724 matches found
CVE-2021-44278
Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...
CVE-2021-43674
ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2021-43674
ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2021-44278
Librenms 21.11.0 is affected by a path traversal vulnerability in includes/html/pages/device/showconfig.inc.php, enabling manipulation of the requested path to access files outside the intended directory. Multiple connected advisories (GHSA-7289-CHWJ-7H86, OSV:GHSA-7289-CHWJ-7H86, CNVD/CNNVD, Ver...
CVE-2021-44278
Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...
CVE-2021-44278
Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...
CVE-2021-43674
ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2021-43674
CVE-2021-43674 concerns ThinkUp 2.0-beta.10 and a vulnerability in Smarty.class.php that enables path traversal. The connected sources consistently identify this as a vulnerability affecting ThinkUp 2.0-beta.10 and note that it affects products no longer supported by the maintainer. No explicit e...
CVE-2021-43674
ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
PT-2021-24077
Name of the Vulnerable Software and Affected Versions: Librenms version 21.11.0 Description: The issue is related to a path manipulation vulnerability. It affects the includes/html/pages/device/showconfig.inc.php file. Recommendations: For Librenms version 21.11.0, at the moment, there is no...
PT-2021-23903 · Thinkup · Thinkup
Name of the Vulnerable Software and Affected Versions: ThinkUp version 2.0-beta.10 Description: The issue is a path manipulation vulnerability in Smarty.class.php. This vulnerability only affects products that are no longer supported by the maintainer. Recommendations: For ThinkUp version...
PT-2021-23905
Name of the Vulnerable Software and Affected Versions: matyhtf framework version 3.0.5 Description: The issue is a path manipulation vulnerability in the Smarty.class.php file. This vulnerability was fixed in version 3.0.6. Recommendations: For matyhtf framework version 3.0.5, update to version...
CVE-2021-43674: Improper Limitation of a Pathname to a Restricted Directory
ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...
CVE-2021-43676: Improper Limitation of a Pathname to a Restricted Directory
matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php...
CVE-2021-44278: Improper Limitation of a Pathname to a Restricted Directory
Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...
Unspecified vulnerability in libretime
Libretime is a radio broadcast and automation platform. libretime is vulnerable due to a naming function vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController. php for path manipulation. No details of the vulnerability are currently available...
CVE-2021-43685
libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php through the rename function...
CVE-2021-43685
libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php through the rename function...
CVE-2021-43685
libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php through the rename function...
Path traversal
libretime hv3.0.0-alpha.10 is affected by a path manipulation vulnerability in /blob/master/legacy/application/modules/rest/controllers/ShowImageController.php through the rename function...