SAP NetWeaver Java Application Server Path Traversal

The vulnerability of SAP NetWeaver Java Application Server web applications is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

WordPress Plugin Download Counter: Path traversal vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

Ivanti Endpoint Manager Path Traversal

The vulnerability of the Ivanti Endpoint Manager software management tool is related to incorrect restrictions on the path name to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code, provided that the user downloads a specially crafted configuration fi...

Data Protection Software Path Traversal Disclosure

The vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system is...

Data Domain OS Path Traversal

The vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system is...

AndSoft e-TMS Path Traversal XSS

The vulnerability of AndSoft e-TMS software management system for transportation transport is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

Websoft HCM Automation Software Unauthorized Access

The vulnerability of Websoft HCM’s automation software for HR processes is related to incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

EUVD-2019-3407

Malware in sbrugna...

Python Interpreter Path Traversal

The vulnerability of the Python programming language interpreter is related to improper restrictions on the path to a limited directory. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to and modify any arbitrary file in the system...

Vim Path Traversal Command Execution

The vulnerability of the Vim text editor is related to incorrect restrictions on the path to the restricted access directory. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Vim Path Traversal Command Execution

The vulnerability of the Vim text editor is related to incorrect restrictions on the path to the restricted access directory. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Lexmark Embedded Web Server RCE

The vulnerability of the embedded web-server microprogramming software of Lexmark printers is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

NVIDIA NVDebug Path Traversal

The vulnerability of the NVIDIA NVDebug debugging and diagnostic software tool is related to incorrect restrictions on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...

Ivanti Cloud Services Appliance Path Traversal Code Execution

The vulnerability of the Ivanti Cloud Services Appliance relates to improper code generation management. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Spring Framework Unauthorized Access

The vulnerability of container services in the Spring Framework is related to incorrect restrictions on path names pointing to restricted directories. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

tarfile module CPython Unauthorized Access

The vulnerability of the tarfile module in the CPython interpreter is related to incorrect restrictions on the path name for directories with restricted access. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CPython Path Traversal

The vulnerability of the CPython interpreter is related to incorrect restrictions on path names to restricted directories. Exploiting this vulnerability allows a malicious actor to compromise the integrity of protected information...

Fortinet Path Traversal

The vulnerability of Fortinet’s software products is related to incorrect restrictions on path names in the restricted access catalog. Exploiting this vulnerability allows a malicious actor to overwrite arbitrary files remotely...

BIT-LIBPYTHON-2020-15801

In Python 3.8.4, sys.path restrictions specified in a python38.pth file are ignored, allowing code to be loaded from arbitrary locations. The .pth file e.g., the python.pth file is not affected...

libxpc macOS Privilege Escalation

The vulnerability of the libxpc component in macOS operating systems is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability can allow attackers to increase their privileges...