The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, and Adobe Acrobat 2020 arises from incorrect path name restrictions for restricted access catalogs. This allows attackers to execute arbitrary code.

The vulnerability of PDF viewing and editing programs such as Adobe Acrobat Document Cloud, Adobe Acrobat Reader Document Cloud, Adobe Acrobat 2017, Adobe Acrobat Reader 2017, Adobe Acrobat 2020, and Adobe Acrobat Reader 2020 is related to incorrect path name restrictions for access to restricted...

The vulnerability of the Photo Station photo storage application lies in the improper restriction on the path to the restricted catalog. This allows a violator to compromise the integrity of the data.

The vulnerability of the Photo Station photo storage application lies in improper restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to compromise the integrity of the data...

The vulnerabilities of the implementations of functions based on the AJAX technology, such as motor_load_more(), motor_gallery_load_more(), motor_quick_view(), and motor_project_quick_view(), in the “Motor – Cars, Parts, Service, Equipments and Accessories” theme. This theme is part of the WooCommerce store and uses the WordPress content management system. These vulnerabilities allow an attacker to execute arbitrary PHP code or gain unauthorized access to protected information.

The vulnerability of implementations based on the AJAX technology—motorloadmore, motorgalleryloadmore, motorquickview, and motorprojectquickview—in the “Motor: Cars, Parts, Service, Equipment, and Accessories” theme. This vulnerability is related to shortcomings in path name restrictions for the...

The vulnerability of the microprogrammed software for WAGO Series PFC200 programmable logic controllers arises from incorrect restrictions on the path name in the restricted access catalog. This allows an intruder to gain unauthorized access to protected information.

The vulnerability of the microprogrammed software in WAGO Series PFC200 programmable logic controllers is related to incorrect restrictions on the path name in the restricted access catalog. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to...

PT-2021-3332 · Wago · Wago Pfc 200

Name of the Vulnerable Software and Affected Versions: WAGO PFC200 devices affected versions not specified Description: The issue is related to the WAGO PFC200 devices, where an authorized attacker with network access can access the file system with higher privileges using specially crafted...

CVE-2021-32062

MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MSMAPNOPATH and MSMAPPATTERN restrictions that are intended to control the locations from which a mapfile may be loaded with MapServer CGI...

DEBIAN-CVE-2021-32062

MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MSMAPNOPATH and MSMAPPATTERN restrictions that are intended to control the locations from which a mapfile may be loaded with MapServer CGI...

UBUNTU-CVE-2021-32062

MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MSMAPNOPATH and MSMAPPATTERN restrictions that are intended to control the locations from which a mapfile may be loaded with MapServer CGI...

CVE-2021-32062

MapServer before 7.0.8, 7.1.x and 7.2.x before 7.2.3, 7.3.x and 7.4.x before 7.4.5, and 7.5.x and 7.6.x before 7.6.3 does not properly enforce the MSMAPNOPATH and MSMAPPATTERN restrictions that are intended to control the locations from which a mapfile may be loaded with MapServer CGI...

The vulnerability of the `--userns-remap` option, a Docker containerization-enabled deployment and application management automation tool, is related to an incorrect path name limitation for the directory. This vulnerability allows attackers to compromise data integrity.

The vulnerability of the --userns-remap option, a tool for automating application deployment and management in Docker containerized environments, is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability allows a malicious actor to compromise data...

The vulnerability of the Cisco IOS XE SD-WAN command-line interface allows a attacker to gain unauthorized access to protected information.

The vulnerability of the Cisco IOS XE SD-WAN software’s command-line interface is related to incorrect path name restrictions for access to restricted directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

The vulnerability of the API component and the web interface of the Cisco Network Services Orchestrator software allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the API component and the web interface of the Cisco Network Services Orchestrator software relates to incorrect restrictions on the path name to the directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the REST API interface of the Cisco Data Center Network Manager system allows a attacker to compromise the integrity and confidentiality of data.

The vulnerability of the REST API interface of the Cisco Data Center Network Manager system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker to compromise the integrity and confidentiality of data...

The vulnerabilities of the 3D model rendering software programs Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR allow attackers to compromise the confidentiality, integrity, and accessibility of protected information, due to incorrect path restrictions for accessing the restricted catalog.

The vulnerability of the software tools for rendering 3D models, such as Luxion KeyShot, Luxion KeyShot Viewer, Luxion KeyShot Network Rendering, and Luxion KeyVR, exists due to an incorrect limitation on the path to the restricted-access catalog. Exploiting this vulnerability can allow attackers...

The vulnerability of the programmatically defined Cisco SD-WAN, related to incorrect restrictions on path names to the restricted access directory, allows a intruder to compromise the integrity of protected information.

The vulnerability of the programmatically defined Cisco SD-WAN network is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability in the vManage web interface of the programmatically defined Cisco SD-WAN network allows a attacker to read and write arbitrary files in the target system.

The vulnerability in the vManage web interface of the Cisco SD-WAN program-defined network is related to incorrect path name restrictions for access-limited directories. Exploiting this vulnerability could allow a malicious actor to read and write arbitrary files on the target system remotely...

The vulnerability of the OpenOffice office suite arises from incorrect restrictions on path names to restricted directories. This allows attackers to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the OpenOffice office suite is related to a recompilation error through “.. two dots” in files where the XSLT JAR filter is active. Exploiting this vulnerability can allow an attacker to gain access to confidential data, compromise its integrity, and cause service failures...

CVE-2020-3237

A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, local attacker to overwrite arbitrary files in the virtual instance that is running on the affected device. The vulnerability is due to insufficient path restriction...

The vulnerability of the Tool for Auto-Registered Phones Support (TAPS) in Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition (SME) systems allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Tool for Auto-Registered Phones Support TAPS module in Cisco Unified Communications Manager and Cisco Unified Communications Manager Session Management Edition SME systems is related to an incorrect limitation on the path to the restricted-access directory. Exploiting thi...

The vulnerability of the PharStreamWrapper package in the TYPO3 content management system allows a hacker to disclose protected information.

The vulnerability of the PharStreamWrapper package in the TYPO3 content management system is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to disclose protected information...