432 matches found
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring lies in improper restrictions on path names in the catalog. This allows attackers to disclose user information, obtain login credentials in plain text, or perform NTLM relay attacks.
The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to disclose user information, obtain login credentials in...
The vulnerability of the Trend Micro Mobile Security software for mobile devices lies in its improper path name limitation for the restricted access directory, which allows a hacker to delete any files they want.
The vulnerability of the Trend Micro Mobile Security software relates to an incorrect restriction on the path to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files...
PT-2023-7439 · Delta Electronics · Infrasuite Device Master
Name of the Vulnerable Software and Affected Versions: Delta Electronics InfraSuite Device Master version 1.0.7 Description: A vulnerability exists in Delta Electronics InfraSuite Device Master that allows an unauthenticated attacker to disclose user information through a single UDP packet, obtai...
PT-2023-32210 · Tacc · Tacc Epo Extension
Name of the Vulnerable Software and Affected Versions: TACC ePO extension versions prior to 8.4.0 Description: The issue is related to an improper limitation of a path name to a restricted directory, which could allow an authorized administrator attacker to execute arbitrary code by uploading a...
The vulnerability of the /api/upload component of the software platform zdir, which allows a perpetrator to execute arbitrary code.
The vulnerability of the /api/upload component in the zdir application exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code using a specially created .ssh fil...
The vulnerability of the Learning Module component of the ILIAS learning management and support system allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the Learning Module component of the ILIAS learning management and support system exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity...
The vulnerability of the Jorani employee leave management software lies in the incorrect restriction on the path to the restricted catalog. This allows a hacker to execute arbitrary code.
The vulnerability of the Jorani application for Windows is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
The vulnerability of the SolarWinds Access Rights Manager software lies in the incorrect restriction of the path name to the restricted directory. This allows a violator to execute arbitrary code.
The vulnerability of the SolarWinds Access Rights Manager software relates to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
The vulnerability of the SolarWinds Access Rights Manager software lies in the incorrect restriction of the path name to the restricted directory. This allows a violator to execute arbitrary code.
The vulnerability of the SolarWinds Access Rights Manager software relates to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
The vulnerability of the Suricata intrusion detection and prevention system arises from an improper limitation on the path name to the restricted access catalog. This allows intruders to write arbitrary files into the file system.
The vulnerability of the Suricata intrusion detection and prevention system lies in the incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files into the file system...
The vulnerability of the web interface of the administration and service portal of Atos Unify OpenScape Common Management Platform allows a perpetrator to bypass security restrictions and execute arbitrary codes.
The vulnerability of the web interface of the Atos Unify OpenScape Common Management Platform’s administration and service portal is related to an incorrect restriction on the path to the catalog. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute...
The vulnerability of the OpenRefine software for extracting and cleaning tabular data lies in the incorrect limitation of the path name to the restricted-access catalog, allowing a violator to execute arbitrary code.
The vulnerability of the OpenRefine software for extracting and cleaning tabular data is related to an incorrect restriction on the path to the restricted-access catalog. Exploiting this vulnerability could allow a attacker to execute arbitrary code using a specially created tar file...
The vulnerability of the WS_FTP Server server, related to incorrect path name restrictions for the restricted access directory, allows attackers to circumvent security restrictions, gain unauthorized read, modify, or delete access to data, and execute arbitrary commands.
The vulnerability of the WSFTP Server server is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows an attacker to bypass security restrictions, gain unauthorized read, edit, or delete access to data, and execute arbitrary commands...
The vulnerability of the Watchkit application development framework of the HarmonyOS operating system, which allows a hacker to compromise data confidentiality and integrity.
The vulnerability of the Watchkit framework for application development in the HarmonyOS operating system is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to compromise data confidentiality and...
CVE-2023-38344
An issue was discovered in Ivanti Endpoint Manager before 2022 SU4. A file disclosure vulnerability exists in the GetFileContents SOAP action exposed via /landesk/managementsuite/core/core.secure/OsdScript.asmx. The application does not sufficiently restrict user-supplied paths, allowing for an...
The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to deficiencies in pathname restrictions for directories, allows attackers to gain unauthorized access to protected information.
The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...
ROS-20230911-09
A vulnerability in the XML document merge mechanism XInclude of the vector graphics rendering library librsvg is related to incorrect restriction of path name to restricted directory when processing element xi:include. Exploitation of the vulnerability may allow an intruder to gain unauthorized...
The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a perpetrator to execute arbitrary code.
The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability allows a attacker to execute arbitrary code using the runshellscript.py script...
The vulnerability of ScrutisWeb banknote monitoring software arises from an incorrect path limitation for the access to the restricted directory. This allows a hacker to gain direct access to any file outside of the root directory.
The vulnerability of ScrutisWeb banknote monitoring software exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain direct access to any file outside of the root directory...
The vulnerability of Moxa TN-4900 and TN-5900 router microprogramming software allows a hacker to create or overwrite critical files and execute arbitrary code.
The vulnerability of Moxa TN-4900 and TN-5900 router microprogramming software lies in the incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows an attacker to create or overwrite critical files remotely, and execute arbitrary code...