Crosswork Data Gateway Path Traversal

The vulnerability of the Crosswork Data Gateway data collection platform is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of the protected information...

GitPython Path Traversal Privilege Escalation

The vulnerability of the Python library for interacting with git repositories, GitPython, is related to improper external management of file names or paths. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

ROS-20260921-73-0105

The vulnerability in perl-HTTP-Daemon is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to increase their privileges...

ROS-20260901-73-0019

The vulnerability in GitPython is related to incorrect external management of file names or paths. Exploiting this vulnerability can allow an attacker to increase their privileges...

NetScaler ADC File Path Access

The vulnerability of NetScaler ADC formerly Citrix ADC and NetScaler Gateway formerly Citrix Gateway access control systems is related to improper external management of file names or paths. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

CVE-2026-43419

In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leaks in cephmdscbuildpath Add putname calls to error code paths that did not free the "path" pointer obtained by getname. If ownership of this pointer is not passed to the caller via pathinfo.path, the function...

CVE-2026-43252

In the Linux kernel, the following vulnerability has been resolved: mptcp: pm: in-kernel: always set ID as avail when rm endp Syzkaller managed to find a combination of actions that was generating this warning: WARNING: net/mptcp/pmkernel.c:1074 at marksubflowendpavailable net/mptcp/pmkernel.c:10...

Nginx UI DoS

The vulnerability of the Nginx UI server’s user interface relates to improper external management of file names or paths. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

Vulnerabilities fixed in Apple iOS and iPadOS

Apple has fixed several vulnerabilities in iOS and iPadOS. The vulnerabilities include several issues such as improper path management, memory management, and insufficient input validation, which could lead to unauthorized access to sensitive data, unexpected application terminations, and other...

EUVD-2010-1667

Malware in sbrugna...

Kea DHCP Path Traversal

The vulnerability of the open-source Kea DHCP server is related to incorrect external management of the file name or path. Exploiting this vulnerability can allow an attacker to gain write access to arbitrary files...

FortiClient MAC Installer Command Execution

The vulnerability of the FortiClient for MAC installer is related to improper external management of the file name or path to the /tmp directory. Exploiting this vulnerability allows an attacker to execute arbitrary commands...

Astra Linux – Vulnerability in Linux 6.1

In the Linux kernel, the following vulnerability has been resolved: In mptcp, only the ‘subflow’ endpoint is marked as available. The following warning has been added: WARNONONCEmsk-pm.localaddrused == 0 Adding this warning before decrementing the localaddrused counter helped to identify a bug wh...

mptcp: pm: only mark 'subflow' endp as available

...

LogPoint SAML Authentication File Path Deletion Authentication Failure

The vulnerability of the single-input module in the LogPoint SAML Authentication application is related to incorrect external management of file names or paths. Exploiting this vulnerability could allow a malicious actor to delete any desired file and cause authentication failures when logging in...

Tail-f High Cluster Code Execution

The vulnerability of the Tail-f High Availability Cluster Communications HCC functional package of the Cisco Network Services Orchestrator NSO software is related to improper external management of file names or paths. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

PowerScale OneFS DoS

The vulnerability of the PowerScale OneFS operating system is related to improper external management of file names or file paths. Exploiting this vulnerability can allow an attacker to cause a service failure...