ROS-20260907-73-0020

The vulnerability in the buildkit is related to an incorrect limitation on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

ROS-20260907-73-0019

The vulnerability in the buildkit is related to an incorrect limitation on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

ROS-20260831-73-0008

The vulnerability in MinIO is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

ROS-20260818-73-0021

A vulnerability in Mariadb 10.6 is related to incorrect restrictions on path names in the restricted access catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Grafana monitoring and surveillance platform lies in the improper restriction of the path name to the restricted access catalog, which allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Grafana monitoring and observation platform is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

ROS-20260724-73-0041

A vulnerability in ImageMagick 7 is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

ROS-20260724-73-0040

The vulnerability in ImageMagick relates to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

The vulnerability of the Adobe Animate program for creating multimedia and computer animations lies in the incorrect limitation of the path to the restricted catalog. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows an attacker to execute arbitrary code...

ROS-20260714-73-0064

The vulnerability in Grafana relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Mattermost instant messaging application, related to an incorrect restriction on the path to the restricted catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Mattermost instant messaging application is related to an incorrect restriction on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the ColdFusion software platform arises from an incorrect limitation on the path to the restricted access catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the ColdFusion interpreter lies in the incorrect limitation of the path name to the restricted access catalog, allowing attackers to bypass existing security restrictions.

The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from an incorrect restriction on the path name to the restricted-access catalog, allowing a violator to read and modify arbitrary files.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect restriction on the path name when accessing a restricted catalog during the processing of parameters sessionId and sessionFile. Exploiting this vulnerability allows an attacker to read and...

The vulnerability in the web-based tool for centralized control and configuration of QLogic adapters in the Marvell QConvergeConsole system exists due to an incorrect limitation on the path name to the restricted access catalog. This vulnerability allows attackers to disclose sensitive information that is protected by this system.

The vulnerability of the web-based tool for centralized control and configuration of QLogic adapters in the Marvell QConvergeConsole is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to disclose...

The vulnerability of the autonomous file-sharing platform Erugo arises from an incorrect limitation on the path name to the restricted access catalog, allowing a perpetrator to execute arbitrary code.

The vulnerability of the autonomous file-sharing platform Erugo is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from an incorrect restriction on the path name to the restricted-access catalog, allowing attackers to read arbitrary files.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files...

The vulnerability of the extract_pictures() function in the Calibre electronic library software lies in the improper restriction on the path to the restricted catalog. This allows attackers to bypass existing security mechanisms and execute arbitrary code.

The vulnerability of the extractpictures function in the Calibre electronic library software is related to an incorrect restriction on the path to the restricted-access catalog. Exploiting this vulnerability could allow a perpetrator to bypass existing security mechanisms and execute arbitrary co...

The vulnerability of the Calibre electronic library’s software lies in the improper limitation of the path name to the restricted access catalog. This allows attackers to execute arbitrary code and trigger service failures.

The vulnerability of the Calibre electronic library software is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability allows a perpetrator to execute arbitrary code and cause service failures by sending a specially crafted PDB file...

The vulnerability of the n8n automation platform lies in its improper name restriction for paths to the restricted catalog. This allows a malicious actor to execute arbitrary code.

The vulnerability of the n8n automation platform exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by processing uploaded files and transmitting them to remote servers via SSH...

The vulnerability of the Reverse Proxy Server of Containous Traefik arises from incorrect restrictions on the path name to the restricted catalog, allowing attackers to disclose protected information.

The vulnerability of the Containous Traefik reverse proxy server is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to disclose the protected information...