WordPress plugin Anona: Path traversal vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

MiracleLinux 8 : curl-7.61.1-18.el8.1 (AXSA:2021-2446:04)

The remote MiracleLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2021-2446:04 advisory. curl: Content not matching hash in Metalink is not being discarded CVE-2021-22922 curl: Metalink download sends credentials CVE-2021-22923 curl: Bad...

The vulnerability of the Windows Shell component in Windows operating systems allows attackers to perform spoofing attacks.

The vulnerability of the Windows Shell component in Windows operating systems is related to incorrect path name restrictions. Exploiting this vulnerability can allow attackers to perform spoofing attacks...

The vulnerability of the Node.js software platform, related to incorrect restrictions on path names for directories with restricted access, allows attackers to compromise the system.

The vulnerability of the Node.js software platform is related to incorrect restrictions on path names for directories with restricted access. Exploiting this vulnerability can allow an attacker to compromise the system...

The vulnerability of the MICROSENS NMP Web+ network management platform lies in the incorrect limitation of the path name to the restricted directory, allowing an attacker to execute arbitrary codes.

The vulnerability of the MICROSENS NMP Web+ network management platform lies in incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of Wangshen SecGate 3600 lies in the incorrect restriction of the path name to the restricted access catalog, allowing attackers to bypass existing security restrictions.

The vulnerability of Wangshen SecGate 3600 relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions remotely...

PT-2025-62906

Уязвимость платформы Solar appScreener связана с неверным ограничением имени пути к каталогу. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, выполнить произвольный код...

The vulnerability of the SolarWinds Serv-U File Server file server lies in the incorrect path name limitation for the directory, allowing a hacker to execute arbitrary code.

The vulnerability of the SolarWinds Serv-U File Server file server is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the microprogrammed software of the GL.iNet MT6000, A1300, X300B, AX1800, AXT1800, MT2500, MT3000, X3000, XE3000, XE300, E750, X750, SFT1200, AR300M, AR300M16, AR750, AR750S, B1300, MT1300, MT300N-V2, AP1300, B2200, MV1000, MV1000W, USB150, SF1200, N300, S1300 lies in the incorrect limitation on the path name to the restricted access directory. This allows attackers to execute arbitrary commands.

The vulnerability of the microprogrammed software of the GL.iNet MT6000, A1300, X300B, AX1800, AXT1800, MT2500, MT3000, X3000, XE3000, XE300, E750, X750, SFT1200, AR300M, AR300M16, AR750, AR750S, B1300, MT1300, MT300N-V2, AP1300, B2200, MV1000, MV1000W, USB150, SF1200, N300, S1300 lies in the...

The vulnerability of the Docker Compose tool for managing multi-container applications arises from incorrect path name restrictions for restricted access directories. This allows attackers to re-record arbitrary files.

The vulnerability of the Docker Compose tool for managing multi-container applications is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability could allow a malicious actor to re-record arbitrary files...

The vulnerability of the VM_BIND component of the Linux operating system’s kernel allows a hacker to trigger a service failure.

The vulnerability of the VMBIND component of the Linux operating system’s kernel is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a attacker to cause a service failure...

The vulnerability of the Xerox FreeFlow Core platform for intelligent automation of work processes lies in the incorrect limitation of the path name to the restricted access catalog, allowing attackers to execute arbitrary commands.

The vulnerability of the Xerox FreeFlow Core platform for intelligent automation of work processes is related to an incorrect limitation on the name of the path to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Jira JVM software product for data processing in Atlassian’s Jira Software Data Center and Server allows a perpetrator to execute arbitrary code.

The vulnerability of the Jira JVM software product for data processing in Atlassian’s Jira Software Data Center and Server products is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Claude Code tool, related to incorrect restrictions on the path name to the restricted access catalog, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Claude Code code editor is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and Data Domain OS—due to incorrect path name restrictions in the restricted access directory—allows unauthorized individuals to gain unauthorized access to the compromised system and trigger service failure.

The vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system is...

The vulnerability of D-Link Nuclias Connect software for centralized control of wireless networks arises from incorrect path name restrictions in the restricted access directory. This allows attackers to delete any files they desire.

The vulnerability of D-Link Nuclias Connect wireless network management software is related to an incorrect path name limitation in the access-limited directory. Exploiting this vulnerability could allow a remote attacker to delete any files they desire...

The vulnerability of AndSoft e-TMS software management system for transportation transportations lies in the improper restriction of path names to the catalog, without taking measures to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of AndSoft e-TMS software management system for transportation transport is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of AndSoft e-TMS software management system for transportation transportations lies in the improper restriction of path names to the catalog, without taking measures to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of AndSoft e-TMS software management system for transportation transport is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of AndSoft e-TMS software management system for transportation transportations lies in the improper limitation of the path name when accessing the catalog using unreliable cryptographic algorithms. This allows a hacker to gain unauthorized access to protected information.

The vulnerability of the AndSoft e-TMS transportation management software is related to the use of unreliable cryptographic algorithms. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of the Cisco Nexus Dashboard Fabric Controller (NDFC) platform, related to incorrect restrictions on the path name to the restricted catalog, allows a perpetrator to increase their privileges.

The vulnerability of the Cisco Nexus Dashboard Fabric Controller NDFC network resource management platform is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...