SUSE CVE-2019-0220

A vulnerability was found in Apache HTTP Server 2.4.0 to 2.4.38. When the path component of a request URL contains multiple consecutive slashes '/', directives such as LocationMatch and RewriteRule must account for duplicates in regular expressions while other aspects of the servers processing wi...

SUSE CVE-2020-14149

In uftpd before 2.12, handleCWD in ftpcmd.c mishandled the path provided by the user, causing a NULL pointer dereference and denial of service, as demonstrated by a CWD /.. command...

PT-2023-1552 · Kardex · Kardex Mlog Mcc

Name of the Vulnerable Software and Affected Versions: Kardex Mlog MCC version 5.7.12+0-a203c2a213-master Description: The issue is related to incorrect code generation management in the Kardex Mlog Control Center MCC module. This allows a remote attacker to execute arbitrary code. The software...

Ubuntu: Security Advisory (USN-4820-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the `getUserPrefMenuFragment` component of the Advantech iView network device and port management system allows a malicious individual to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the getUserPrefMenuFragment component of the Advantech iView network device and port management system is related to an incorrect path name limitation for the restricted access directory during the processing of the MenuServlet. Exploiting this vulnerability could allow a...

Path Traversal

github.com/jfrazelle/pastebinit is vulnerable to path traversal. The vulnerability exists due to the improper path handling in the pasteHandler function of server.go, allowing an attacker to access files outside the restricted directory...

pastebinit 路径遍历漏洞

pastebinit is a command line tool from Jess Frazelle's personal developer. It is used to send data to pastebin, which allows users to upload snippets of text for public viewing. A path traversal vulnerability exists in pastebinit version 0.2.2 and earlier versions, which stems from an incorrect...

DEBIAN-CVE-2022-37706

enlightenmentsys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring...

CVE-2022-32833

An issue existed with the file paths used to store website data. The issue was resolved by improving how website data is stored. This issue is fixed in iOS 16. An unauthorized user may be able to access browsing history...

The vulnerability of the FortiClient.msi installer of the Fortinet FortiClient for Windows security solution allows a malicious individual to escalate their privileges.

The vulnerability of the FortiClient.msi installer of the Fortinet FortiClient for Windows security solution is related to incorrect external management of file names or file paths. Exploiting this vulnerability can allow attackers to increase their privileges...

PT-2022-37625 · Opensuse +3 · Xtrabackup

This update for xtrabackup fixes the following issues: Update xtrabackup to version 2.4.26: - CVE-2020-10997: Information exposure via cmd line output and table history boo1170644 - CVE-2020-29488: Changes in how absolute paths are handled boo1205581...

CVE-2021-33897

A buffer overflow in Synthesia before 10.7.5567, when a non-Latin locale is used, allows user-assisted attackers to cause a denial of service application crash via a crafted MIDI file with malformed bytes. This file is mishandled during a deletion attempt. In Synthesia before 10.9, an improper pa...

CVE-2021-33897

CVE-2021-33897 affects Synthesia. A buffer overflow in Synthesia before 10.7.5567 (when a non-Latin locale is used) can be triggered by a crafted MIDI file with malformed bytes, leading to a denial of service (application crash) during deletion. A separate issue in Synthesia before 10.9 involves ...

CVE-2022-41874 Tauri Filesystem Scope can be Partially Bypassed

Tauri is a framework for building binaries for all major desktop platforms. In versions prior to 1.0.7 and 1.1.2, Tauri is vulnerable to an Incorrectly-Resolved Name. Due to incorrect escaping of special characters in paths selected via the file dialog and drag and drop functionality, it is...

PT-2022-4899 · Unknown · Enlightenment

Name of the Vulnerable Software and Affected Versions: Enlightenment versions prior to 0.25.4 Description: The issue is related to the Enlightenment window manager's system file, specifically with the enlightenment sys component. It is setuid root and mishandles pathnames that begin with a /dev/...

CVE-2022-32190

JoinPath and URL.JoinPath do not remove ../ path elements appended to a relative path. For example, JoinPath"https://go.dev", "../go" returns the URL "https://go.dev/../go", despite the JoinPath documentation stating that ../ path elements are removed from the result...

The vulnerability in the implementation of the UserFirmwareRequestHandler class in the microprogramming software for sensors for monitoring the Keysight N6841A, as well as the microprogramming software for geolocation servers from Keysight, N6854A, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the UserFirmwareRequestHandler class implementation in the microprogramming software for sensors monitoring the Keysight N6841A spectrum, as well as the microprogramming software for geolocation servers from Keysight, the N6854A, is related to errors in processing the relativ...

CVE-2022-31514

The Caoyongqi912/FanPlatform repository through 2021-04-20 on GitHub allows absolute path traversal because the Flask sendfile function is used unsafely...

tomcat: Information disclosure when using NTFS file system

A flaw was found in Apache Tomcat. When serving resources from a network location using the NTFS file system, it was possible to bypass security constraints and view the source code for JSPs in some configurations. The root cause was the unexpected behavior of the JRE API File.getCanonicalPath,...

The vulnerability of the nxos_file_copy module in the Ansible configuration management system allows a hacker to execute arbitrary commands.

The vulnerability of the nxosfilecopy module in the Ansible configuration management system is related to incorrect external manipulation of the file name or path. Exploiting this vulnerability allows an attacker to execute arbitrary commands...