CVE-2020-25617

SolarWinds N-Central 12.3.0.670 contains a relative path traversal flaw in the AdvancedScripts HTTP endpoint . An authenticated user can exploit this to execute OS commands as root via the NAC interface, as described across multiple sources (NVD/Red Hat/CNVD listings). The root cause is path trav...

PT-2020-16129

Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670 Description An issue was discovered in SolarWinds N-Central, where the AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console NAC,...

CVE-2020-25617: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console NAC, leading to execution of OS commands as root...

CVE-2019-19287: Relative Path Traversal

A vulnerability has been identified in XHQ All Versions 6.1. The web interface could allow attackers to traverse through the file system of the server based by sending specially crafted packets over the network without authentication...

Siemens XHQ 信息泄露漏洞

Siemens XHQ is a software platform that aggregates plant or pipeline operational data, processes it in a goal-oriented manner, and then makes decisions in real time to effectively improve plant or pipeline operational performance. A relative path traversal vulnerability exists in Siemens XHQ...

CVE-2020-8271: Relative Path Traversal

Unauthenticated remote code execution with root privileges in Citrix SD-WAN Center versions before 11.2.2, 11.1.2b and 10.2.8...

PT-2020-15995

Name of the Vulnerable Software and Affected Versions B. Braun OnlineSuite versions prior to AP 3.0 Description A relative path traversal attack allows unauthenticated attackers to upload or download arbitrary files. Recommendations For versions prior to AP 3.0, update to a version that fixes thi...

CVE-2020-25172: Relative Path Traversal

A relative path traversal attack in the B. Braun OnlineSuite Version AP 3.0 and earlier allows unauthenticated attackers to upload or download arbitrary files...

CVE-2020-8254: Relative Path Traversal

A vulnerability in the Pulse Secure Desktop Client 9.1R9 has Remote Code Execution RCE if users can be convinced to connect to a malicious server. This vulnerability only affects Windows PDC.To improve the security of connections between Pulse clients and Pulse Connect Secure, see below...

CVE-2019-17640: Relative Path Traversal

In Eclipse Vert.x 3.4.x up to 3.9.4, 4.0.0.milestone1, 4.0.0.milestone2, 4.0.0.milestone3, 4.0.0.milestone4, 4.0.0.milestone5, 4.0.0.Beta1, 4.0.0.Beta2, and 4.0.0.Beta3, StaticHandler doesn't correctly processes back slashes on Windows Operating systems, allowing, escape the webroot folder to the...

Rockwell Automation ISaGRAF5 Runtime (Update A)

1. EXECUTIVE SUMMARY CVSS v3 9.1 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: ISaGRAF5 Runtime Vulnerabilities: Use of Hard-coded Cryptographic Key, Unprotected Storage of Credentials, Relative Path Traversal, Uncontrolled Search Path Element,...

CVE-2020-1904: Relative Path Traversal

A path validation issue in WhatsApp for iOS prior to v2.20.61 and WhatsApp Business for iOS prior to v2.20.61 could have allowed for directory traversal overwriting files when sending specially crafted docx, xlsx, and pptx files as attachments to messages...

CVE-2020-5789

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to read the contents of arbitrary files on disk...

CVE-2020-5787

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action...

CVE-2020-5787

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action...

CVE-2020-5787

CVE-2020-5787 describes a Relative Path Traversal in Teltonika firmware TRB2_R_00.02.04.3. The vulnerability allows a remote, authenticated attacker to delete arbitrary files on the device’s disk via the admin/services/packages/remove action. Affected software: Teltonika firmware TRB2_R_00.02.04....

PT-2020-18710

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote, authenticated attacker to read the contents of arbitrary files on disk due to a Relative Path Traversal vulnerability in the firmware. Recommendations For...

CVE-2020-5787: Improper Limitation of a Pathname to a Restricted Directory

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/services/packages/remove action...

CVE-2020-5788: Improper Limitation of a Pathname to a Restricted Directory

Relative Path Traversal in Teltonika firmware TRB2R00.02.04.3 allows a remote, authenticated attacker to delete arbitrary files on disk via the admin/system/admin/certificates/delete action...

PT-2020-18708

Name of the Vulnerable Software and Affected Versions Teltonika firmware version TRB2 R 00.02.04.3 Description The issue allows a remote, authenticated attacker to delete arbitrary files on disk. This is achieved via the "admin/services/packages/remove" action, which is vulnerable to Relative Pat...