1718 matches found
Zoom Client 路径遍历漏洞
Zoom Client is a video conferencing client application from Zoom Inc. that supports multiple platforms. A security vulnerability exists in the Zoom Client SDK prior to version 5.15.0 that stems from relative path traversal. It could allow unauthorized users to achieve information disclosure via...
CVE-2023-34117: Relative Path Traversal
Relative path traversal in the Zoom Client SDK before version 5.15.0 may allow an unauthorized user to enable information disclosure via local access...
The vulnerability of the eXchange Layer component in the application development environment for programmable logic controllers ISaGRAF Runtime Rockwell Automation allows a hacker to execute arbitrary code.
The vulnerability of the eXchange Layer component in the application development environment for ISaGRAF Runtime Rockwell Automation relates to errors in processing the relative path to the restricted-access directory. Exploiting this vulnerability may allow a remote attacker to execute arbitrary...
CVE-2023-2270 Local privilege escalation
The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start various services and execute commands. The connection handling function of Netskope client before R100 in this service utilized a relative path to download and unzip configuration fil...
CVE-2023-2270 Local privilege escalation
The Netskope client service running with NT\SYSTEM privileges accepts network connections from localhost to start various services and execute commands. The connection handling function of Netskope client before R100 in this service utilized a relative path to download and unzip configuration fil...
PT-2023-18643 · Netskope · Netskope Client
Name of the Vulnerable Software and Affected Versions: Netskope client versions prior to R100 Description: The Netskope client service, running with NTSYSTEM privileges, accepts network connections from localhost to start various services and execute commands. A connection handling function in th...
CVE-2022-42474
A relative path traversal vulnerability CWE-23 in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged...
CVE-2022-42474
CVE-2022-42474 is a path traversal vulnerability in Fortinet FortiOS (7.2.0–7.2.3, 7.0.0–7.0.9, and earlier 6.4.12), FortiProxy (7.2.0–7.2.1, 7.0.0–7.0.7), and FortiSwitchManager (7.2.0–7.2.1, before 7.0.1). The issue allows a privileged attacker to delete arbitrary directories in the filesystem ...
CVE-2022-42474: Relative Path Traversal
A relative path traversal vulnerability CWE-23 in Fortinet FortiOS version 7.2.0 through 7.2.3, version 7.0.0 through 7.0.9 and before 6.4.12, FortiProxy version 7.2.0 through 7.2.1 and 7.0.0 through 7.0.7, FortiSwitchManager version 7.2.0 through 7.2.1 and before 7.0.1 allows an privileged...
The vulnerability in the J-Web web interface of Juniper Networks’ Junos operating system, which allows a hacker to upload arbitrary files.
The vulnerability of the J-Web web interface of Juniper Networks’ Junos operating system relates to the exploitation of a relative path. Exploiting this vulnerability allows a malicious actor to upload arbitrary files remotely...
CVE-2023-33144: Relative Path Traversal
Visual Studio Code Spoofing Vulnerability...
PT-2023-3234 · Fortinet · Fortiproxy +2
Name of the Vulnerable Software and Affected Versions: FortiOS versions 6.4.12 and earlier, 7.0.0 through 7.0.9 FortiOS versions 7.2.0 through 7.2.3 FortiProxy versions 7.0.0 through 7.0.7 FortiProxy versions 7.2.0 through 7.2.1 FortiSwitchManager versions 7.0.0 through 7.0.1 and earlier...
CVE-2023-27993
A relative path traversal CWE-23 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands...
CVE-2023-27993
A relative path traversal CWE-23 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands...
CVE-2023-27993
A relative path traversal CWE-23 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands...
CVE-2023-27993
Summary: CVE-2023-27993 is a Fortinet FortiADC vulnerability describing a relative path traversal (CWE-23) that could let a privileged attacker delete arbitrary directories via crafted CLI commands. Affected software: FortiADC versions 7.2.0 and prior to 7.1.1. Root cause / impact: Presence of a ...
CVE-2023-27993: Relative Path Traversal
A relative path traversal CWE-23 in Fortinet FortiADC version 7.2.0 and before 7.1.1 allows a privileged attacker to delete arbitrary directories from the underlying file system via crafted CLI commands...
GHSA-X422-6QHV-P29G Relative path traversal in mlflow
Relative Path Traversal in GitHub repository mlflow/mlflow prior to 2.3.1...
