ROS-20260713-73-0046

The vulnerability in GitPython relates to an incorrect limitation on the path name for restricted access directories. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

Cisco ISE Policy Management Platform Path Traversal

The vulnerability of the Cisco Identity Services Engine ISE policy management platform and the Cisco ISE Passive Identity Connector ISE-PIC virtual authentication data collection device is related to an incorrect limit on the path name to the directory. Exploiting this vulnerability could allow a...

Cacti Path Traversal Phishing

The vulnerability of the Cacti network monitoring software is related to an incorrect limitation on the path name to the directory when processing the formatfile parameter. Exploiting this vulnerability allows a remote attacker to perform phishing attacks...

Azure Kubernetes Service Path Traversal

The vulnerability of the Container Application Deployment and Management service provided by Azure Kubernetes Service AKS is related to an incorrect path name limitation for the catalog. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

ROS-20260608-73-0014

The vulnerability of the .NET Core software platform is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a remote attacker to write arbitrary files...

SMB CSI Driver Kubernetes Directory Deletion Modification

The vulnerability of the SMB CSI driver in the Kubernetes cluster management software is related to an incorrect path name limitation. Exploiting this vulnerability allows a remote attacker to delete or modify directories beyond the scope of the target managed subdirectory in the exported SMB fil...

Erugo Path Traversal Code Execution

The vulnerability of the autonomous file-sharing platform Erugo is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Calibre Path Traversal Code Execution

The vulnerability of the Calibre electronic library software is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a perpetrator to execute arbitrary code and cause service failures by sending a specially crafted PDB file...

pip commonprefix File Access

The vulnerability of the commonprefix function in the pip module of the Python programming language is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow a malicious actor to gain access to add and modify any files they desire...

Cassandra Database Directory Path Traversal

The vulnerability of the Rack::Protection web interface for managing and interacting with the Cassandra Web database lies in an incorrect restriction on the path name to the directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

pnpm Arbitrary File Write

The vulnerability in the fetch/binary-fetcher/src/index.ts and resolve/resolver-base/src/index.ts scripts of the package manager pnpm is related to an incorrect path name limitation. Exploiting this vulnerability could allow a remote attacker to write arbitrary files...

SolarWinds Serv-U File Server Path Traversal

The vulnerability of the SolarWinds Serv-U File Server file server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

VM_BIND Component Kernel DoS

The vulnerability of the VMBIND component of the Linux operating system’s kernel is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a attacker to cause a service failure...

Jira JVM Code Execution

The vulnerability of the Jira JVM software product for data processing in Atlassian’s Jira Software Data Center and Server products is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

AndSoft e-TMS Path Traversal

The vulnerability of the AndSoft e-TMS transportation management software is related to the use of unreliable cryptographic algorithms. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

Nokia Single Radio Access Network Path Traversal

The vulnerability of the Nokia Single RAN network management platform lies in the improper limitation of the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected...

ZyXEL AMG1302-T10B Function Write Arbitrary Files

The vulnerability of the FUN0040fffc function in the microprogramming software for ZyXEL AMG1302-T10B is related to an incorrect limitation on the path name when processing the SESSIONID parameter. Exploiting this vulnerability allows a remote attacker to write arbitrary files by sending speciall...

Ghostscript gp_open_scratch_file_impl() File Read

The vulnerability of the gpopenscratchfileimpl function in the base/gpmswin.c and base/winrtsup.cpp files of the Ghostscript processing, conversion, and generation software suite is related to an incorrect path name limitation. Exploiting this vulnerability could allow a remote attacker to read...

Siemens Scalance LPE9403 Path Traversal

The vulnerability of Siemens Scalance LPE9403 industrial switches’ microprogramming software is related to an incorrect limitation on the name of the path to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files remotely...

DevTools Security Bypass

The vulnerability of the DevTools set of tools for web development in the Google Chrome browser is related to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to bypass security restrictions remotely...