CVE-2021-31538

CVE-2021-31538 affects LANCOM R&S Unified Firewall (UF) devices running LCOS FX 10.5. The vulnerability is a Relative Path Traversal in LCOS FX 10.5 where input is not properly filtered for path traversal sequences, potentially allowing access outside of restricted directories. Affected product f...

CVE-2021-31538: Improper Limitation of a Pathname to a Restricted Directory

LANCOM R&S Unified Firewall UF devices running LCOS FX 10.5 allow Relative Path Traversal...

PT-2021-19411

Name of the Vulnerable Software and Affected Versions LANCOM R&S Unified Firewall UF devices version 10.5 Description The issue allows Relative Path Traversal. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue...

CVE-2021-28798

A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.2.1630 Build 202104...

CVE-2021-28798: Improper Access Control

A relative path traversal vulnerability has been reported to affect QNAP NAS running QTS and QuTS hero. If exploited, this vulnerability allows attackers to modify files that impact system integrity. QNAP have already fixed this vulnerability in the following versions: QTS 4.5.2.1630 Build 202104...

QNAP NAS 安全漏洞

A security vulnerability exists in QNAP NAS that stems from a relative path traversal vulnerability that can be exploited by an attacker to modify files affecting the integrity of the system.QNAP has fixed this vulnerability in the following versions:QTS 4.5.2.1630 Build 20210406 and later QTS...

CVE-2021-29488: Relative Path Traversal

SABnzbd is an open source binary newsreader. A vulnerability was discovered in SABnzbd that could trick the filesystem.renamer function into writing downloaded files outside the configured Download Folder via malicious PAR2 files. A patch was released as part of SABnzbd 3.2.1RC1. As a workaround,...

PT-2021-2813 · Fortinet · Fortiwan

Name of the Vulnerable Software and Affected Versions: FortiWAN versions 4.5.7 and below FortiWAN version 4.4 and all versions below Description: The issue is related to a relative path traversal vulnerability that can be exploited by a remote attacker to impact the confidentiality, integrity, an...

Authentication bypass in FortiWAN

A relative path traversal vulnerability CWE-23 in FortiWAN may allow a remote non-authenticated attacker to delete files on the system by sending a crafted POST request. In particular, deleting specific configuration files will reset the Admin password to its default value...

CVE-2021-29474

HedgeDoc formerly known as CodiMD is an open-source collaborative markdown editor. An attacker can read arbitrary .md files from the server's filesystem due to an improper input validation, which results in the ability to perform a relative path traversal. To verify if you are affected, you can t...

CVE-2021-29474

CVE-2021-29474 affects HedgeDoc (CodiMD). The vulnerability allows a relative path traversal via an improper input validation in the note creation flow: an URL-encoded alias is passed through the router into noteController.showNote, then into findNote/parseNoteId, ultimately using a possibly unva...

CVE-2021-29474

HedgeDoc formerly known as CodiMD is an open-source collaborative markdown editor. An attacker can read arbitrary .md files from the server's filesystem due to an improper input validation, which results in the ability to perform a relative path traversal. To verify if you are affected, you can t...

CVE-2021-29474 Relative Path Traversal Attack on note creation

HedgeDoc formerly known as CodiMD is an open-source collaborative markdown editor. An attacker can read arbitrary .md files from the server's filesystem due to an improper input validation, which results in the ability to perform a relative path traversal. To verify if you are affected, you can t...

CVE-2021-29474: Improper Input Validation

HedgeDoc formerly known as CodiMD is an open-source collaborative markdown editor. An attacker can read arbitrary .md files from the server's filesystem due to an improper input validation, which results in the ability to perform a relative path traversal. To verify if you are affected, you can t...

CVE-2020-7861: Relative Path Traversal

AnySupport Remote support solution before 2019.3.21.0 allows directory traversing because of swprintf function to copy file from a management PC to a client PC. This can be lead to arbitrary file execution...

Siemens and PKE Control Center Server

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely/low attack complexity Vendors: Siemens/PKE Equipment: Control Center Server CCS Vulnerabilities: Cleartext Storage of Sensitive Information in GUI, Improper Authentication, Relative Path Traversal, Use of a Broken or Risky...

CVE-2020-8570: Relative Path Traversal

Kubernetes Java client libraries in version 10.0.0 and versions prior to 9.0.1 allow writes to paths outside of the current directory when copying multiple files from a remote pod which sends a maliciously crafted archive. This can potentially overwrite any files on the system of the process...

CVE-2020-17518: Relative Path Traversal

Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP HEADER. The files can be written to any location accessible by Flink 1.5.1. All users should upgrade to Flink 1.11.3 or...

CVE-2020-5803: Improper Limitation of a Pathname to a Restricted Directory

Relative Path Traversal in Marvell QConvergeConsole GUI 5.5.0.74 allows a remote, authenticated attacker to delete arbitrary files on disk as SYSTEM or root...

PT-2020-18723

Name of the Vulnerable Software and Affected Versions Marvell QConvergeConsole GUI version 5.5.0.74 Description The issue allows a remote, authenticated attacker to delete arbitrary files on disk with elevated privileges, either as SYSTEM or root, due to a Relative Path Traversal vulnerability in...