PT-2021-5366 · Unknown +2 · Kubernetes +1

Name of the Vulnerable Software and Affected Versions: Kubernetes affected versions not specified Description: A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on...

CVE-2021-22440

There is a path traversal vulnerability in some Huawei products. The vulnerability is due to that the software uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the software does not properly...

CVE-2020-29436

Sonatype Nexus Repository Manager 3.x before 3.29.0 allows a user with admin privileges to configure the system to gain access to content outside of NXRM via an XXE vulnerability. Fixed in version 3.29.0...

UBUNTU-CVE-2014-10401

An issue was discovered in the DBI module before 1.632 for Perl. DBD::File drivers can open files from folders other than those specifically passed via the fdir attribute...

RubyGem Rack Path Traversal Vulnerability

RubyGem Rack is a modular interface between web servers and web applications developed using the Ruby programming language. A path traversal vulnerability exists in RubyGem Rack versions prior to 2.2.0. The vulnerability stems from a failure of a network system or product to properly filter speci...

QEMU Path Traversal Vulnerability

QEMU Quick Emulator is a suite of analog processor software. A path traversal vulnerability exists in QEMU. The vulnerability stems from a failure of a networked system or product to properly filter for specific elements in a resource or file path. An attacker could use this vulnerability to acce...

Roxy Fileman Path Traversal Vulnerability (CNVD-2020-03726)

Roxy Fileman is a set of open source file browser for . A path traversal vulnerability exists in Roxy Fileman version 1.4.5 for . The vulnerability stems from a failure of a networked system or product to properly filter special elements in the path of a resource or file. An attacker could use th...

Power-Response Path Traversal Vulnerability

Power-Response is a modular PowerShell framework for event response . A path traversal vulnerability exists in versions of Power-Response prior to 2019-02-02, which can be exploited by an attacker to access locations outside of a restricted directory...

CVE-2019-11013

Nimble Streamer 3.0.2-2 through 3.5.4-9 has a ../ directory traversal vulnerability. Successful exploitation could allow an attacker to traverse the file system to access files or directories that are outside of the restricted directory on the remote server...

Artifex Software Ghostscript Access Control Error Vulnerability (CNVD-2019-12758)

Artifex Software Ghostscript is an open source parser for Postscript a page description language and programming language used in the electronics industry and desktop publishing from Artifex Software, Inc. The product can display Postscript files as well as print Postscript files on non-PostScrip...

Directory Traversal

jacobj66-weather is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of ../ sanitization on the user input, allowing attackers to access files outside of the server's scope...

Directory Traversal

serveryyl is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of ../ sanitization on the user input, allowing attackers to access files outside of the server's scope...

Directory Traversal

yxxserver is vulnerable to directory traversal attacks. The vulnerability exists due to the lack of ../ sanitization on the user input, allowing attackers to access files outside of the server's scope...

DEBIAN-CVE-2017-7228

An issue known as XSA-212 was discovered in Xen, with fixes available for 4.8.x, 4.7.x, 4.6.x, 4.5.x, and 4.4.x. The earlier XSA-29 fix introduced an insufficient check on XENMEMexchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arra...

Home Ftp Server Remote Directory Traversal Vulnerability

Home Ftp Server is an FTP service software, FTP service allows us to download and upload files to FTP server freely. The latest version of this software suffers from a directory traversal vulnerability that allows an attacker to access files outside of the user's directory...

samba: Insufficient symlink verification in smbd

An access flaw was found in the way Samba verified symbolic links when creating new files on a Samba share. A remote attacker could exploit this flaw to gain access to files outside of Samba's share path...

rssh protection bypass

Access outside jail is possible...

Linux VServer Project 1.2x - Chroot Breakout

Linux VServer Project 1.2x - Chroot Breakout / source: https://www.securityfocus.com/bid/9596/info VServer is reported prone to a breakout vulnerability that allows a malicious user to escape from the context of the chrooted root directory of the virtual server. This issue is due to the VServer...