Lucene search
+L

55 matches found

Redos
Redos
•added 2026/07/24 12:00 a.m.•12 views

ROS-20260724-73-0041

A vulnerability in ImageMagick 7 is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4.8CVSS5.8AI score0.00217EPSS
SaveExploits0
Redos
Redos
•added 2026/07/24 12:00 a.m.•13 views

ROS-20260724-73-0040

The vulnerability in ImageMagick relates to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4.8CVSS5.9AI score0.00217EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/07/16 12:00 a.m.•10 views

The vulnerability of the Adobe Animate program for creating multimedia and computer animations lies in the incorrect limitation of the path to the restricted catalog. This allows attackers to execute arbitrary code.

The vulnerability of the Adobe Animate software for creating multimedia and computer animations is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows an attacker to execute arbitrary code...

8.6CVSS5.9AI score0.00328EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/06/17 12:00 a.m.•12 views

The vulnerability of the ColdFusion interpreter lies in the incorrect limitation of the path name to the restricted access catalog, allowing attackers to bypass existing security restrictions.

The vulnerability of the ColdFusion interpreter is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability allows an attacker to bypass existing security restrictions remotely...

8.8CVSS5.8AI score0.00507EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
•added 2026/04/13 12:00 a.m.•10 views

The vulnerability of the AI agent OpenClaw (formerly known as ClawdBot or MoltBot) arises from an incorrect restriction on the path name to the restricted-access catalog, allowing attackers to read arbitrary files.

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor, operating remotely, to read arbitrary files...

6.8CVSS5.9AI score0.00371EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/30 12:00 a.m.•13 views

The vulnerability of the Advantech WebAccss/SCADA SCADA system, related to incorrect restrictions on the path to the restricted access catalog, allows a intruder to delete any files they want.

The vulnerability of the Advantech WebAccss/SCADA SCADA system is related to incorrect restrictions on the path to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to delete any files they desire...

8.5CVSS5.8AI score0.00947EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/12/11 12:00 a.m.•16 views

The vulnerability of the ASUS AiCloud cloud platform, related to improper restriction on the path to the restricted catalog, allows a hacker to bypass security restrictions and gain full control over the device. “New vulnerability”

The vulnerability of the ASUS AiCloud cloud platform lies in the improper restriction on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain full control over the device...

10CVSS6.1AI score0.1576EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/10/28 12:00 a.m.•12 views

The vulnerability of the Xerox FreeFlow Core platform for intelligent automation of work processes lies in the incorrect limitation of the path name to the restricted access catalog, allowing attackers to execute arbitrary commands.

The vulnerability of the Xerox FreeFlow Core platform for intelligent automation of work processes is related to an incorrect limitation on the name of the path to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

10CVSS6.3AI score0.1771EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/08/18 12:00 a.m.•10 views

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain unauthorized access to protected information.

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to gain...

5.3CVSS5.8AI score0.00656EPSS
SaveExploits0References2Affected Software3
BDU FSTEC
BDU FSTEC
•added 2025/05/26 12:00 a.m.•21 views

The vulnerability of the MagicINFO 9 centralized multimedia content management system lies in the improper restriction on the path name to the restricted catalog. This allows a malicious actor to gain access and add arbitrary files.

The vulnerability of the MagicINFO 9 multi-media content centralized management system is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain access and add arbitrary files...

10CVSS8.2AI score0.24295EPSS
SaveExploits4References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/05/16 12:00 a.m.•16 views

The vulnerability of CommVault’s backup and disaster recovery platform, related to incorrect restrictions on the path to the restricted-access catalog, allows a perpetrator to execute arbitrary code.

The vulnerability of CommVault’s backup and disaster recovery platform lies in the improper limitation of the path name to the restricted-access catalog. Exploiting this vulnerability could allow an attacker operating remotely to execute arbitrary code...

10CVSS8.4AI score0.97551EPSS
SaveExploits5References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•13 views

The vulnerability of the DCM files on the medical image and data management system, as well as the Sante PACS Server, allows a hacker to write these files in the context of the current user.

The vulnerability of the DCM files on the medical image and data management system, as well as those on the Sante PACS Server, is related to incorrect restrictions on the path name for accessing the restricted catalog. Exploiting this vulnerability allows a malicious actor to write files under th...

5.3CVSS5.9AI score0.01862EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/03/13 12:00 a.m.•23 views

The vulnerability of the DCM files on the medical image and data management system, as well as the Sante PACS Server, allows a hacker to record these files in the context of the current user.

The vulnerability of the DCM files on the medical image and data management system, as well as those on the Sante PACS Server, is related to incorrect restrictions on the path name for accessing the restricted catalog. Exploiting this vulnerability allows a malicious actor to write files under th...

4.3CVSS5.5AI score0.01603EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/03/06 12:00 a.m.•20 views

The vulnerability of the ArcGIS Server server, related to incorrect restrictions on the path to the restricted catalog, allows attackers to gain unauthorized access to protected information.

The vulnerability of ArcGIS Server is related to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.5AI score0.00587EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/03/05 12:00 a.m.•14 views

The vulnerability of IBM Engineering Lifecycle Optimization - Publishing software relates to incorrect restrictions on the path to the restricted access catalog, allowing attackers to gain unauthorized access to protected information.

The vulnerability of IBM Engineering Lifecycle Optimization - Publishing software relates to incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.5AI score0.00599EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/02/04 12:00 a.m.•66 views

The vulnerability of the Craft CMS content management system lies in the improper restriction on the path to the restricted catalog. This allows a hacker to execute arbitrary code or perform Server Side Template Injection (SSTI) attacks.

The vulnerability of the Craft CMS content management system is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or perform Server Side Template Injection SSTI attacks...

9CVSS6AI score0.01182EPSS
SaveExploits1References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2025/01/20 12:00 a.m.•22 views

The vulnerability of the Mitel MiCollab collaboration platform, related to an incorrect restriction on the path name to the restricted access catalog, allows a hacker to read arbitrary files.

The vulnerability of the Mitel MiCollab collaboration platform lies in an incorrect restriction on the path name used to access the restricted catalog. Exploiting this vulnerability could allow an attacker to read arbitrary files...

4.6CVSS8.2AI score0.37899EPSS
SaveExploits0References3
BDU FSTEC
BDU FSTEC
•added 2025/01/13 12:00 a.m.•15 views

The vulnerability of the Woocommerce Product Design plugin of the WordPress content management system arises from incorrect restrictions on the path to the restricted catalog. This allows attackers to gain access to read, modify, or delete data.

The vulnerability of the Woocommerce Product Design plugin in the WordPress content management system is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain access to read, modify, or delete data...

8.6CVSS5.5AI score0.01351EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/26 12:00 a.m.•18 views

The vulnerability of the Butterfly web application development tool lies in the improper restriction on the path to the restricted catalog, which allows a hacker to perform an SSRF attack.

The vulnerability of the Butterfly web application development tool is related to an incorrect limitation on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to perform a SSRF attack remotely...

9.4CVSS7.7AI score0.01638EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2024/11/13 12:00 a.m.•26 views

The vulnerability of the Buildah container management tool arises due to an incorrect path name limitation for the restricted access catalog. This allows a malicious user to elevate their privileges within the system.

The vulnerability of the Buildah container management tool exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious user to gain increased privileges within the system...

4.4CVSS7.2AI score0.00392EPSS
SaveExploits0References9Affected Software7
Rows per page
Query Builder