The vulnerability of the AMI interface of Asterisk management systems for IP-telephony devices allows a hacker to gain access to and read arbitrary files.

The vulnerability of the AMI interface of Asterisk management systems for IP-telephony and Certified Asterisk is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain read access to...

CVE-2023-25650

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...

The vulnerability of the APIX application programming interface for the AXIS OS operating system allows a hacker to delete any files they desire.

The vulnerability of the APIX application programming interface for the AXIS OS operating system relates to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

The vulnerability of the Greenplum Database management system lies in the improper limitation of the path name for the restricted access catalog. This allows a malicious actor to re-record arbitrary files or cause service failures.

The vulnerability of the Greenplum Database management system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to re-record arbitrary files or cause service failures...

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform allows a attacker to execute arbitrary commands with root privileges.

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root...

The vulnerability of the SaveResultsToFile method in the Network Configuration Manager (NCM) software allows a perpetrator to execute arbitrary code.

The vulnerability of the SaveResultsToFile method in the Network Configuration Manager NCM software lies in improper restrictions on the path name of the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...

The vulnerability of server-based corporate software for monitoring and managing project knowledge bases in Adobe RoboHelp Server arises from incorrect restrictions on path names to restricted access catalogs. This allows attackers to execute arbitrary code.

The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server relates to incorrect path name restrictions for restricted access directories. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

The vulnerability of open-source software for managing external resources like Terraform arises from incorrect restrictions on the path to the restricted directory. This allows attackers to load arbitrary files.

The vulnerability of open-source software for managing external resources like Terraform is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to load arbitrary files...

The vulnerability of the GLPI system’s request, incident, and inventory management functions arises from incorrect restrictions on the path to the restricted catalog when processing URL parameters. This allows attackers to carry out phishing attacks against user accounts.

The vulnerability of the GLPI system’s request, incident, and computer equipment inventory management processes is related to incorrect restrictions on the path to the restricted access catalog when processing URL parameters. Exploiting this vulnerability allows a malicious actor to carry out...

The vulnerability of the “static-content-files” component of the PaperCut MF and PaperCut NG software management printing infrastructure allows a intruder to gain unauthorized access to protected information.

The vulnerability of the “static-content-files” component in the PaperCut MF and PaperCut NG software for managing print infrastructure is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker operating remotely to gain...

The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in the improper restriction on the path name to the restricted directory. This allows attackers to write files to any location within the file system.

The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in improper restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to write files to any location within the file system...

The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in the improper restriction on the path name to the restricted directory. This allows attackers to read arbitrary files from the file system.

The vulnerability of the Titan SFTP and Titan MFT NextGen server software lies in improper restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files from the file system...

The vulnerability of the Avalanche device management system, related to incorrect restrictions on the path name to the restricted access catalog, allows a hacker to execute arbitrary code.

The vulnerability of the Avalanche device management system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the FortiSandbox threat detection and mitigation system lies in its improper handling of path name restrictions for restricted access directories. This allows attackers to trigger a service failure.

The vulnerability of the FortiSandbox threat detection and mitigation system is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the command-line interface of ArubaOS systems allows a hacker to delete any files they desire.

The vulnerability of the command-line interface of ArubaOS systems is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability allows a malicious actor to delete any files remotely...

The vulnerability of the makeDetailContent method in the software tool for creating/distributing content in LG Simple Editor allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the makeDetailContent method in the LG Simple Editor’s content creation/distribution software lies in improper restrictions on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute arbitrary code...

The vulnerability of the Red Hat Ansible configuration management system lies in the incorrect limitation of the path name to the restricted access directory, allowing a hacker to re-record arbitrary files.

The vulnerability of the Red Hat Ansible configuration management system lies in incorrect restrictions on the path to the restricted access directory. Exploiting this vulnerability could allow an attacker to re-record arbitrary files...

A vulnerability exists in the MAGLINK LX Web Console, a web-based console for managing fuel tanks. This vulnerability stems from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain access to files within the system.

The vulnerability of the MAGLINK LX Web Console, which manages fuel tanks, is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain access to system files remotely...

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scripts in Airflow lies in its lack of name-based path restrictions. This allows attackers to gain access to confidential information.

The vulnerability of the software used for creating, monitoring, and orchestrating data processing scenarios in Airflow is related to deficiencies in path name restrictions. Exploiting this vulnerability can allow attackers to access confidential information using the runid parameter...

The vulnerability of the ZipUtils class in the ProSafe Network Management System, which includes tools for network device management, diagnosis, and optimization, allows a hacker to bypass security restrictions and execute arbitrary code.

The vulnerability of the ZipUtils class in the ProSafe Network Management NMS300 system, which is used for managing, diagnosing, and optimizing the operation of network devices, is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows...