OpManager UploadMib Code Execution

The vulnerability of the uploadMib function in network monitoring software such as OpManager, OpManager MSP, OpManager Plus, Network Configuration Manager, OpUtils, and the network traffic analyzer NetFlow Analyzer is related to incorrect restrictions on the path name to the restricted directory...

ConnectWise ScreenConnect Path Traversal

The vulnerability of the ConnectWise ScreenConnect remote access software lies in improper restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

Kyocera Device Manager Path Traversal

The vulnerability of the Kyocera Device Manager software for centralized control of printing devices is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process remotely...

Apache Sling Servlets Resolver Path Traversal

The vulnerability of the software for processing servlets in web applications on the Java Apache Sling Servlets Resolver platform is related to incorrect pathname restrictions for restricted directories. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotel...

Java-security-toolkit Path Traversal

The vulnerability of the Java-security-toolkit application programming interface relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

QNAP QTS QuTS hero QuTScloud Path Traversal

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to incorrect path name restrictions in the restricted access catalog. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

QNAP QTS QuTS hero QuTScloud Path Traversal

The vulnerability of the QTS, QuTS hero, and QuTScloud operating systems for QNAP network devices is related to incorrect path name restrictions in the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Rapid SCADA Path Traversal

The vulnerability of the SCADA system Rapid SCADA is related to incorrect restrictions on the path name to the restricted access catalog when extracting files from archives. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending a specially crafted HTTP reques...

PT-2024-1736 · Honeywell · Honeywell Experion Controledge Virtualuoc +1

Name of the Vulnerable Software and Affected Versions: Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC affected versions not specified Description: The issue is related to incorrect restriction of directory path names with limited access, potentially allowing an attacker to read fil...

FANUC Robotics Virtual Robot Controller Web Server Name Restriction Bypass

The vulnerability of the FANUC Robotics Virtual Robot Controller software’s web server is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a perpetrator to circumvent existing restrictions on the catalog path by sending a special...

Reactor Netty HTTP Server Path Traversal

The vulnerability of the Reactor Netty HTTP server is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability can allow a remote attacker to disclose sensitive information that is protected by this system...

Saia PG5 Controls Suite Path Traversal

The vulnerability of the programming software for PLCs programmable logic controllers, Saia PG5 Controls Suite, is related to an incorrect limitation on the path name to the restricted access directory during the processing of ZIP format files. Exploiting this vulnerability can allow a perpetrato...

Asterisk AMI Interface File Read

The vulnerability of the AMI interface of Asterisk management systems for IP-telephony and Certified Asterisk is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain read access to...

CVE-2023-25650

There is an arbitrary file download vulnerability in ZXCLOUD iRAI. Since the backend does not escape special strings or restrict paths, an attacker with user permission could access the download interface by modifying the request parameter, causing arbitrary file downloads...

APIX Application Programming Interface File Deletion

The vulnerability of the APIX application programming interface for the AXIS OS operating system relates to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files remotely...

Greenplum Database Path Traversal

The vulnerability of the Greenplum Database management system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to re-record arbitrary files or cause service failures...

Aruba EdgeConnect Enterprise Command Injection

The vulnerability of the command-line interface of the Aruba EdgeConnect Enterprise network management platform is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with root...

Network Configuration Manager SaveResultsToFile Code Execution

The vulnerability of the SaveResultsToFile method in the Network Configuration Manager NCM software lies in improper restrictions on the path name of the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the SYSTEM context remotely...

Adobe RoboHelp Server Path Traversal

The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server relates to incorrect path name restrictions for restricted access directories. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

Terraform Path Traversal

The vulnerability of open-source software for managing external resources like Terraform is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to load arbitrary files...