PT-2024-5114 · Solarwinds · Solarwinds Access Rights Manager

Name of the Vulnerable Software and Affected Versions: SolarWinds Access Rights Manager affected versions not specified Description: The issue is related to the deleteTransferFile method in SolarWinds Access Rights Manager, which is vulnerable due to incorrect restriction of the directory path na...

Path traversal

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Arne Franken All In One Favicon.This issue affects All In One Favicon: from n/a through 4.7...

The vulnerability of the ConnectWise ScreenConnect remote access software lies in the incorrect restriction on the path name to the restricted directory. This allows a perpetrator to execute arbitrary code.

The vulnerability of the ConnectWise ScreenConnect remote access software lies in improper restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

CVE-2024-1708 Improper limitation of a pathname to a restricted directory (“path traversal”)

ConnectWise ScreenConnect 23.9.7 and prior are affected by path-traversal vulnerability, which may allow an attacker the ability to execute remote code or directly impact confidential data or critical systems...

The vulnerability of the software for centralized control of printing devices, Kyocera Device Manager, arises from incorrect restrictions on the path to the restricted access catalog. This allows attackers to bypass the authentication process.

The vulnerability of the Kyocera Device Manager software for centralized control of printing devices is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to bypass the authentication process remotely...

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services arises from incorrect restrictions on the path to the restricted access directory. This allows attackers to gain unauthorized access to confidential information.

The vulnerability of the Zoho ManageEngine ADManager Plus software for managing Active Directory services is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to confidential...

The vulnerability of the Git-based software platform for collaborative code development on GitLab arises from an incorrect limitation on the path name for the restricted access directory. This allows a malicious user to write files to arbitrary locations on the server when creating a working area.

The vulnerability of the Git-based software platform for collaborative code development on GitLab is related to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability allows a malicious actor to perform file writing operations at arbitrary locations o...

CVE-2024-0402 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLab

An issue has been discovered in GitLab CE/EE affecting all versions from 16.0 prior to 16.6.6, 16.7 prior to 16.7.4, and 16.8 prior to 16.8.1 which allows an authenticated user to write files to arbitrary locations on the GitLab server while creating a workspace...

CVE-2023-45722

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...

CVE-2023-45722

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...

CVE-2023-45722 Path Traversal Arbitrary File Read affects DRYiCE MyXalytics

HCL DRYiCE MyXalytics is impacted by path traversal arbitrary file read vulnerability because it uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory. The product does not properly neutralize special...

HCL Technologies DRYiCE MyXalytics Path Traversal Vulnerability

HCL Technologies DRYiCE MyXalytics is a unified reporting and dashboard product from HCL Technologies, USA. A security vulnerability exists in HCL Technologies DRYiCE MyXalytics that stems from an inability to properly neutralize special elements in a pathname that could cause the pathname to...

PT-2024-13277 · Hcl · Hcl Dryice Myxalytics

Name of the Vulnerable Software and Affected Versions: HCL DRYiCE MyXalytics affected versions not specified Description: The issue is related to a path traversal arbitrary file read vulnerability. It occurs because the product uses external input to construct a pathname intended to identify a fi...

PT-2023-32559

Name of the Vulnerable Software and Affected Versions İzmir Katip Çelebi University University Information Management System versions prior to 30.11.2023 Description The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as 'Path Traversal', which allow...

Directory Traversal

mlflow is vulnerable to Directory Traversal. The vulnerability exists in the validatepathissafe function within uri.py which allows an attacker to read or write to files outside of the restricted directory using a crafted file path...

CVE-2023-6407

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file deletion upon service restart when accessed by a local and low-privileged attacker...

CVE-2023-6407

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause arbitrary file deletion upon service restart when accessed by a local and low-privileged attacker...

The vulnerability of the Trend Micro Mobile Security software for mobile devices lies in its improper path name limitation for the restricted access directory, which allows a hacker to delete any files they want.

The vulnerability of the Trend Micro Mobile Security software relates to an incorrect restriction on the path to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files...

PT-2023-32210 · Tacc · Tacc Epo Extension

Name of the Vulnerable Software and Affected Versions: TACC ePO extension versions prior to 8.4.0 Description: The issue is related to an improper limitation of a path name to a restricted directory, which could allow an authorized administrator attacker to execute arbitrary code by uploading a...

The vulnerability of the Java library for supporting SSH protocols, Apache SSHD, arises due to an incorrect pathname limitation for the restricted access directory. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the Java library for supporting SSH protocols, Apache SSHD, is related to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...