ROS-20261001-73-0023

The vulnerability in glib2 relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Check Point Security Management Server and Multi-Domain Security Management Server software lies in the improper limitation of the path name to the directory. This allows attackers to execute arbitrary code.

The vulnerability of the Check Point Security Management Server and Multi-Domain Security Management Server software lies in incorrect path name restrictions for accessing the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the ColdFusion software platform arises from incorrect restrictions on path names in the catalog, allowing attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of the ColdFusion software platform, related to incorrect restrictions on path names in the catalog, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ColdFusion software platform arises from incorrect restrictions on path names in the catalog, allowing attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

The vulnerability of the aiohttp HTTP client, related to incorrect pathname restrictions for directories, allows attackers to disclose protected information.

The vulnerability of the aiohttp HTTP client is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a remote attacker to disclose sensitive information that is protected by the system...

ROS-20260713-73-0042

The vulnerability in python-mako is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Cisco Catalyst Center (formerly Cisco DNA Center) network infrastructure management system, related to incorrect path name restrictions, allows attackers to gain unauthorized access to protected information.

The vulnerability of the Cisco Catalyst Center formerly Cisco DNA Center network infrastructure management system is related to incorrect restrictions on path names in the catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected...

The vulnerability of the Cortex XSOAR platform for security organization, automation, and response lies in improper name restrictions on paths to the catalog, allowing attackers to execute “man-in-the-middle” attacks or write arbitrary files.

The vulnerability of the Cortex XSOAR security, automation, and response platform is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to execute a “man-in-the-middle” attack or write arbitrary files...

The vulnerability of Microsoft Visual Studio Code’s source editor lies in the incorrect path name limitation for the directory, allowing attackers to bypass existing security restrictions.

The vulnerability of Microsoft Visual Studio Code’s editor is related to incorrect path name restrictions for the directory. Exploiting this vulnerability could allow an attacker to bypass existing security restrictions...

The vulnerability of the container management system and the virtual machine manager Incus, related to incorrect restrictions on the path name to the restricted access catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the container management system and the virtual machine manager Incus is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a remote attacker to gain unauthorized access to protected information...

The vulnerability of the node-tar library on the Node.js software platform allows attackers to gain unauthorized access to protected information.

The vulnerability of the node-tar library in the Node.js software platform is related to an incorrect limitation on the path name for the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ROS-20260430-73-0004

Vulnerability in buildkit related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

Erlang/OTP 安全漏洞

Erlang/OTP is an open-source JavaScript library for handling exceptions. This library can catch exceptions caused by Node.js’s built-in APIs. Versions 17.0 to 28.4.1, 27.3.4.9, and 26.2.5.18 of Erlang/OTP contain security vulnerabilities due to improper path name restrictions, which may lead to...

The vulnerability of the MacOS operating system, related to incorrect path name restrictions for restricted access directories, allows attackers to elevate their privileges to the root level.

The vulnerability of the MacOS operating system is related to incorrect restrictions on path names in restricted access directories. Exploiting this vulnerability can allow an attacker to elevate their privileges to the root level...

Hexpm 安全漏洞

Hexpm is a web page and interface developed by Hex. Hexpm has a security vulnerability, which stems from improper path name restrictions, potentially leading to relative path traversal...

WordPress plugin User Extra Fields 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions of...

WordPress plugin User Extra Fields 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions of...

The vulnerability of the npm package manager lies in the incorrect path name restrictions, which allow attackers to write arbitrary files.

The vulnerability of the npm package manager is related to incorrect restrictions on path names in the catalog. Exploiting this vulnerability allows a remote attacker to write arbitrary files...

The vulnerability of Qfiling’s automatic file organization and sorting software arises from incorrect path name restrictions for the directory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of Qfiling’s automatic file organization and sorting software is related to incorrect restrictions on path names to the catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...