Path traversal vulnerability in CLI commands

...

CVE-2024-32116: Relative Path Traversal

Multiple relative path traversal vulnerabilities CWE-23 in Fortinet FortiManager version 7.4.0 through 7.4.2 and before 7.2.5, FortiAnalyzer version 7.4.0 through 7.4.2 and before 7.2.5 and FortiAnalyzer-BigData version 7.4.0 and before 7.2.7 allows a privileged attacker to delete files from the...

PT-2024-10309 · Fortinet · Fortirecorder

Name of the Vulnerable Software and Affected Versions: FortiRecorder versions 7.2.0 through 7.2.1 FortiRecorder versions prior to 7.0.4 Description: The issue is related to a relative path traversal in the graphical user interface of the FortiRecorder device's firmware, which is caused by errors ...

The vulnerability of the CI/CD application integration and delivery system provided by JetBrains TeamCity lies in errors in processing the relative path to the directory. This allows attackers to write backup files to arbitrary directories.

The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows a malicious actor to write backup files to arbitrary directories...

CVE-2024-50453

CVE-2024-50453 is a Relative Path Traversal vulnerability in the WordPress plugin family The Pack Elementor addons. Affected versions are listed as from n/a through 2.0.9. The underlying issue enables PHP Local File Inclusion, which could allow an attacker to access restricted files on the server...

CVE-2024-50453: Relative Path Traversal

Relative Path Traversal vulnerability in webangon The Pack Elementor addons the-pack-addon allows PHP Local File Inclusion.This issue affects The Pack Elementor addons: from n/a through = 2.0.9...

CVE-2024-49253

Relative Path Traversal vulnerability in JamesPark.ninja Analyse Uploads analyse-uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through = 0.5...

CVE-2024-49253 WordPress Analyse Uploads plugin <= 0.5 - Arbitrary File Deletion vulnerability

Relative Path Traversal vulnerability in JamesPark.ninja Analyse Uploads analyse-uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through = 0.5...

CVE-2024-49253 WordPress Analyse Uploads plugin <= 0.5 - Arbitrary File Deletion vulnerability

Relative Path Traversal vulnerability in JamesPark.ninja Analyse Uploads analyse-uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through = 0.5...

CVE-2024-49253: Relative Path Traversal

Relative Path Traversal vulnerability in JamesPark.ninja Analyse Uploads analyse-uploads allows Relative Path Traversal.This issue affects Analyse Uploads: from n/a through = 0.5...

PT-2024-33391 · Unknown · James Park Analyse Uploads

Name of the Vulnerable Software and Affected Versions: James Park Analyse Uploads versions 0.5 and earlier Description: A Relative Path Traversal issue affects James Park Analyse Uploads, allowing unauthorized access to files. The issue is related to the Analyse Uploads component. Recommendations...

WordPress plugin Analyse Uploads 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability...

CVE-2024-9983: Relative Path Traversal

Enterprise Cloud Database from Ragic does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files...

CVE-2024-9922: Relative Path Traversal

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing unauthenticated remote attackers to exploit this vulnerability to read arbitrary system files...

CVE-2024-9923: Relative Path Traversal

The Team+ from TEAMPLUS TECHNOLOGY does not properly validate a specific page parameter, allowing remote attackers with administrator privileges to move arbitrary system files to the website root directory and access them...

CVE-2024-45731: Relative Path Traversal

In Splunk Enterprise for Windows versions below 9.3.1, 9.2.3, and 9.1.6, a low-privileged user that does not hold the "admin" or "power" Splunk roles could write a file to the Windows system root directory, which has a default location in the Windows System32 folder, when Splunk Enterprise for...

Relative Path Traversal

Overview lollms is a python library for AI personality definition Affected versions of this package are vulnerable to Relative Path Traversal due to improper sanitization of the personalityfolder parameter. An attacker can read any folder in the personalityfolder on the victim's computer by...

CVE-2024-43614

Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally...

CVE-2024-43614: Relative Path Traversal

Relative path traversal in Microsoft Defender for Endpoint allows an authorized attacker to perform spoofing locally...

CVE-2024-20449: Relative Path Traversal

A vulnerability in Cisco Nexus Dashboard Fabric Controller NDFC could allow an authenticated, remote attacker with low privileges to execute arbitrary code on an affected device. This vulnerability is due to improper path validation. An attacker could exploit this vulnerability by using the Secur...