BlogEngine path traversal vulnerability (CNVD-2019-21427)

BlogEngine is an open source ASP.NET blog system . The system supports Ajax comments , custom themes and so on. A path traversal vulnerability exists in BlogEngine version 3.3.7.0. The vulnerability stems from a failure of a network system or product to properly filter special elements in the pat...

spacewalk spacewalk-proxy path traversal vulnerability

spacewalk is an open source Linux system management solution. spacewalk-proxy is one of the proxy programs. A path traversal vulnerability in spacewalk spacewalk-proxy version 2.9, which arises from a failure of a networked system or product to properly filter special elements in the path of a...

LogicalDOC Path Traversal Vulnerability

LogicalDOC is a set of document management system developed using Java technology . The system has Lucene full-text search indexing and automatic import and other functions. A path traversal vulnerability exists in LogicalDOC Community Edition version 8.x prior to 8.2.1. The vulnerability stems...

ALPINE-CVE-2019-10143

It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a local attacker who already has control of the radiusd user to escalate his privileges to root, by tricking logrotate into writing a radiusd-writable file to a directory normally...

The vulnerability in the web interface of the microprogramming software for Cisco TelePresence Video Communication Server and Cisco Expressway software allows a perpetrator to bypass security restrictions and access the web interface.

The vulnerability of the web interface of the microprogramming software for Cisco TelePresence Video Communication Servers and Cisco Expressway software lies in improper restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to bypass...

Seagate NAS OS Path Traversal Vulnerability

Seagate NAS OS is a NAS Network Attached Storage operating system from Seagate, Inc. filebrowser is one of the file browsers. A path traversal vulnerability exists in the filebrowser in Seagate NAS OS version 4.3.15.1. The vulnerability stems from a failure of a network system or product to...

Cybozu Garoon path traversal vulnerability (CNVD-2019-12702)

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. A path traversal vulnerability exists in Cybozu Garoon versions 4.0.0 through 4.10.1, which originates when a...

The vulnerability of the fetch module in the Ansible configuration management system arises from incorrect restrictions on the path to the restricted-access directory. This allows attackers to gain unauthorized access to information and compromise its integrity.

The vulnerability of the fetch module in the Ansible configuration system is related to an incorrect path limitation for the restricted access directory. Exploiting this vulnerability could allow a local attacker to gain unauthorized access to information and compromise its integrity by copying a...

samba directory traversal vulnerability

Samba is a set of free software from the Samba team that enables UNIX series operating systems to connect to the SMB/CIFS network protocol of Microsoft Windows operating systems. The program supports sharing printers, transferring data files to each other, and so on. A path traversal vulnerabilit...

http-live-simulator path traversal vulnerability

http-live-simulator is an HTTP file server. A path traversal vulnerability exists in the http-live-simulator npm package version 1.0.5, which stems from a failure of a networked system or product to properly filter for special elements in the path of a resource or file. An attacker could use this...

Harmis JE Messenger component path traversal vulnerability in Joomla!

Joomla! is an open source, cross-platform content management system CMS developed by the Open Source Matters team in the United States using PHP and MySQL. Harmis JE Messenger component is used in one of the personal messaging components, which supports incoming and outgoing e-mail and online...

Artifex Software Ghostscript Access Control Error Vulnerability (CNVD-2019-12758)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

M-Server Path Traversal Vulnerability

m-server is a small http static server . M-Server suffers from a path traversal vulnerability that arises from a failure of a network system or product to properly filter special elements in the path of a resource or file. An attacker could use this vulnerability to access locations outside of a...

CVE-2018-7835

An Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability exists in IIoT Monitor 3.1.38 which could allow access to files available to SYSTEM user...

Eclipse Vert.x does not properly neutralize '' (forward slashes) sequences that can resolve to an external location

In version from 3.0.0 to 3.5.3 of Eclipse Vert.x, the StaticHandler uses external input to construct a pathname that should be within a restricted directory, but it does not properly neutralize '' forward slashes sequences that can resolve to a location that is outside of that directory when...

CVE-2018-0437

A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...

Input validation

A vulnerability in the Cisco Umbrella Enterprise Roaming Client ERC could allow an authenticated, local attacker to elevate privileges to Administrator. To exploit the vulnerability, the attacker must authenticate with valid local user credentials. This vulnerability is due to improper...

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing. SyncThru 6 allows a perpetrator to execute arbitrary code with system privileges.

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing, exists due to an incorrect path limitation for the restricted directory. Exploiting this vulnerability allows a malicious actor to...

The vulnerability of the DriverFileUploadServlet server servlet in the web application, which is designed for managing and monitoring printing devices and image processing, allows a perpetrator to delete any file.

The vulnerability of the DriverFileUploadServlet web application, which is designed for managing and monitoring printing devices and image processing, exists due to an incorrect path limitation for the restricted directory. Exploiting this vulnerability could allow a malicious actor to delete any...

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing. SyncThru 6 allows a perpetrator to execute arbitrary code with system privileges.

The vulnerability of the FileUploadController servlet in the web application, which is designed for managing and monitoring printing devices and image processing, exists due to an incorrect path limitation for the restricted directory. Exploiting this vulnerability allows a malicious actor to...