GHSA-836P-6P4J-35CG Drupal Open Redirect

Drupal 6.x before 6.38, 7.x before 7.43, and 8.x before 8.0.4 might allow remote attackers to conduct open redirect attacks by leveraging 1 custom code or 2 a form shown on a 404 error page, related to path manipulation...

Path manipulation

Description matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php. The issue was fixed in version 3.0.6. References https://nvd.nist.gov/vuln/detail/CVE-2021-43676 https://github.com/matyhtf/framework/issues/206 matyhtf/framework@2508460...

Path traversal in librenms/librenms

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

Librenms path traversal vulnerability

Librenms is a Librenms community of open source network monitoring system based on PHP and MySQL. The system features custom alerts, automatic discovery of network environments and automatic updates.Librenms suffers from a path traversal vulnerability that stems from Librenms 21.11.0 being affect...

Path manipulation in matyhtf/framework

matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php. The issue was fixed in version 3.0.6...

GHSA-MH9J-V6MQ-PFCH Path manipulation in matyhtf/framework

matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php. The issue was fixed in version 3.0.6...

CVE-2021-43676

matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php...

CVE-2021-43676

matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php...

CVE-2021-43676

matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php...

CVE-2021-43676

matyhtf framework v3.0.5 is affected by a path manipulation vulnerability in Smarty.class.php...

CVE-2021-43676

CVE-2021-43676 affects matyhtf framework v3.0.5 via a path manipulation vulnerability in Smarty.class.php (path traversal). The issue is fixed in v3.0.6; public advisories note potential access to files outside the intended directory via _read_file in Smarty.class.php.

CVE-2021-43674

ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-43674

ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-43674

ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...

CVE-2021-44278

Librenms 21.11.0 is affected by a path manipulation vulnerability in includes/html/pages/device/showconfig.inc.php...

CVE-2021-44278

Librenms 21.11.0 is affected by a path traversal vulnerability in includes/html/pages/device/showconfig.inc.php, enabling manipulation of the requested path to access files outside the intended directory. Multiple connected advisories (GHSA-7289-CHWJ-7H86, OSV:GHSA-7289-CHWJ-7H86, CNVD/CNNVD, Ver...

CVE-2021-43674

CVE-2021-43674 concerns ThinkUp 2.0-beta.10 and a vulnerability in Smarty.class.php that enables path traversal. The connected sources consistently identify this as a vulnerability affecting ThinkUp 2.0-beta.10 and note that it affects products no longer supported by the maintainer. No explicit e...

CVE-2021-43674

ThinkUp 2.0-beta.10 is affected by a path manipulation vulnerability in Smarty.class.php. NOTE: This vulnerability only affects products that are no longer supported by the maintainer...