The vulnerability of the command-line interface of ArubaOS systems allows a hacker to delete any files they desire.

The vulnerability of the command-line interface of ArubaOS systems is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability could allow a remote attacker to delete any files they desire...

The vulnerability of the FortiOS operating systems arises from incorrect restrictions on path names to restricted directories, allowing attackers to read and write arbitrary files.

The vulnerability of the FortiOS operating systems is related to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability allows an attacker to read and write arbitrary files by executing commands in the command line interface...

SUSE CVE-2019-3696

A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise...

The vulnerability of the CachingResourceDownloadRewriteRule implementation in the Jira bug tracking system allows a hacker to access files in the root directory.

The vulnerability of the CachingResourceDownloadRewriteRule implementation in the Jira bug tracking system is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain access to files in the root director...

PT-2023-1098 · Zoom · Zoom

Name of the Vulnerable Software and Affected Versions: Zoom for Android versions prior to 5.13.0 Description: The issue is related to incorrect restriction of the path name to a directory with limited access, allowing a third-party app to exploit this and read and write to the Zoom application da...

The vulnerability of the Jenkins CLIF Performance Testing Plugin lies in the incorrect path limitation for the restricted access directory, allowing attackers to create or replace any files in the file system.

The vulnerability of the Jenkins CLIF Performance Testing Plugin is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to create or replace any files in the file system remotely...

The vulnerability of the Illumina Local Run Manager software exists due to an incorrect limitation on the path to the restricted access directory. This allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Illumina Local Run Manager software exists due to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

PT-2022-4017 · Jenkins · Jenkins Deployer Framework Plugin +1

Name of the Vulnerable Software and Affected Versions: Jenkins Deployer Framework Plugin versions 85.v1d1888e8c021 and earlier Description: The issue is related to the incorrect restriction of the application path when configuring a deployment, allowing attackers with Item/Configure permission to...

The software for configuring, testing, and deploying Schneider Electric EcoStruxure Power Commission is vulnerable due to incorrect restrictions on the path to the restricted access catalog. This allows attackers to create or overwrite critical files and execute arbitrary code.

The vulnerability of the software used for configuring, testing, and deploying Schneider Electric EcoStruxure Power Commission involves incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to create or re-record...

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software lies in the improper limitation of the path name to the restricted access directory. This allows a malicious actor to load any file into any directory of the file system.

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to download any file into any directory of the file system b...

PT-2022-4185 · Unknown +1 · Passwork On-Premise Edition +1

Name of the Vulnerable Software and Affected Versions: Passwork On-Premise Edition versions prior to 4.6.13 Description: The issue is related to incorrect restriction of the path name to a directory with limited access. This allows a remote attacker to upload arbitrary files to the system. The...

The vulnerability of the function in bl_categires_help.php, a parental control function for Internet CTparental, allows a intruder to inject any code they desire.

The vulnerability of the CTparental parental control function in blcategireshelp.php exists due to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a hacker to inject arbitrary code...

The vulnerability of the bl_categories_help.php file, a parental control file for Internet CTparental, allows a violator to execute any command or run any code.

The vulnerability of the blcategorieshelp.php file, a parental control file for Internet CTparental, exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious user to execute arbitrary code or perform arbitrary...

Vulnerability of the /hcms/admin/index.php/language/ajax component of the Hongcms content management system. The Hongcms project has vulnerabilities related to name restrictions for directory paths, allowing attackers to view, edit, and delete any files they desire.

The vulnerability of the /hcms/admin/index.php/language/ajax component of the Hongcms content management system is related to a flaw in the path name restriction. Exploiting this vulnerability allows an attacker to remotely access, view, edit, and delete any files using a specially created POST...

The vulnerability of the UNIX command-line utility set, BusyBox, arises from an improper limitation on the path name of the directory. This allows a attacker to compromise data integrity.

The vulnerability of the UNIX command-line utility BusyBox relates to improper restrictions on the path name of the directory. Exploiting this vulnerability allows a remote attacker to compromise data integrity through symbolic links...

PT-2021-4594 · Django +4 · Django +4

Name of the Vulnerable Software and Affected Versions: Django versions 2.2 before 2.2.20 Django versions 3.0 before 3.0.14 Django versions 3.1 before 3.1.8 Description: The issue is related to the MultiPartParser component in Django, which has a directory path restriction flaw. This flaw can be...

The vulnerability of the Samba file system arises from an incorrect limitation on the path to the restricted access directory. This allows a malicious user to gain access to files and directories beyond the SMB network paths.

The vulnerability of the Samba file system exists due to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to files and directories beyond the boundaries of the SMB network...

The vulnerability of the spring-cloud-config-server module of the Spring Cloud Config server allows a attacker to gain access to protected information.

The vulnerability of the spring-cloud-config-server module in the Spring Cloud Config server exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to protected informatio...

PT-2020-6144 · Icinga +1 · Icinga Web 2 +1

Name of the Vulnerable Software and Affected Versions: Icinga Web2 versions 2.0.0 through 2.6.4, 2.7.4 and 2.8.2 are not accurate representations, as the issue is fixed in these versions. Icinga Web2 versions prior to 2.6.4, prior to 2.7.4, and prior to 2.8.2 Description: The issue allows an...

The vulnerability of the Samba package lies in the incorrect path limitation for the restricted access directory, allowing attackers to compromise the integrity and confidentiality of data.

The vulnerability of the Samba package is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and confidentiality of data...