The vulnerability of the library for working with the DICOM format in DCMT allows attackers to access confidential data, compromise its integrity, and cause service failures. This vulnerability is related to deficiencies in pathname restrictions for the catalog, which enable attackers to gain access to sensitive information.

The vulnerability of the library for working with the DICOM format in DCMT is related to deficiencies in pathname restrictions for accessing the catalog. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...

CVE-2023-35069

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bullwark allows Path Traversal.This issue affects Bullwark: before BLW-2016E-960H...

CVE-2023-35069

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Bullwark allows Path Traversal. This issue affects Bullwark: before BLW-2016E-960H...

CVE-2023-37960: Improper Limitation of a Pathname to a Restricted Directory

Jenkins MathWorks Polyspace Plugin 1.0.5 and earlier allows attackers with Item/Configure permission to send emails with arbitrary files from the Jenkins controller file systems...

SUSE SLES15: hub-xmlrpc-api / inter-server-sync / locale-formula / etc (SUSE-SU-2022:3878-1)

The remote SUSE Linux SLES15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3878-1 advisory. hub-xmlrpc-api: - Use golangAPI = 1.18 for building on SUSE bsc1203599 This source fails to build with the current go1.19 on SUSE and we need t...

CVE-2023-3330

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a...

CVE-2023-3331

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a...

Design/Logic Flaw

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a...

Design/Logic Flaw

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a...

CVE-2023-3331

CVE-2023-3331 concerns NEC Aterm devices (WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N, WR8170N) where “Improper Limitation of a Pathname to a Restricted Directory” allows an attacker to dele...

CVE-2023-3331

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a...

PT-2023-24281 · Nec · Aterm Wg1800Hp +15

Name of the Vulnerable Software and Affected Versions: NEC Corporation Aterm WG2600HP2 versions all NEC Corporation Aterm WG2600HP versions all NEC Corporation Aterm WG2200HP versions all NEC Corporation Aterm WG1800HP2 versions all NEC Corporation Aterm WG1800HP versions all NEC Corporation Ater...

CVE-2023-3331: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory vulnerability in NEC Corporation Aterm Aterm WG2600HP2, WG2600HP, WG2200HP, WG1800HP2, WG1800HP, WG1400HP, WG600HP, WG300HP, WF300HP, WR9500N, WR9300N, WR8750N, WR8700N, WR8600N, WR8370N, WR8175N and WR8170N all versions allows a...

PrestaShop Winbiz Payment Improper Limitation

Exploit Title: PrestaShop Winbiz Payment module - Improper Limitation of a Pathname to a Restricted Directory Date: 2023-06-20 Dork: /modules/winbizpayment/downloads/download.php country: Iran Exploit Author: Amirhossein Bahramizadeh Category : webapps Vendor Homepage:...

PrestaShop Winbiz Payment module - Improper Limitation of a Pathname to a Restricted Directory

Exploit Title: PrestaShop Winbiz Payment module - Improper Limitation of a Pathname to a Restricted Directory Date: 2023-06-20 Dork: /modules/winbizpayment/downloads/download.php country: Iran Exploit Author: Amirhossein Bahramizadeh Category : webapps Vendor Homepage:...

CVE-2023-2270: Improper Limitation of a Pathname to a Restricted Directory

The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start various services and execute commands. The connection handling function of Netskope client before R100 in this service utilized a relative path to download and unzip configuration fil...

CVE-2023-34345: Improper Limitation of a Pathname to a Restricted Directory

AMI BMC contains a vulnerability in the SPX REST API, where an attacker with the required privileges can access arbitrary files, which may lead to information disclosure...

CVE-2023-30198: Improper Limitation of a Pathname to a Restricted Directory

Prestashop winbizpayment = 1.0.2 is vulnerable to Incorrect Access Control via modules/winbizpayment/downloads/download.php...

PT-2023-22627 · Unknown +1 · Prestashop +1

Name of the Vulnerable Software and Affected Versions: King-Avis versions prior to 17.3.15 Description: The issue is related to Improper Limitation of a Pathname, leading to a Path Traversal vulnerability in the King-Avis module for Prestashop. This allows a user with knowledge of the download...

CVE-2023-30196: Improper Limitation of a Pathname to a Restricted Directory

Prestashop salesbooster = 1.10.4 is vulnerable to Incorrect Access Control via modules/salesbooster/downloads/download.php...