Lucene search
+L

651 matches found

Cvelist
Cvelist
added 2024/07/30 9:02 a.m.23 views

CVE-2024-41695 Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory

Cybonet - CWE-22: Improper Limitation of a Pathname to a Restricted Directory...

7.5CVSS0.0055EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/07/09 11:45 a.m.31 views

CVE-2024-37464 WordPress Beaver Builder Addons by WPZOOM plugin <= 1.3.5 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in WPZOOM Beaver Builder Addons by WPZOOM allows Path Traversal.This issue affects Beaver Builder Addons by WPZOOM: from n/a through 1.3.5...

4.9CVSS0.00864EPSS
SaveExploits0References1
OSV
OSV
added 2024/07/09 11:15 a.m.10 views

CVE-2024-37419

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Codeless Cowidgets – Elementor Addons allows Path Traversal.This issue affects Cowidgets – Elementor Addons: from n/a through 1.1.1...

8.8CVSS5.8AI score0.00604EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/07/09 12:00 a.m.9 views

WordPress plugin JetThemeCore path traversal vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

7.7CVSS6.8AI score0.00676EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2024/07/02 12:00 a.m.13 views

The vulnerability of the Apache OFBiz resource planning software lies in the incorrect restriction of the path name to the restricted directory. This allows a perpetrator to execute arbitrary code.

The vulnerability of the Apache OFBiz resource planning software lies in incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8AI score0.87415EPSS
SaveExploits3References8Affected Software1
OSV
OSV
added 2024/06/25 2:15 p.m.5 views

UBUNTU-CVE-2024-32111

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Automattic WordPress allows Relative Path Traversal.This issue affects WordPress: from 6.5 through 6.5.4, from 6.4 through 6.4.4, from 6.3 through 6.3.4, from 6.2 through 6.2.5, from 6.1 through 6.1.6,...

5CVSS5.8AI score0.00478EPSS
SaveExploits0References4
OSV
OSV
added 2024/06/24 1:15 p.m.7 views

CVE-2024-37231

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Salon Booking System Salon booking system allows File Manipulation.This issue affects Salon booking system: from n/a through 9.9...

9.1CVSS5.8AI score0.00581EPSS
SaveExploits0References1
ICS
ICS
added 2024/06/20 6:00 a.m.37 views

CAREL Boss-Mini

View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION : Exploitable remotely/low attack complexity/public exploits are available Vendor : CAREL Equipment : Boss-Mini Vulnerability : Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to...

9.8CVSS9.1AI score0.75363EPSS
SaveExploits6References10
BDU FSTEC
BDU FSTEC
added 2024/06/18 12:00 a.m.16 views

The vulnerability of the SolarWinds Serv-U File Server file server arises from incorrect path restrictions for the restricted access directory, allowing attackers to gain read access to files on the server.

The vulnerability of the SolarWinds Serv-U File Server file server is related to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain read access to files on the server remotely...

8.6CVSS5.9AI score0.99614EPSS
SaveExploits8References4
BDU FSTEC
BDU FSTEC
added 2024/06/14 12:00 a.m.14 views

The vulnerability of the package manager for Kubernetes Helm, related to incorrect path name restrictions for restricted access directories, allows a malicious actor to save Helm Charts outside of the expected directory.

The vulnerability of the package manager for Kubernetes Helm is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to store a Helm Chart outside of the expected directory...

6.4CVSS6.8AI score0.00572EPSS
SaveExploits0References3Affected Software1
OSV
OSV
added 2024/06/12 5:15 p.m.7 views

CVE-2024-37037

CWE-22: Improper Limitation of a Pathname to a Restricted Directory ‘Path Traversal’ vulnerability exists that could allow an authenticated user with access to the device’s web interface to corrupt files and impact device functionality when sending a crafted HTTP request...

8.1CVSS5.8AI score0.01025EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/10 5:16 p.m.23 views

CVE-2024-35743

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Siteclean SC filechecker allows Path Traversal, File Manipulation.This issue affects SC filechecker: from n/a through 0.6...

8.6CVSS0.00605EPSS
SaveExploits0References1
NVD
NVD
added 2024/06/10 5:16 p.m.28 views

CVE-2024-35744

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Ravidhu Dissanayake Upunzipper allows Path Traversal, File Manipulation.This issue affects Upunzipper: from n/a through 1.0.0...

8.6CVSS0.00605EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2024/06/07 12:00 a.m.11 views

The vulnerability of the download_model_with_test_data() function in the software library for building deep learning neural networks, Open Neural Network Exchange (ONNX), allows a hacker to execute arbitrary code.

The vulnerability of the downloadmodelwithtestdata function in the software library for building deep learning neural networks, Open Neural Network Exchange ONNX, is related to an incorrect path name limitation for accessing restricted directories. Exploiting this vulnerability could allow a...

10CVSS8.1AI score0.01178EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2024/06/03 12:00 a.m.9 views

The vulnerability of the getAllFolderContents() function in the web application of the Common Service Desktop of the ultrasonic diagnostic system GE HealthCare allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the getAllFolderContents function in the GE HealthCare ultrasonic diagnostic system’s web application is related to an incorrect restriction on the path to the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

7.7CVSS5.8AI score0.00283EPSS
SaveExploits0References4Affected Software21
CNNVD
CNNVD
added 2024/05/31 12:00 a.m.13 views

Sharp MFP Security Vulnerability

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that stems from a failure to properly neutralize a special element in a pathname that could cause the pathname to resolve to a location outside of a restricted directory, making it...

7.5CVSS6.8AI score0.06175EPSS
SaveExploits1References8
Redos
Redos
added 2024/05/27 12:00 a.m.37 views

ROS-20240527-04

A vulnerability in the Git distributed version control system exists due to a process control issue. Exploitation of the vulnerability could allow an attacker to execute arbitrary code when cloning specially crafted local repositories A vulnerability in the Git distributed version control system ...

8.1CVSS7.9AI score0.01351EPSS
SaveExploits2
BDU FSTEC
BDU FSTEC
added 2024/05/24 12:00 a.m.9 views

The vulnerability of the distributed Git version control system arises from an incorrect limitation on the path name for the restricted access directory. This allows a violator to circumvent protection during the cloning of unreliable repositories.

The vulnerability of the distributed Git version control system is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a perpetrator to bypass protections during the cloning of unreliable repositories...

7.3CVSS7.4AI score0.01026EPSS
SaveExploits0References17Affected Software11
BDU FSTEC
BDU FSTEC
added 2024/05/20 12:00 a.m.8 views

The vulnerability of the distributed Git version control system arises from an incorrect limitation on the path name for the restricted access directory, allowing a violator to execute arbitrary code.

The vulnerability of the distributed Git version control system is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...

9CVSS7.8AI score0.29234EPSS
SaveExploits32References11Affected Software5
NVD
NVD
added 2024/05/17 9:15 a.m.23 views

CVE-2023-46197

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in supsystic.Com Popup by Supsystic allows Relative Path Traversal.This issue affects Popup by Supsystic: from n/a through 1.10.19...

6.5CVSS8.7AI score0.01267EPSS
SaveExploits1References1
Rows per page
Query Builder