Lucene search
+L

78 matches found

BDU FSTEC
BDU FSTEC
added 2022/11/02 12:00 a.m.18 views

The vulnerability of the Moxa MXView network control software lies in the improper restriction of the path name to the restricted access directory. This allows a violator to gain read, modify, or delete access to files.

The vulnerability of the Moxa MXView network control software relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker to gain read, modify, or delete access to files...

7.8CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/10/12 12:00 a.m.10 views

The vulnerability of the backup and recovery functions of Microsoft File Systems for the IBM Spectrum Protect Plus data protection software allows a perpetrator to disclose protected information.

The vulnerability of the backup and recovery functions of Microsoft’s file systems in the IBM Spectrum Protect Plus data protection platform is related to an incorrect limitation on the path name to the restricted-access directory. Exploiting this vulnerability could allow a malicious actor to...

5.9CVSS6.5AI score0.01654EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/08/24 12:00 a.m.16 views

The vulnerability of the software for designing and configuring Connected Components Workbench controllers arises from incorrect restrictions on the path to the restricted-access directory. This allows attackers to escalate their privileges.

The vulnerability of the software for designing and configuring Connected Components Workbench controllers is related to incorrect path name restrictions in the restricted access catalog during file syntax analysis. Exploiting this vulnerability can allow attackers to increase their privileges...

7.7CVSS7.6AI score0.02856EPSS
SaveExploits0References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/07/29 12:00 a.m.15 views

The vulnerability of the Illumina Local Run Manager software exists due to an incorrect limitation on the path to the restricted access directory. This allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Illumina Local Run Manager software exists due to an incorrect limitation on the path to the restricted access directory. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

10CVSS8AI score0.01583EPSS
SaveExploits0References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/06/08 12:00 a.m.18 views

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software lies in the improper limitation of the path name to the restricted access directory. This allows a malicious actor to load any file into any directory of the file system.

The vulnerability of HID Mercury programmable logic controllers’ microprogramming software is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to download any file into any directory of the file system b...

9.1CVSS7.8AI score0.01757EPSS
SaveExploits0References7Affected Software9
BDU FSTEC
BDU FSTEC
added 2022/05/17 12:00 a.m.11 views

The vulnerability of the print spooler daemon in Windows operating systems allows a malicious individual to gain unauthorized access to protected information.

The vulnerability of the Windows Print Spooler in operating systems related to Windows printing is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability can allow a malicious individual to gain unauthorized access to protected...

5.5CVSS6.6AI score0.0123EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2022/04/28 12:00 a.m.23 views

The vulnerability of the networkd-dispatcher component, which manages connection states in Linux operating systems, and is part of the Systemd subsystem responsible for service initialization and management, allows a malicious actor to escalate their privileges or execute arbitrary code.

The vulnerability of the networkd-dispatcher component, which manages connection states and initializes services within Systemd on Linux operating systems, exists due to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability could allow an attacker to...

8.4CVSS5.8AI score0.11761EPSS
SaveExploits3References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:00 a.m.12 views

The vulnerability of the C-Bus Toolkit software exists due to an incorrect limitation on the path name to the restricted access directory, allowing a perpetrator to execute arbitrary code.

The vulnerability of the C-Bus Toolkit software exists due to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code during the file loading process...

9CVSS8AI score0.40582EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2022/04/27 12:00 a.m.13 views

The vulnerability of the C-Bus Toolkit software exists due to an incorrect limitation on the path name to the restricted access directory, allowing a perpetrator to execute arbitrary code.

The vulnerability of the C-Bus Toolkit software exists due to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS7.2AI score0.30534EPSS
SaveExploits1References5Affected Software2
NVD
NVD
added 2022/04/12 5:15 p.m.23 views

CVE-2022-27657

A highly privileged remote attacker, can gain unauthorized access to display contents of restricted directories by exploiting insufficient validation of path information in SAP Focused Run Simple Diagnostics Agent 1.0 - version 1.0...

4CVSS0.02476EPSS
SaveExploits1References4
BDU FSTEC
BDU FSTEC
added 2021/04/06 12:00 a.m.7 views

The vulnerability of the IOx software platform for Cisco IOS XE and Cisco IOS operating systems, as well as the Cisco IC3000 Industrial Compute Gateway hardware security solution, arises from incorrect restrictions on path names in the restricted access directory. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the IOx software platform for Cisco IOS XE and Cisco IOS operating systems, as well as the Cisco IC3000 Industrial Compute Gateway hardware security solution, is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this...

8.5CVSS6.9AI score0.02671EPSS
SaveExploits1References3Affected Software2
CNVD
CNVD
added 2020/12/15 12:00 a.m.10 views

Google TensorFlow Buffer Overflow Vulnerability (CNVD-2021-00089)

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow has a security vulnerability that can be exploited by an attacker to access a special directory...

7.5CVSS6.9AI score0.00689EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2020/05/11 3:51 p.m.37 views

CVE-2020-12785

cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature SEC-540...

8AI score0.00877EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2019/10/29 12:00 a.m.11 views

The vulnerability of the readMetadata function in the Android operating system, which allows a hacker to increase their privileges

The vulnerability of the readMetadata function in the Utils.cpp file of the Android operating system exists due to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability can allow a malicious individual to enhance their privileges when connecti...

7.2CVSS5.5AI score0.00618EPSS
SaveExploits6References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2019/01/23 12:00 a.m.20 views

The vulnerability of the reposync function of the YUM package manager, which allows a hacker to create, modify, or delete any files they desire.

The vulnerability of the reposync function in the YUM package manager exists due to insufficient restrictions on the path name of the restricted access directory. Exploiting this vulnerability allows a malicious actor to create, modify, or delete any files as desired from a remote location...

8.1CVSS7.4AI score0.0571EPSS
SaveExploits0References7Affected Software2
NVD
NVD
added 2018/06/07 2:29 a.m.19 views

CVE-2017-16214

peiserver is a static file server. peiserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS7.5AI score0.01722EPSS
SaveExploits1References2
NVD
NVD
added 2018/06/07 2:29 a.m.19 views

CVE-2017-16213

mfrserver is a simple file server. mfrserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS7.5AI score0.01722EPSS
SaveExploits1References2
NVD
NVD
added 2018/06/07 2:29 a.m.16 views

CVE-2017-16191

cypserver is a static file server. cypserver is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.5CVSS7.5AI score0.01722EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2018/06/07 2:00 a.m.32 views

CVE-2017-16182

serverxxx is a static file server. serverxxx is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.4AI score0.01722EPSS
SaveExploits1References2
Cvelist
Cvelist
added 2018/06/07 2:00 a.m.23 views

CVE-2017-16220

wind-mvc is an mvc framework. wind-mvc is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

7.4AI score0.01722EPSS
SaveExploits1References2
Rows per page
Query Builder