The vulnerability lies in the implementation of OPC UA software methods for connection integration with the Softing OPC UA C++ SDK, as well as the Secure Integration Server data integration tool. This allows attackers to execute arbitrary code.

The vulnerability of the implementation of OPC UA software for connectivity integration with Softing OPC UA C++ SDK lies in the incorrect path name limitation for accessing the restricted directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the WS_FTP Server server, related to incorrect path name restrictions for the restricted access directory, allows attackers to circumvent security restrictions, gain unauthorized read, modify, or delete access to data, and execute arbitrary commands.

The vulnerability of the WSFTP Server server is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows an attacker to bypass security restrictions, gain unauthorized read, edit, or delete access to data, and execute arbitrary commands...

CVE-2023-5399

A CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists that could cause tampering of files on the personal computer running C-Bus when using the File Command...

CVE-2022-35908: Improper Limitation of a Pathname to a Restricted Directory

Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...

The vulnerability of the makeDetailContent method in the software tool for creating/distributing content in LG Simple Editor allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability of the makeDetailContent method in the LG Simple Editor’s content creation/distribution software lies in improper restrictions on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute arbitrary code...

PT-2023-28370 · Unknown · Soundminer

Name of the Vulnerable Software and Affected Versions: Soundminer affected versions not specified Description: The issue is related to improper limitation of a pathname to a restricted directory, also known as 'Path Traversal'. This is a type of security weakness that can allow an attacker to...

CVE-2023-40026: Improper Limitation of a Pathname to a Restricted Directory

Argo CD is a declarative continuous deployment framework for Kubernetes. In Argo CD versions prior to 2.3 starting at least in v0.1.0, but likely in any version using Helm before 2.3, using a specifically-crafted Helm file could reference external Helm charts handled by the same repo-server to le...

CVE-2023-42487: Improper Limitation of a Pathname to a Restricted Directory

Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2023-37739: Improper Limitation of a Pathname to a Restricted Directory

i-doit Pro v25 and below was discovered to be vulnerable to path traversal...

The vulnerability of the Fusion File Manager component in the PHP-Fusion CMS system allows a hacker to gain access to read and modify files.

The vulnerability of the Fusion File Manager CMS system’s PHP-Fusion component is related to an incorrect limitation on the path name of the restricted directory. Exploiting this vulnerability allows a malicious actor to gain access to and modify files through a specially created HTTP request...

The vulnerability of the Zoom Desktop software for Windows, a video conferencing application, stems from incorrect path restrictions for the access-controlled directory. This allows attackers to escalate their privileges.

The vulnerability of the Zoom Desktop video conferencing software for Windows clients is related to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

The vulnerability of the Node.js software platform, related to incorrect restrictions on path names for directories with restricted access, allows attackers to compromise the integrity of protected information.

The vulnerability of the Node.js software platform is related to incorrect restrictions on the path name of the restricted access directory. Exploiting this vulnerability allows a malicious actor to influence the integrity of the protected information from a remote location...

The vulnerability of the CryptoService function in software for monitoring the status of devices connected to a network allows a hacker to modify arbitrary files.

The vulnerability of the CryptoService function in software for monitoring the status of devices connected to a network, Cisco Duo Device Health, is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker to modify...

CVE-2023-2971: Improper Limitation of a Pathname to a Restricted Directory

Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text fro...

CVE-2023-39401: Improper Limitation of a Pathname to a Restricted Directory

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization...

CVE-2023-39400: Improper Limitation of a Pathname to a Restricted Directory

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization...

The vulnerability of the UploadProgress.ashx component of the system for working with open source Onlyoffice Community Server allows a hacker to execute arbitrary code.

The vulnerability of the UploadProgress.ashx component of the Onlyoffice Community Server system is related to errors in processing the relative path to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2023-38695: Improper Limitation of a Pathname to a Restricted Directory

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...

Path Traversal

@simonsmith/cypress-image-snapshot is vulnerable to Path Traversal. The vulnerability exists because the library does not properly sanitize snapshot filenames, allowing an attacker to create directories or images outside the restricted directory...

CVE-2023-0956: Improper Limitation of a Pathname to a Restricted Directory

External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...