Visual Studio Code Path Traversal

The vulnerability of Visual Studio Code’s source editor is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to bypass existing security mechanisms remotely...

WiresharkZipHelper unzip DoS

The vulnerability of the WiresharkZipHelper::unzip function in the Wireshark network traffic analyzer is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability could allow a attacker to cause service failures or execute arbitrary code...

ROS-20261001-73-0020

The vulnerability in Go-Git relates to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

kubectl cp Arbitrary File Write

The vulnerability of the kubectl cp command in the Kubernetes command line tool relates to an incorrect path name limitation. Exploiting this vulnerability could allow a remote attacker to write arbitrary files...

TZInfo Path Traversal DoS

The vulnerability of the TZInfo time zone database is related to deficiencies in path name limitation for accessing the catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Microsoft SharePoint Server Code Execution

The vulnerability of Microsoft SharePoint Server, Microsoft SharePoint Server Subscription Edition, and Microsoft SharePoint Enterprise Server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

Termide Virtual Desktops Connection Manager Path Traversal

The vulnerability of the “Termide Virtual Desktops Connection Manager” software complex is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain access to any file in the file system by...

GoCD Path Traversal

The vulnerability of the CI/CD GoCD server exists due to an incorrect pathname limitation for the access-controlled directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

SpaceLogic C-Bus Toolkit Path Traversal

The vulnerability of the SpaceLogic system integration software with the C-Bus SpaceLogic C-Bus Toolkit is related to deficiencies in path name limitation. Exploiting this vulnerability can allow an intruder to gain unauthorized access to files...

Microsoft File Systems IBM Spectrum Protect Plus Disclosure

The vulnerability of the backup and recovery functions of Microsoft’s file systems in the IBM Spectrum Protect Plus data protection platform is related to an incorrect limitation on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to...

networkd-dispatcher RCE

The vulnerability of the networkd-dispatcher component, which manages connection states and initializes services within Systemd on Linux operating systems, exists due to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability could allow an attacker to...

CVE-2022-26500

Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers to upload and execute arbitrary code...

CVE-2021-37064

There is a Improper Limitation of a Pathname to a Restricted Directory vulnerability in Huawei Smartphone.Successful exploitation of this vulnerability may lead to arbitrary file created...

Linux fs/nfsd/nfs3xdr.c Code Execution

The vulnerability of the fs/nfsd/nfs3xdr.c component in the Linux operating system is related to an incorrect limitation on the path name for the restricted-access directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by calling READDIRPLUS...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

CVE-2021-20206

CVE-2021-20206 involves containernetworking/cni before 0.8.1 where the network configuration field type can include path traversal ("../"), allowing an authenticated attacker to reference and execute binaries outside the plugin directory (e.g., reboot). Impact affects confidentiality, integrity, ...

Cisco Webex Meetings Desktop App Code Execution

The vulnerability of the Cisco Webex Meetings Desktop App software-related web conferencing software is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a attacker to execute arbitrary code...