The vulnerability of the Ivanti EPM endpoint management software lies in the improper restriction of path names in the catalog, which allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Ivanti EPM endpoint management software is related to incorrect restrictions on path names in the catalog. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Ivanti EPM endpoint management software lies in the improper restriction of path names in the catalog, which allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the Ivanti EPM endpoint management software is related to incorrect restrictions on path names in the catalog. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the interface of the Gogs self-managed Git repository creation software allows a hacker to write arbitrary files.

The vulnerability of the Gogs self-managed Git repository creation software interface is related to improper restrictions on the path name to the restricted-access directory. Exploiting this vulnerability allows a malicious actor, operating remotely, to write arbitrary files...

The vulnerability of the ColdFusion software platform arises from incorrect restrictions on path names to restricted directories. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the restricted access catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the File Upload mechanism in the Apache Struts software framework allows a hacker to execute arbitrary code.

The vulnerability of the File Upload mechanism in the Apache Struts software platform is related to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that a specially crafted malicious file is...

The vulnerability of the Archive Extraction Handler component in the Luigi library for the Python programming language allows a hacker to execute arbitrary code.

The vulnerability of the Archive Extraction Handler component in the Luigi library for the Python programming language is related to an incorrect limitation on the path name of the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using ...

The vulnerability of the command-line interface (CLI) of the Instant AOS-8 and AOS-10 operating systems, which allows a hacker to gain unauthorized access to protected information

The vulnerability of the command-line interface CLI of the Instant AOS-8 and AOS-10 operating systems is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized acces...

The vulnerability of Kanboard project management software lies in the improper limitation of the path name to the restricted access directory. This allows attackers to read and delete any files from the server.

The vulnerability of Kanboard project management software is related to incorrect restrictions on the path to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to remotely read and delete any files from the server...

The vulnerability of the Manager component in the Wowza Streaming Engine server software allows a hacker to gain access and delete directories.

The vulnerability of the Manager component in the Wowza Streaming Engine server software is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain access and delete directories, provided that the target...

The vulnerability of the Manager component in the Wowza Streaming Engine server software allows a hacker to gain access to create an XML file in any directory.

The vulnerability of the Manager component in the Wowza Streaming Engine server software is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain access to the XML file in any arbitrary directory...

The vulnerability in the virtual learning environment Moodle, related to improper restrictions on the path name to a limited catalog, allows a intruder to gain access to confidential data.

The vulnerability in the virtual training environment Moodle is related to the local loading of files during the restoration of incorrect backup copies of modules. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data...

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks arises from incorrect restrictions on the path name to the restricted access directory. This allows a perpetrator to execute arbitrary code.

The vulnerability of the Ivanti Endpoint Manager software for managing endpoints in information networks is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability could allow an attacker to execute arbitrary code...

The vulnerability of the Podman software for managing and starting OCI containers arises from improper restrictions on the path name of a limited catalog. This allows a malicious actor to trigger a service failure.

The vulnerability of the Podman software for managing and starting OCI containers is related to improper restrictions on the path name of a limited catalog. Exploiting this vulnerability allows an attacker who operates remotely to trigger a service failure by using a specially created symbolic li...

Fortinet FortiManager和Fortinet FortiAnalyzer 路径遍历漏洞

Fortinet FortiManager and Fortinet FortiAnalyzer are both products of Fortinet, a centralized network security management platform. The platform supports centralized management of any number of Fortinet devices, and can be grouped into different management domains ADOM to further simplify the...

The vulnerability of the python38._pth file of the Python interpreter lies in its ability to ignore the restrictions specified in the python38._pth file within sys.path. This allows a malicious actor to execute arbitrary code.

The vulnerability of the python38.pth file of the Python interpreter involves ignoring the restrictions specified in the python38.pth file within sys.path. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the OPC server WorkstationST, related to incorrect restrictions on the path name to the directory, allows a hacker to gain access to the server’s directory.

The vulnerability of the OPC server WorkstationST is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the server’s directory...

The vulnerability of the Platypus.js tooling platform, related to incorrect path name restrictions for restricted access catalogs, allows attackers to gain access to confidential data.

The vulnerability of the Platypus.js tooling platform is related to an incorrect restriction on the path name to the restricted-access catalog. Allowing this to be exploited could enable a malicious actor to gain access to confidential data...

The vulnerability of the experimental-permission configuration in the Node.js software platform allows a hacker to bypass security restrictions and gain unauthorized access to protected information.

The vulnerability of the experimental-permission configuration in the Node.js software platform is related to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain unauthorized access to...

The vulnerability in the web interface for managing Cisco Firepower Management Center software allows a hacker to read arbitrary files.

The vulnerability in the web interface for managing Cisco Firepower Management Center FMC software involves incorrect restrictions on the path name to the directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

The vulnerability of the Passwork password manager, related to incorrect restrictions on the path to the restricted catalog, allows a intruder to gain unauthorized access to local files and directories on the server.

The vulnerability of the Passwork password manager is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to local files and directories on the server by manipulating URL...