WordPress plugin Ovic Importer path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

The vulnerability of the Redmine DMSF plugin, a project and task management system, arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain read, modify, or delete access to files.

The vulnerability of the Redmine DMSF plugin, a project and task management system, is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain read, modify, or delete access to files...

The vulnerability of the SolarWinds Serv-U File Server file server arises from incorrect path name restrictions for the restricted access directory, allowing a hacker to execute arbitrary code.

The vulnerability of the SolarWinds Serv-U File Server file server is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the network management system for monitoring and managing industrial networks in SINEC NMS lies in the improper limitation of the path name to the restricted access directory. This allows a hacker to export monitoring data and upload files from the file system.

The vulnerability of the SINEC NMS network management system for monitoring and managing industrial networks is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to export monitoring data and upload files from th...

The vulnerability in the Avalanche mobile device management web component allows a hacker to trigger a service failure.

The vulnerability of the Avalanche mobile device management web component is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to cause service failures...

The vulnerability of the Avalanche device management system, related to incorrect restrictions on the path name to the restricted access catalog, allows a perpetrator to execute arbitrary commands with SYSTEM privileges.

The vulnerability of the Avalanche device management system is related to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands with SYSTEM privileges remotely...

The vulnerability of the microprogrammed software of the GL.iNet GL-AX1800 routers arises from incorrect restrictions on the path name to the restricted access catalog. This allows attackers to gain unauthorized access to protected information or execute arbitrary code.

The vulnerability of the microprogrammed software of the GL.iNet GL-AX1800 router lies in the incorrect limitation of the path name to the restricted access directory, resulting from sending a request to the final destination using the uploadfile command. By specifying the malicious file as the...

The vulnerability of the Jenkins Git Matrix Project plugin, related to incorrect restrictions on the path to the restricted access directory, allows attackers to compromise the integrity of the protected information.

The vulnerability of the Jenkins Git Matrix Project plugin is related to the lack of cleaning of user-defined project names with multiple configurations. Exploiting this vulnerability allows a malicious actor to compromise the integrity of the protected information...

PT-2024-3698 · Git +9 · Git +9

Name of the Vulnerable Software and Affected Versions: Git affected versions not specified Description: The issue is related to an incorrect restriction of the path name to a directory with limited access in the distributed version control system Git. Exploitation of this issue may allow an...

The vulnerability in the Splunk Web interface of the Splunk Enterprise operating analysis platform allows a malicious actor to read and write arbitrary files into the system.

The vulnerability of the Splunk Enterprise platform for operational analysis is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to read and write arbitrary files into the system using a specially created HTTP...

The vulnerability of the function in the out-of-band connection of the Cisco Nexus Dashboard Fabric Controller (NDFC) allows a hacker to read arbitrary files on the server.

The vulnerability of the out-of-band connection function of the Cisco Nexus Dashboard Fabric Controller NDFC exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to read arbitrary files on the server...

The vulnerability of the DHCP tracking function in Cisco IOS XE allows a intruder to trigger a service failure.

The vulnerability of the DHCP tracking function in Cisco IOS XE operating systems is related to incorrect restrictions on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to trigger a service failure by sending a specially crafted IPv4...

The vulnerability of the microprogramming software for UniLogic Studio series UniStream’s programmable logic controllers arises from incorrect restrictions on the path name to the restricted-access directory. This allows attackers to execute arbitrary code.

The vulnerability of the microprogramming software for UniLogic Studio programmable logic controllers of the UniStream series is related to an incorrect limitation on the path name of the restricted access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary...

The vulnerability of the IBM FileNet Content Manager service for organizing, storing, and managing documents arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the IBM FileNet Content Manager service for document organization, storage, and management is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized...

The vulnerability of the Jenkins HTML Publisher plugin relates to incorrect restrictions on the path to the restricted catalog, allowing attackers to read arbitrary files.

The vulnerability of the Jenkins HTML Publisher plugin is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability allows a malicious actor to read arbitrary files using a specially created HTTP request...

The vulnerability of the panorama.pm web interface component in monitoring consoles for Naemon, Nagios, Icinga, and Shinken THRUK allows a hacker to load any file they desire.

The vulnerability of the panorama.pm web interface of the monitoring console for Naemon, Nagios, Icinga, and Shinken THRUK relates to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to download any file remotely...

Vulnerability of Veritas NetBackup and Veritas NetBackup Appliance software tools for backup and data restoration operations, related to incorrect path name restrictions for access-controlled directories, allows attackers to execute arbitrary code.

The vulnerability of Veritas NetBackup and Veritas NetBackup Appliance software regarding backup and data restoration lies in improper restrictions on the path to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

The vulnerability of the Apache InLong data integration platform lies in its reliance on files and directories accessible from external parties, allowing attackers to execute arbitrary code.

The vulnerability of the Apache InLong data integration platform lies in the use of files and directories accessible to external parties due to incorrect restrictions on the path to the restricted directory during file loading. Exploiting this vulnerability allows a malicious actor to execute...

The vulnerability of the uploadMib function in the network monitoring software OpManager, OpManager MSP, OpManager Plus, Network Configuration Manager, OpUtils, and the network traffic analyzer NetFlow Analyzer allows a hacker to execute arbitrary code.

The vulnerability of the uploadMib function in network monitoring software such as OpManager, OpManager MSP, OpManager Plus, Network Configuration Manager, OpUtils, and the network traffic analyzer NetFlow Analyzer is related to incorrect restrictions on the path name to the restricted directory...

The vulnerability of the ConnectWise ScreenConnect remote access software lies in the incorrect restriction on the path name to the restricted directory. This allows a perpetrator to execute arbitrary code.

The vulnerability of the ConnectWise ScreenConnect remote access software lies in improper restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...