1157 matches found
The vulnerability of the OpenSSH cryptographic protection mechanism for Windows operating systems allows a hacker to execute arbitrary code.
The vulnerability of the OpenSSH cryptographic security mechanism for Windows operating systems is related to improper external management of file names or file paths. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
USN-7061-1 golang-1.17 vulnerabilities
Hunter Wittenborn discovered that Go incorrectly handled the sanitization of environment variables. An attacker could possibly use this issue to run arbitrary commands. CVE-2023-24531 Sohom Datta discovered that Go did not properly validate backticks as Javascript string delimiters, and did not...
PT-2024-32447 · Gradio · Gradio
Name of the Vulnerable Software and Affected Versions: Gradio versions prior to 5.0 Description: This issue relates to the bypass of directory traversal checks within the is in or equal function. The function, intended to check if a file resides within a given directory, can be bypassed with...
Siemens SINEC Security Monitor 路径遍历漏洞
SINEC Security Monitor is a modular network security software for passive, non-intrusive, continuous network security monitoring during production processes at customer sites. A path traversal vulnerability exists in Siemens SINEC Security Monitor that originates from not properly validating the...
PT-2024-6797 · Microsoft · Openssh For Windows +1
Name of the Vulnerable Software and Affected Versions: Microsoft OpenSSH for Windows affected versions not specified Description: The issue is related to incorrect external management of a file name or path in the cryptographic protection tool of OpenSSH for Windows. This allows a remote attacker...
PT-2024-6835 · Microsoft · Defender For Endpoint For Linux
Name of the Vulnerable Software and Affected Versions: Microsoft Defender for Endpoint for Linux affected versions not specified Description: The issue is related to errors in handling relative directory paths, which can be exploited to conduct spoofing attacks. Recommendations: At the moment,...
CVE-2024-44190
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to read arbitrary files...
CVE-2024-44190
A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to read arbitrary files...
The vulnerability of Windows operating systems arises from improper external management of file names or file paths, allowing attackers to gain unauthorized access and modify the contents of compressed folders.
Vulnerabilities of Windows operating systems are related to incorrect external management of file names or file paths. Exploiting these vulnerabilities can allow an attacker, operating remotely, to gain unauthorized access and modify the contents of compressed folders...
CVE-2024-44190
CVE-2024-44190 describes a path handling issue in macOS that could allow an app to read arbitrary files. The root cause is insufficient validation in path handling, and Apple fixed this in macOS Ventura 13.7, macOS Sonoma 14.7, and macOS Sequoia 15. Remediation is to deploy the listed macOS updat...
CVE-2024-44190
A path handling issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An app may be able to read arbitrary files...
CVE-2024-44190
A path handling issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to read arbitrary files...
VulnCheck KEV: CVE-2024-6396
A vulnerability in the backuprun function in aimhubio/aim version 3.19.3 allows remote attackers to overwrite any file on the host server and exfiltrate arbitrary data. The vulnerability arises due to improper handling of the runhash and repo.path parameters, which can be manipulated...
PT-2024-6239 · Microsoft · Windows Remote Desktop Licensing Service +1
Name of the Vulnerable Software and Affected Versions: Windows Remote Desktop Licensing Service affected versions not specified Description: The issue is related to errors in handling relative path to directory in the Remote Desktop Licensing Service of Windows operating systems. Exploitation of...
ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths
A flaw was found in Ghostscript. When the gpvalidatepathlen function validates a path, it distinguishes between absolute and relative paths. In the case of relative paths, it will check the path with and without the current-directory-prefix "foo" and "./foo". This does not take into account paths...
Improper File Path Handling
unzip-stream is vulnerable to Improper File Path Handling. The vulnerability is due to the Extract method allowing malicious zip files to write to unauthorized paths...
VulnCheck KEV: CVE-2024-37032
Ollama before 0.1.34 does not validate the format of the digest sha256 with 64 hex digits when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring...
GO-2022-0448 Improper path handling in Kustomization files allows for denial of service in github.com/fluxcd/flux2
Improper path handling in Kustomization files allows for denial of service in github.com/fluxcd/flux2...
PT-2024-6181 · Microsoft · Windows Compressed Folder +1
Name of the Vulnerable Software and Affected Versions: Windows Compressed Folder affected versions not specified Description: The issue is related to incorrect external management of a file's name or path in Windows operating systems. This can allow a remote attacker to gain unauthorized access t...