120 matches found
VulnCheck KEV: CVE-2017-11511
The ManageEngine ServiceDesk 9.3.9328 is vulnerable to arbitrary file downloads due to improper restrictions of the pathname used in the filepath parameter for the download-file URL. An unauthenticated remote attacker can use this vulnerability to download arbitrary files...
CVE-2024-21753
A improper limitation of a pathname to a restricted directory 'path traversal' in Fortinet FortiClientEMS versions 7.2.0 through 7.2.4, 7.0.0 through 7.0.13, 6.4.0 through 6.4.9, 6.2.0 through 6.2.9, 6.0.0 through 6.0.8, 1.2.1 through 1.2.5 allows attacker to perform a denial of service, read or...
CVE-2024-41695
Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory...
CVE-2024-37268
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in kaptinlin Striking allows Path Traversal.This issue affects Striking: from n/a through 2.3.4...
CVE-2024-3322 Path Traversal in parisneo/lollms-webui
A path traversal vulnerability exists in the 'cybersecurity/codeguard' native personality of the parisneo/lollms-webui, affecting versions up to 9.5. The vulnerability arises from the improper limitation of a pathname to a restricted directory in the 'processfolder' function within...
CVE-2024-34854: Improper Limitation of a Pathname to a Restricted Directory
F-logic DataCube3 v1.0 is vulnerable to File Upload via /admin/transceiverschedule.php...
VulnCheck KEV: CVE-2024-32703
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in reputeinfosystems ARForms arforms.This issue affects ARForms: from n/a through = 6.4...
The vulnerability of the Java library for supporting SSH protocols, Apache SSHD, arises due to an incorrect pathname limitation for the restricted access directory. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the Java library for supporting SSH protocols, Apache SSHD, is related to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
The vulnerability of the handleFileRequest function in the src/main/java/com/feihong/ldap/HTTPServer.java file, a tool for exploiting vulnerabilities in Java Naming and Directory Interface (JNDI) via JNDIExploit, is related to a flaw in the pathname restriction mechanism. This vulnerability allows an attacker to disclose sensitive information that should be protected.
The vulnerability of the handleFileRequest function in src/main/java/com/feihong/ldap/HTTPServer.java of the JNDI exploitation tool is related to vulnerabilities in pathname restrictions. Exploiting this vulnerability can allow an attacker to disclose sensitive information...
CVE-2023-41682
A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSandbox 4.4.0, FortiSandbox 4.2.1 through 4.2.5, FortiSandbox 4.0.0 through 4.0.3, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbo...
CVE-2023-42487
Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...
CVE-2023-35069
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bullwark allows Path Traversal.This issue affects Bullwark: before BLW-2016E-960H...
CVE-2023-3330
Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a...
CVE-2023-28833: Improper Limitation of a Pathname to a Restricted Directory
Nextcloud server is an open source home cloud implementation. In affected versions admins of a server were able to upload a logo or a favicon and to provided a file name which was not restricted and could overwrite files in the appdata directory. Administrators may have access to overwrite these...
Design/Logic Flaw
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Custom Reports that could cause a remote code execution when a victim tries to open a malicious report. Affected Products: IGSS Data ServerIGSSdataServer.exeV16.0.0.23040 and prior, IGSS...
Goutil 路径遍历漏洞
Goutil is a library of some tool functions commonly used by Go. A path traversal vulnerability exists in versions of Goutil prior to 0.6.0, which stems from an improper restriction of pathnames to restricted directories in the software...
CVE-2022-34271: Improper Limitation of a Pathname to a Restricted Directory
A vulnerability in import module of Apache Atlas allows an authenticated user to write to web server filesystem. This issue affects Apache Atlas versions from 0.8.4 to 2.2.0...
PT-2022-6420 · Adobe · Coldfusion
Name of the Vulnerable Software and Affected Versions: Adobe ColdFusion versions Update 14 and earlier Adobe ColdFusion versions Update 4 and earlier Description: The issue exists due to improper limitation of a pathname to a restricted directory, allowing a remote attacker to execute arbitrary...
The vulnerability of the QTS operating system, specifically the QuTS Hero operating system, is related to deficiencies in pathname restriction, which allows attackers to compromise the confidentiality of information.
The vulnerability of the QTS operating system is related to deficiencies in pathname restriction. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of information...
GHSA-JJQ8-VFJQ-J6V4 Improper Limitation of a Pathname to a Restricted Directory in Elasticsearch
Directory traversal vulnerability in Elasticsearch before 1.6.1 allows remote attackers to read arbitrary files via unspecified vectors related to snapshot API calls...