Document Approval Service Path Traversal

The vulnerability of the “Service for Document Approval” software is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability can allow an attacker who operates remotely to gain read and write access to local files...

SolarWinds Serv-U File Server Path Restriction Read

The vulnerability of the SolarWinds Serv-U File Server file server is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain read access to files on the server remotely...

WordPress plugin Ovic Importer path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

Redmine DMSF Plugin Path Restriction

The vulnerability of the Redmine DMSF plugin, a project and task management system, is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain read, modify, or delete access to files...

SINEC NMS Path Traversal

The vulnerability of the SINEC NMS network management system for monitoring and managing industrial networks is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to export monitoring data and upload files from th...

SolarWinds Serv-U File Server Code Execution

The vulnerability of the SolarWinds Serv-U File Server file server is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

Avalanche device management system Path Traversal Privilege Escalation

The vulnerability of the Avalanche device management system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

Avalanche mobile device management DoS

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...

GL.iNet GL-AX1800 Path Traversal

The vulnerability of the microprogrammed software of the GL.iNet GL-AX1800 router lies in the incorrect limitation of the path name to the restricted access directory, resulting from sending a request to the final destination using the uploadfile command. By specifying the malicious file as the...

Jenkins Git Matrix Project Plugin Path Restriction

The vulnerability of the Jenkins Git Matrix Project plugin is related to the lack of cleaning of user-defined project names with multiple configurations. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

PT-2024-3698

Name of the Vulnerable Software and Affected Versions Git affected versions not specified Description The issue is related to an incorrect restriction of the path name to a directory with limited access in the distributed version control system Git. Exploitation of this issue may allow an attacke...

Splunk Web File Read Write

The vulnerability of the Splunk Enterprise platform for operational analysis is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files into the system using a specially created HTTP...

Cisco Nexus Dashboard Fabric Controller Out-of-Band File Read

The vulnerability of the out-of-band connection function of the Cisco Nexus Dashboard Fabric Controller NDFC exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to read arbitrary files on the server...

Cisco IOS XE DHCP Tracking DoS

The vulnerability of the DHCP tracking function in Cisco IOS XE operating systems is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted IPv4...

UniLogic Studio UniStream Path Traversal

The vulnerability of the microprogramming software for UniLogic Studio programmable logic controllers of the UniStream series is related to an incorrect limitation on the path name of the restricted access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

IBM FileNet Content Manager Path Traversal

The vulnerability of the IBM FileNet Content Manager service for document organization, storage, and management is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...

Jenkins HTML Publisher Plugin Path Traversal

The vulnerability of the Jenkins HTML Publisher plugin is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially created HTTP request...

panorama.pm Web Interface File Load

The vulnerability of the panorama.pm web interface of the monitoring console for Naemon, Nagios, Icinga, and Shinken THRUK relates to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to download any file remotely...

Veritas NetBackup Path Traversal

The vulnerability of Veritas NetBackup and Veritas NetBackup Appliance software regarding backup and data restoration lies in improper restrictions on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Apache InLong Code Execution

The vulnerability of the Apache InLong data integration platform lies in the use of files and directories accessible to external parties due to incorrect restrictions on the path to the restricted directory during file loading. Exploiting this vulnerability allows a malicious actor to execute...