1055 matches found
Linux kernel 安全漏洞
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from improper ppath handling in the ext4extreplayupdateex function in the ext4 filesystem, which could lead to a...
Directory Traversal
Gradio is vulnerable to Directory Traversal. The vulnerability is due to improper file path handling in the /customcomponent endpoint, allowing attackers to access source code from custom components by manipulating the file path...
Arbitrary Code Execution
github.com/liamg/gitjacker is vulnerable to Arbitrary Code Execution. The vulnerability is due to improper handling of file paths, allowing directory traversal with a crafted .git directory...
The vulnerability of the OpenSSH cryptographic protection mechanism for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the OpenSSH cryptographic security mechanism for Windows operating systems is related to improper external management of file names or file paths. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of the OpenSSH cryptographic protection mechanism for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the OpenSSH cryptographic security mechanism for Windows operating systems is related to improper external management of file names or file paths. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
USN-7061-1 golang-1.17 vulnerabilities
Hunter Wittenborn discovered that Go incorrectly handled the sanitization of environment variables. An attacker could possibly use this issue to run arbitrary commands. CVE-2023-24531 Sohom Datta discovered that Go did not properly validate backticks as Javascript string delimiters, and did not...
PT-2024-32447 · Gradio · Gradio
Name of the Vulnerable Software and Affected Versions: Gradio versions prior to 5.0 Description: This issue relates to the bypass of directory traversal checks within the is in or equal function. The function, intended to check if a file resides within a given directory, can be bypassed with...
Siemens SINEC Security Monitor 路径遍历漏洞
SINEC Security Monitor is a modular network security software for passive, non-intrusive, continuous network security monitoring during production processes at customer sites. A path traversal vulnerability exists in Siemens SINEC Security Monitor that originates from not properly validating the...
PT-2024-6797 · Microsoft · Openssh For Windows +1
Name of the Vulnerable Software and Affected Versions: Microsoft OpenSSH for Windows affected versions not specified Description: The issue is related to incorrect external management of a file name or path in the cryptographic protection tool of OpenSSH for Windows. This allows a remote attacker...
PT-2024-6835 · Microsoft · Defender For Endpoint For Linux
Name of the Vulnerable Software and Affected Versions: Microsoft Defender for Endpoint for Linux affected versions not specified Description: The issue is related to errors in handling relative directory paths, which can be exploited to conduct spoofing attacks. Recommendations: At the moment,...
CVE-2024-44190
A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to read arbitrary files...
CVE-2024-44190
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to read arbitrary files...
The vulnerability of Windows operating systems arises from improper external management of file names or file paths, allowing attackers to gain unauthorized access and modify the contents of compressed folders.
Vulnerabilities of Windows operating systems are related to incorrect external management of file names or file paths. Exploiting these vulnerabilities can allow an attacker, operating remotely, to gain unauthorized access and modify the contents of compressed folders...
CVE-2024-44190
A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to read arbitrary files...
CVE-2024-44190
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to read arbitrary files...
CVE-2024-44190
CVE-2024-44190 describes a path handling issue in macOS that could allow an app to read arbitrary files. The root cause is insufficient validation in path handling, and Apple fixed this in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. Remediation is to deploy the listed macOS updat...
VulnCheck KEV: CVE-2024-6396
A vulnerability in the backuprun function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any file on the host server and exfiltrate arbitrary data. The vulnerability arises due to improper handling of the runhash and repo.path parameters, which can be manipulated...
PT-2024-6239 · Microsoft · Windows Remote Desktop Licensing Service +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue is related to errors in handling relative path to directory in the Remote Desktop Licensing Service of Windows operating systems. Exploitation of...
ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
A flaw was found in Ghostscript. When the gpvalidatepathlen function validates a path, it distinguishes between absolute and relative paths. In the case of relative paths, it will check the path with and without the current-directory-prefix "foo" and "./foo". This does not take into account paths...