1725 matches found
CVE-2023-43825: Improper Limitation of a Pathname to a Restricted Directory
Relative path traversal vulnerability in Shihonkanri Plus Ver9.0.3 and earlier allows a local attacker to execute an arbitrary code by having a legitimate user import a specially crafted backup file of the product...
CVE-2015-5467
web\ViewAction in Yii aka Yii2 2.x before 2.0.5 allows attackers to execute any local .php file via a relative path in the view parameeter...
CVE-2023-42456: Relative Path Traversal
Sudo-rs, a memory safe implementation of sudo and su, allows users to not have to enter authentication at every sudo attempt, but instead only requiring authentication every once in a while in every terminal or process group. Only once a configurable timeout has passed will the user have to...
CVE-2015-5467: Improper Limitation of a Pathname to a Restricted Directory
web\ViewAction in Yii aka Yii2 2.x before 2.0.5 allows attackers to execute any local .php file via a relative path in the view parameeter...
Path Traversal
cecil/cecil vulnerable to Relative Path Traversal. The vulnerability is caused by a lack of additional checks when verifying a file is within an expected location, which can lead to the access of files outside of the document root...
CVE-2021-28485
In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...
CVE-2021-28485: Improper Limitation of a Pathname to a Restricted Directory
In Ericsson Mobile Switching Center Server MSC-S before IS 3.1 CP22, the SIS web application allows relative path traversal via a specific parameter in the https request after authentication, which allows access to files on the system that are not intended to be accessible via the web application...
CVE-2021-28485
CVE-2021-28485 affects Ericsson MSC-S (Mobile Switching Center Server) via the SIS web application. The issue is a relative path traversal in an authenticated context, triggered by a specific parameter in HTTPS requests, enabling access to system files not intended for web access. Documented affe...
CVE-2023-4914
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
Path traversal
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4914
CVE-2023-4914 is a Relative Path Traversal vulnerability in the Cecil project (cecilapp/cecil) prior to version 7.47.1. The initial and connected sources consistently describe the issue as path traversal, but do not provide explicit root-cause details in these documents. Affected software/version...
CVE-2023-4914 Relative Path Traversal in cecilapp/cecil
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4914 Relative Path Traversal in cecilapp/cecil
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4914: Relative Path Traversal
Relative Path Traversal in GitHub repository cecilapp/cecil prior to 7.47.1...
CVE-2023-4897
CVE-2023-4897 describes a Relative Path Traversal in mintplex-labs/anything-llm prior to 0.0.1. The vulnerability stems from insufficient validation of the filename parameter in the data-exports endpoint, allowing a crafted request to traverse directories and access sensitive local files as demon...
CVE-2023-4897: Relative Path Traversal
Relative Path Traversal in GitHub repository mintplex-labs/anything-llm prior to 0.0.1...
PT-2023-31022 · Unknown · Anything-Llm
Name of the Vulnerable Software and Affected Versions: anything-llm versions prior to 0.0.1 Description: The issue is related to Relative Path Traversal in the GitHub repository mintplex-labs/anything-llm. Recommendations: For versions prior to 0.0.1, update to version 0.0.1 or later to resolve t...
AnythingLLM Security Vulnerability
AnythingLLM is a business-compliant document chatbot. A security vulnerability exists in versions of AnythingLLM prior to 0.0.1 that stems from the presence of relative path traversal...
CVE-2023-31167: Improper Limitation of a Pathname to a Restricted Directory
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Schweitzer Engineering Laboratories SEL-5036 acSELerator Bay Screen Builder Software on Windows allows Relative Path Traversal. SEL acSELerator Bay Screen Builder software is distributed by SEL-5033 SEL...