, automation, and response lies in improper name restrictions on paths to the catalog, allowing attackers to execute “man-in-the-middle” attacks or write arbitrary files.
The vulnerability of the Cortex XSOAR security, automation, and response platform is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to execute a “man-in-the-middle” attack or write arbitrary files...
Exploit for Improper Restriction of Names for Files and Other Resources in Microsoft
cve-id ⚡ Simple Usage Use this project only in safe and...
The vulnerability of Microsoft Visual Studio Code’s source editor lies in the incorrect path name limitation for the directory, allowing attackers to bypass existing security restrictions.
The vulnerability of Microsoft Visual Studio Code’s editor is related to incorrect path name restrictions for the directory. Exploiting this vulnerability could allow an attacker to bypass existing security restrictions...
The vulnerability of the container management system and the virtual machine manager Incus, related to incorrect restrictions on the path name to the restricted access catalog, allows a intruder to gain unauthorized access to protected information.
The vulnerability of the container management system and the virtual machine manager Incus is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...
The vulnerability of the node-tar library on the Node.js software platform allows attackers to gain unauthorized access to protected information.
The vulnerability of the node-tar library in the Node.js software platform is related to an incorrect limitation on the path name for the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...
ROS-20260430-73-0004
Vulnerability in buildkit related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...
Erlang/OTP 安全漏洞
Erlang/OTP is an open-source JavaScript library for handling exceptions. This library can catch exceptions caused by Node.js’s built-in APIs. Versions 17.0 to 28.4.1, 27.3.4.9, and 26.2.5.18 of Erlang/OTP contain security vulnerabilities due to improper path name restrictions, which may lead to...
The vulnerability of Active Directory Domain Services (AD DS) on Windows operating systems allows a perpetrator to increase their privileges.
The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to incorrect restrictions on file names and other resources. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...
