651 matches found
CVE-2024-41695 Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory
Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory...
CVE-2024-37464 WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.5 - Local File Inclusion vulnerability
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPZOOM Beaver Builder Addons by WPZOOM allows Path Traversal.This issue affects Beaver Builder Addons by WPZOOM: from n/a through 1.3.5...
CVE-2024-37419
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Codeless Cowidgets – Elementor Addons allows Path Traversal.This issue affects Cowidgets – Elementor Addons: from n/a through 1.1.1...
WordPress plugin JetThemeCore path traversal vulnerability
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...
The vulnerability of the Apache OFBiz resource planning software lies in the incorrect restriction of the path name to the restricted directory. This allows a perpetrator to execute arbitrary code.
The vulnerability of the Apache OFBiz resource planning software lies in incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
UBUNTU-CVE-2024-32111
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...
CVE-2024-37231
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through 9.9...
CAREL Boss-Mini
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : CAREL Equipment : Boss-Mini Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...
The vulnerability of the SolarWinds Serv-U File Server file server arises from incorrect path restrictions for the restricted access directory, allowing attackers to gain read access to files on the server.
The vulnerability of the SolarWinds Serv-U File Server file server is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain read access to files on the server remotely...
The vulnerability of the package manager for Kubernetes Helm, related to incorrect path name restrictions for restricted access directories, allows a malicious actor to save Helm Charts outside of the expected directory.
The vulnerability of the package manager for Kubernetes Helm is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to store a Helm Chart outside of the expected directory...
CVE-2024-37037
CWE-22: Improper Limitation of a Pathname to a Restricted Directory ‘Path Traversal’ vulnerability exists that could allow an authenticated user with access to the device’s web interface to corrupt files and impact device functionality when sending a crafted HTTP request...
CVE-2024-35743
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Siteclean SC filechecker allows Path Traversal, File Manipulation.This issue affects SC filechecker: from n/a through 0.6...
CVE-2024-35744
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ravidhu Dissanayake Upunzipper allows Path Traversal, File Manipulation.This issue affects Upunzipper: from n/a through 1.0.0...
The vulnerability of the download_model_with_test_data() function in the software library for building deep learning neural networks, Open Neural Network Exchange (ONNX), allows a hacker to execute arbitrary code.
The vulnerability of the downloadmodelwithtestdata function in the software library for building deep learning neural networks, Open Neural Network Exchange ONNX, is related to an incorrect path name limitation for accessing restricted directories. Exploiting this vulnerability could allow a...
The vulnerability of the getAllFolderContents() function in the web application of the Common Service Desktop of the ultrasonic diagnostic system GE HealthCare allows a malicious individual to gain unauthorized access to protected information.
The vulnerability of the getAllFolderContents function in the GE HealthCare ultrasonic diagnostic system’s web application is related to an incorrect restriction on the path to the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...
Sharp MFP Security Vulnerability
Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that stems from a failure to properly neutralize a special element in a pathname that could cause the pathname to resolve to a location outside of a restricted directory, making it...
ROS-20240527-04
A vulnerability in the Git distributed version control system exists due to a process control issue. Exploitation of the vulnerability could allow an attacker to execute arbitrary code when cloning specially crafted local repositories A vulnerability in the Git distributed version control system ...
The vulnerability of the distributed Git version control system arises from an incorrect limitation on the path name for the restricted access directory. This allows a violator to circumvent protection during the cloning of unreliable repositories.
The vulnerability of the distributed Git version control system is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a perpetrator to bypass protections during the cloning of unreliable repositories...
The vulnerability of the distributed Git version control system arises from an incorrect limitation on the path name for the restricted access directory, allowing a violator to execute arbitrary code.
The vulnerability of the distributed Git version control system is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
CVE-2023-46197
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in supsystic.Com Popup by Supsystic allows Relative Path Traversal.This issue affects Popup by Supsystic: from n/a through 1.10.19...