The vulnerability of the Damage Cleanup Engine component in Trend Micro Apex One and Apex One as a Service anti-virus software allows a malicious actor to elevate their privileges and delete arbitrary files.

The vulnerability of the Damage Cleanup Engine component in Trend Micro Apex One and Apex One as a Service anti-virus software exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability can allow attackers to enhance their privileges and...

The vulnerability of the disk redirecting channel in the implementation of the FreeRDP remote desktop protocol allows a intruder to gain unauthorized access to protected information.

The vulnerability of the disk redirecting channel in the implementation of the FreeRDP remote desktop protocol is related to incorrect path name restrictions for access-controlled directories when processing parameters like /drive, +drives, or +home-drive. Exploiting this vulnerability can allow ...

The vulnerability of the xAPI microprogramming software components of the Cisco TelePresence Collaboration Endpoint conference call management devices and the Cisco RoomOS operating systems allows attackers to enhance their privileges and gain access to read, modify, or delete files.

The vulnerability of the xAPI microprogramming software used in Cisco TelePresence Collaboration Endpoint conference call management devices and Cisco RoomOS operating systems is related to incorrect path name restrictions in the directory. Exploiting this vulnerability can allow attackers to...

The vulnerability of the software platforms for developing and managing Magento Open Source and Adobe Commerce products lies in the incorrect limitation of the path to the restricted catalog. This allows attackers to execute arbitrary code.

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to incorrect path name restrictions for access to restricted catalogs. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in t...

Ubuntu: Security Advisory (USN-99-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

The vulnerability of the Proficy Machine Edition programming software for programmable logic controllers arises from incorrect restrictions on the path name to the restricted access directory. This allows a perpetrator to execute arbitrary code.

The vulnerability of the Proficy Machine Edition programming software is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially crafted .BLZ file...

The vulnerability of the Jenkins Deployer Framework Plugin involves incorrect path name restrictions for restricted access directories, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins Deployer Framework Plugin is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the web interfaces of Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition allows a perpetrator to delete arbitrary files.

The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition web interfaces is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to delete...

The vulnerability of the `ziparchive::extractto` function in the PHP programming language lies in its lack of name-based path limitation, allowing attackers to create arbitrary directories.

The vulnerability of the ziparchive::extractto function in the PHP programming language is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker to create arbitrary directories remotely...

Improper regex in htaccess file

Impact the default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the regex in the second FilesMatch only checks the filename, not the full path. Patches Please upgrade to...

The vulnerability of the cordova-plugin-ionic-webview plugin, related to deficiencies in path name restrictions, allows attackers to gain access to arbitrary files.

The vulnerability of the cordova-plugin-ionic-webview plugin is related to deficiencies in path name restrictions for directories. Exploiting this vulnerability could allow an attacker to gain access to arbitrary files...

PT-2022-2533

Name of the Vulnerable Software and Affected Versions Windows Print Spooler affected versions not specified Description The issue is related to an information disclosure vulnerability in the Windows Print Spooler service. It is caused by incorrect restriction of the directory path name with limit...

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns arises from incorrect restrictions on the path name to the restricted catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Adobe Campaign Classic software platform for conducting marketing campaigns is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The software for email security, SonicWall Email Security and SonicWall Hosted Email Security, has a vulnerability related to incorrect path restrictions for access to restricted directories. This allows attackers to read arbitrary files.

The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software-related to incorrect path name restrictions in access-controlled directories. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotely...

The vulnerability of OPPO’s 5G router web application, related to incorrect path name restrictions for accessing restricted catalogs, allows attackers to gain unauthorized access to protected information.

The vulnerability of OPPO’s 5G router web application is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the SAP Customer Relationship Management (CRM) system regarding customer relationship management, related to incorrect restrictions on the path to the restricted catalog, allows a perpetrator to execute arbitrary commands.

The vulnerability of the SAP Customer Relationship Management CRM system regarding customer relationship management is related to incorrect restrictions on the path to the restricted catalog. Exploitation of this vulnerability could allow a malicious actor to execute arbitrary commands remotely...

CVE-2021-43415

Removed by vendor...

The vulnerability of SAP NetWeaver Java Application Server web applications lies in incorrect path name restrictions for access to restricted catalogs, allowing attackers to gain unauthorized access to protected information.

The vulnerability of SAP NetWeaver Java Application Server web applications relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information by sending a...

The vulnerability of the read_file function in the Ubuntu operating system’s error reporting service, Apport, allows a hacker to disclose protected information.

The vulnerability of the readfile function in the Ubuntu operating system’s error reporting service apport is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a attacker to disclose protected information...

PT-2021-4325 · Honeywell · Honeywell Experion Pks

Name of the Vulnerable Software and Affected Versions: Honeywell Experion PKS versions C200, C200E, C300, and ACE controllers Description: The issue is related to insufficient restrictions on directory path names in the operating system of Honeywell's industrial portable computers. This can be...