tarfile module CPython Data Compromise

The vulnerability of the tarfile module in the CPython interpreter is related to incorrect restrictions on the path name for directories with restricted access. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Zyxel networking devices File Upload Unauthorized Access

The vulnerability of the fileupload-cgi CGI script of the Zyxel networking device lies in an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Atheos IDE Path Traversal

The vulnerability of the cloud integrated development environment IDE Atheos is related to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary files on the server remotely...

Nokia Single Radio Access Network Path Traversal

The vulnerability of the Nokia Single RAN network management platform lies in the incorrect limitation of the path name when processing the PlanId parameter. Exploiting this vulnerability allows an attacker to compromise the confidentiality, integrity, and accessibility of the protected informati...

Dell Storage Manager Path Traversal

The vulnerability of the Dell Storage Manager DSM cluster management software is related to incorrect path name restrictions for access to restricted directories. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2025-23250

NVIDIA NeMo Framework contains a vulnerability where an attacker could cause an improper limitation of a pathname to a restricted directory by an arbitrary file write. A successful exploit of this vulnerability might lead to code execution and data tampering...

clpctlWrapper Privilege Escalation

The vulnerability of the clpctlWrapper command in the server and CloudPanel management panel is related to an incorrect limitation on the path name to the restricted directory. Exploiting this vulnerability can allow attackers to increase their privileges...

OESA-2024-2546 haproxy security update

HAProxy is a free, very fast and reliable solution offering high availability, load balancing, and proxying for TCP and HTTP-based applications. It is particularly suited for very high traffic web sites and powers quite a number of the world's most visited ones. Security Fixes: Inconsistent...

SUSE CVE-2024-53008

Inconsistent interpretation of HTTP requests 'HTTP Request/Response Smuggling' issue exists in HAProxy. If this vulnerability is exploited, a remote attacker may access a path that is restricted by ACL Access Control List set on the product. As a result, the attacker may obtain sensitive...

Avigilon VideoIQ iCVR HD Path Traversal

The vulnerability of the Microprogrammed Software of the Avigilon VideoIQ iCVR HD camera is related to an incorrect restriction on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to disclose protected information...

Buildah Path Traversal Privilege Escalation

The vulnerability of the Buildah container management tool exists due to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability can allow a malicious user to gain increased privileges within the system...

Node.js fs.mkdtemp Arbitrary Directory Creation

The vulnerability of the fs.mkdtemp and fs.mkdtempSync methods in the Node.js software platform is related to incorrect path name restrictions for restricted-access directories. Exploiting this vulnerability could allow an attacker to create arbitrary directories remotely...

Base64 Upload Code Execution

The vulnerability of the library for converting files to the base64 format, which is used to upload files to the web application’s server, relates to an incorrect restriction on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute...

FreeBSD readdir Code Execution

The vulnerability of the readdir3 function in the FreeBSD operating system is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Tesseract File Function Unauthorized Access

The vulnerability of the software for processing, transforming, and generating Ghostscript documents is related to incorrect restrictions on the path to the restricted directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through...

JumpServer PAM Path Traversal

The vulnerability of the PAM system for privileged access control in JumpServer is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in the Celery container by executing a specially...

Apache OFBiz Path Traversal Auth Bypass

The vulnerability of Apache OFBiz’s resource planning software lies in incorrect restrictions on the path to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to bypass the authentication process remotely...

aiohttp Path Traversal

The vulnerability of the aiohttp HTTP client is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

Apache Struts Code Execution

The vulnerability of the Apache Struts software platform is related to the use of files and directories accessible from external parties due to incorrect restrictions on the path to the restricted directory during file loading. Exploiting this vulnerability allows a remote attacker to execute...

Aria2 WebUI Path Traversal

The vulnerability in the interaction interface with the Aria2 file downloader’s WebUI-Aria2 relates to an incorrect limitation on the path name of the restricted directory. Exploiting this vulnerability allows a malicious actor to disclose the protected information...