The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system allows a hacker to re-write files in the basic file system.

The vulnerability in the web interface for managing the Cisco Unity Connection integrated messaging system exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to re-write files in the...

CVE-2019-3696 pcp: Local privilege escalation from user pcp to root through migrate_tempdirs

A Improper Limitation of a Pathname to a Restricted Directory vulnerability in the packaging of pcp of SUSE Linux Enterprise High Performance Computing 15-ESPOS, SUSE Linux Enterprise High Performance Computing 15-LTSS, SUSE Linux Enterprise Module for Development Tools 15, SUSE Linux Enterprise...

The vulnerability of the AdminURLFieldWidget function in the Django web development framework relates to the lack of protective measures for website structure, allowing attackers to compromise data integrity.

The vulnerability of the AdminURLFieldWidget function in the Django web development framework is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise data integrity...

The vulnerability of the Samba package lies in the incorrect path limitation for the restricted access directory, allowing attackers to compromise the integrity and confidentiality of data.

The vulnerability of the Samba package is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity and confidentiality of data...

Directory Traversal Vulnerability in oyplus-cms

oyplus-cms Yue video is a PHP and MySQL based open source video background management system . The system has a video resource acquisition , user feedback management , automatic address resolution and message push management and other functions . A directory traversal vulnerability exists in...

Yarn path traversal vulnerability

Yarn is an open source package installation, management tools. A path traversal vulnerability exists in Yarn 1.21.1 and earlier versions. The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An attacker can...

OSSEC-HIDS Path Traversal Vulnerability

OSSEC-HIDS is an open source intrusion detection tool. OSSEC-HIDS suffers from a path traversal vulnerability. The vulnerability stems from a failure of a network system or product to properly filter for specific elements in a resource or file path. An attacker could exploit the vulnerability to...

The vulnerability of the Linux operating system’s kernel-based SMB client allows a hacker to manipulate files in the client’s directory.

The vulnerability of the Linux operating system’s kernel-based SMB client exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability allows a malicious actor to remotely manipulate files within the client’s directory...

GitLab path traversal vulnerability (CNVD-2020-01911)

GitLab is a Ruby on Rails-developed, self-hosted, Git version control system project repository application from the American company GitLab. The program can be used to access a project's file contents, commit history, bug lists, and more. A path traversal vulnerability exists in Gitlab Enterpris...

The vulnerability of the YARN NodeManager component in Apache Hadoop’s distributed development and execution platform allows attackers to circumvent existing security restrictions and introduce malicious code into a zip file.

The vulnerability of the YARN NodeManager component in Apache Hadoop distributed development and execution platforms exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions...

The vulnerability of the “/absolute/pathname/here” component of the McAfee Advanced Threat Defense security tool, which allows a perpetrator to gain access to files in the local file system.

The vulnerability of the “/absolute/pathname/here” component of the McAfee Advanced Threat Defense security tool exists due to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to...

http_server path traversal vulnerability (CNVD-2019-46974)

httpserver is an HTTP server utility class. A path traversal vulnerability exists in httpserver. The vulnerability stems from a failure of a network system or product to properly filter special elements in the path of a resource or file. An attacker could use this vulnerability to access location...

npm CLI path traversal vulnerability

The npm CLI is a package manager. A path traversal vulnerability exists in npm CLI versions prior to 6.13.3. The vulnerability stems from a failure of a networked system or product to properly filter for special elements in a resource or file path. An attacker could use this vulnerability to acce...

The vulnerability in the newsrc.c component of the NeoMutt email client allows a hacker to compromise the integrity of the protected information.

The vulnerability in the newsrc.c component of the NeoMutt email client exists due to an incorrect limitation on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to compromise the integrity of the protected information...

The vulnerability of the Advantech WebAccess remote monitoring software lies in the incorrect path name limitation for accessing the restricted directory. This allows a perpetrator to execute arbitrary code.

The vulnerability of the Advantech WebAccess remote monitoring software exists due to an incorrect path name limitation for accessing the restricted directory. Exploiting this vulnerability allows a malicious actor operating remotely to execute arbitrary code...

SibSoft Xfilesharing Directory Traversal Vulnerability

SibSoft Xfilesharing is a file sharing solution from the Russian company SibSoft. A directory traversal vulnerability exists in SibSoft Xfilesharing. The vulnerability stems from a failure of a networked system or product to properly filter for specific elements in a resource or file path. An...

FusionPBX Path Traversal Vulnerability

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A path traversal vulnerability exists in FusionPBX. An attacker could exploit this...

The vulnerability of the ColdFusion software platform, related to errors in restricting the path name of the restricted directory, allows a perpetrator to write any files into the device’s file system.

The vulnerability of the ColdFusion software platform is related to errors in restricting the path name of the restricted directory. Exploiting this vulnerability allows a malicious actor to write arbitrary files to the device’s file system remotely...

The vulnerability of the Cisco IOS XE operating system arises from errors in path name restrictions for restricted access directories, allowing attackers to execute arbitrary code on the Linux kernel.

The vulnerability of the Cisco IOS XE operating system exists due to errors in path name restrictions for restricted access directories. Exploiting this vulnerability allows a malicious individual, who operates locally and is a user of the guest operating system, to execute arbitrary code on the...

3S-Smart Software Solutions CODESYS V3 web server path traversal vulnerability

3S-Smart Software Solutions CODESYS V3 web server is a web server used in CODESYS products from 3S-Smart Software Solutions, Germany. A path traversal vulnerability exists in 3S-Smart Software Solutions CODESYS V3 web server versions prior to 3.5.14.10, which can be exploited by an attacker sendi...