CVE-2013-4656: Improper Limitation of a Pathname to a Restricted Directory

Symlink Traversal vulnerability in ASUS RT-AC66U and RT-N56U due to misconfiguration in the SMB service...

CVE-2019-10218: Improper Limitation of a Pathname to a Restricted Directory

A flaw was found in the samba client, all samba versions before samba 4.11.2, 4.10.10 and 4.9.15, where a malicious server can supply a pathname to the client with separators. This could allow the client to access files and folders outside of the SMB network pathnames. An attacker could use this...

CVE-2013-4658: Improper Limitation of a Pathname to a Restricted Directory

Linksys EA6500 has SMB Symlink Traversal allowing symbolic links to be created to locations outside of the Samba share...

FusionPBX Path Traversal Vulnerability

FusionPBX is a scalable, multi-threaded communications platform. The platform can be used as a call center server, fax server, VOIP server, voicemail server, conference server and voice application server. A path traversal vulnerability exists in FusionPBX. An attacker could exploit this...

The vulnerability of the ColdFusion software platform, related to errors in restricting the path name of the restricted directory, allows a perpetrator to write any files into the device’s file system.

The vulnerability of the ColdFusion software platform is related to errors in restricting the path name of the restricted directory. Exploiting this vulnerability allows a malicious actor to write arbitrary files to the device’s file system remotely...

The vulnerability of the Cisco IOS XE operating system arises from errors in path name restrictions for restricted access directories, allowing attackers to execute arbitrary code on the Linux kernel.

The vulnerability of the Cisco IOS XE operating system exists due to errors in path name restrictions for restricted access directories. Exploiting this vulnerability allows a malicious individual, who operates locally and is a user of the guest operating system, to execute arbitrary code on the...

3S-Smart Software Solutions CODESYS V3 web server path traversal vulnerability

3S-Smart Software Solutions CODESYS V3 web server is a web server used in CODESYS products from 3S-Smart Software Solutions, Germany. A path traversal vulnerability exists in 3S-Smart Software Solutions CODESYS V3 web server versions prior to 3.5.14.10, which can be exploited by an attacker sendi...

Total.js CMS Path Traversal Vulnerability

Total.js CMS is a Node.js content management system. Total.js CMS 12.0.0 suffers from a path traversal vulnerability that can be exploited by an attacker to include .html files outside of a restricted directory...

WordPress ad-inserter plugin path traversal vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ad-inserter is an ad management plugin that is used in this period. A path traversal vulnerability exists in the WordPress ad-inserter...

The vulnerability of the SSL VPN web portal of the operating system FortiOS allows a hacker to gain access to system files.

The vulnerability of the SSL VPN web portal of the operating system FortiOS exists due to an incorrect path limitation to the restricted access directory. Exploiting this vulnerability could allow a malicious actor to gain access to system files by sending a specially crafted HTTP request...

cPanel path traversal vulnerability (CNVD-2019-30468)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions prior to cPanel 62.0.4. The vulnerability stems from a failure of a network...

cPanel path traversal vulnerability (CNVD-2019-30466)

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions of cPanel prior to 68.0.15. The vulnerability stems from a failure of a network...

cPanel Path Traversal Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in cPanel versions prior to 62.0.17. The vulnerability stems from a failure of a network...

cPanel Path Traversal Vulnerability

cPanel is a set of Web-based automated colocation platform from the US-based cPanel. The platform is primarily used to automate the management of websites and servers. A path traversal vulnerability exists in versions of cPanel prior to 64.0.21. The vulnerability stems from a failure of a network...

The vulnerability of the McAfee Enterprise Security Manager system arises from an incorrect restriction on the path to the restricted directory. This allows attackers to elevate their privileges.

The vulnerability of the McAfee Enterprise Security Manager critical threat detection system exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

CVE-2019-14322: Improper Limitation of a Pathname to a Restricted Directory

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names such as C: in Windows pathnames...

Citrix Systems SD-WAN Center and NetScaler SD-WAN Center Path Traversal Vulnerability

Citrix Systems SD-WAN Center is a centralized management system from Citrix Systems USA. The system is primarily used to configure, monitor and analyze all Citrix SD-WAN devices on the WAN. A path traversal vulnerability exists in Citrix Systems SD-WAN Center versions 10.2.x prior to 10.2.3 and...

MailEnable Enterprise Premium Path Traversal Vulnerability

MailEnable Enterprise Premium is a suite of POP3 and SMTP mail servers from MailEnable Australia. A path traversal vulnerability exists in MailEnable Enterprise Premium version 10.23. The vulnerability stems from a failure of a network system or product to properly filter special elements in the...

BlogEngine path traversal vulnerability (CNVD-2019-21427)

BlogEngine is an open source ASP.NET blog system . The system supports Ajax comments , custom themes and so on. A path traversal vulnerability exists in BlogEngine version 3.3.7.0. The vulnerability stems from a failure of a network system or product to properly filter special elements in the pat...

spacewalk spacewalk-proxy path traversal vulnerability

spacewalk is an open source Linux system management solution. spacewalk-proxy is one of the proxy programs. A path traversal vulnerability in spacewalk spacewalk-proxy version 2.9, which arises from a failure of a networked system or product to properly filter special elements in the path of a...