Lucene search
+L

121 matches found

BDU FSTEC
BDU FSTEC
added 2026/08/31 11:51 a.m.22 views

The vulnerability of the iFlightDoc onboard documentation system, related to incorrect restrictions on the path name to the catalog, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the iFlightDoc onboard documentation system is related to an incorrect limitation on the name of the path to the catalog h. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to the protected information...

6.8CVSS5.6AI score
SaveExploits0Affected Software1
Redos
Redos
added 2026/07/24 12:00 a.m.9 views

ROS-20260724-73-0041

A vulnerability in ImageMagick 7 is related to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4.8CVSS5.8AI score0.00164EPSS
SaveExploits0
Redos
Redos
added 2026/07/24 12:00 a.m.11 views

ROS-20260724-73-0040

The vulnerability in ImageMagick relates to incorrect restrictions on the path to the restricted catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

4.8CVSS5.9AI score0.00164EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
added 2026/06/15 12:00 a.m.8 views

The vulnerability of the Trend Micro Apex One antivirus software arises from an incorrect limitation on the path to the catalog, allowing a malicious actor to execute arbitrary code.

The vulnerability of the Trend Micro Apex One antivirus software is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability allows a hacker to execute arbitrary code...

6.7CVSS6.3AI score0.12682EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/06/10 12:00 a.m.15 views

The vulnerability of Ollama’s system for running and managing large language models lies in its improper name restriction for the path to the catalog, allowing a violator to execute arbitrary code.

The vulnerability of the Ollama system for running and managing large language models is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

10CVSS6.4AI score0.00625EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/04 12:00 a.m.28 views

The vulnerability of the UniFi OS Server network management center arises from incorrect restrictions on the path to the directory, allowing unauthorized access by intruders to protected information.

The vulnerability of the UniFi OS Server network management center is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

10CVSS5.8AI score0.63897EPSS
SaveExploits4References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/06/04 12:00 a.m.14 views

The vulnerability of the control console of the antivirus software Trend Micro Apex One allows a hacker to execute arbitrary code.

The vulnerability of the management console of the Trend Micro Apex One antivirus software is related to an incorrect limitation on the path to the catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.4AI score0.03754EPSS
SaveExploits0References4
BDU FSTEC
BDU FSTEC
added 2026/05/18 12:00 a.m.15 views

The vulnerability of Nomad application orchestrators, related to incorrect restrictions on the path name to the catalog, allows attackers to execute arbitrary code.

The vulnerability of Nomad application orchestrators is related to incorrect restrictions on the path name to the catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

9CVSS6.1AI score0.06892EPSS
SaveExploits2References5Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/21 12:00 a.m.13 views

The vulnerability of the integrated Cisco Unity Connection messaging system, related to errors in the mechanism for processing relative path to the directory, allows a perpetrator to load arbitrary files.

The vulnerability of the integrated Cisco Unity Connection messaging system is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to download arbitrary files from the vulnerable system...

6.8CVSS5.9AI score0.00388EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/14 12:00 a.m.9 views

The vulnerability of GLib libraries relates to incorrect restrictions on path names to the catalog, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the GLib library set is related to incorrect restrictions on the path name to the catalog. Exploiting this vulnerability allows an attacker who operates remotely to gain unauthorized access to protected information...

3.7CVSS5.8AI score0.00397EPSS
SaveExploits0References7Affected Software4
BDU FSTEC
BDU FSTEC
added 2026/04/13 12:00 a.m.12 views

The vulnerability of the cluster synchronization component in Wazuh Manager, a platform for security monitoring and threat detection, allows attackers to escalate their privileges.

The vulnerability of the cluster synchronization component in Wazuh Manager, a platform for security monitoring and threat detection, is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to increase their privileges...

9.1CVSS5.3AI score0.00969EPSS
SaveExploits1References3Affected Software1
BDU FSTEC
BDU FSTEC
added 2026/04/08 12:00 a.m.13 views

The vulnerability of the update function of the analytics and automation platform for Cisco Nexus Dashboard involves an incorrect path limitation to the catalog. This allows a malicious user to write arbitrary files into the system with root privileges.

The vulnerability of the metadata update function of the analytics and automation platform for Cisco Nexus Dashboard involves an incorrect limitation on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to write arbitrary files into the system with root privileg...

6.8CVSS5.9AI score0.00489EPSS
SaveExploits0References2Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/04/01 12:00 a.m.13 views

The vulnerability of the Rollup module extractor is related to incorrect restrictions on the path name to the catalog, allowing a perpetrator to execute arbitrary code.

The vulnerability of the Rollup module extractor is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

10CVSS6.1AI score0.01455EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
added 2026/02/11 12:00 a.m.15 views

The vulnerability of the KLogic SCADA system “KASKAD”’s virtual controller allows a intruder to execute arbitrary code.

The vulnerability of the KLogic SCADA system “KASKA” lies in an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code...

9.9CVSS6.3AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/08/08 12:00 a.m.20 views

The vulnerability of the Tidal component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code.

The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to an incorrect restriction on the name path to the restricted-access catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

8.3CVSS7.9AI score0.0067EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2025/07/18 12:00 a.m.19 views

Vulnerability of the iblock module in the 1C-Bitrix website management system: Website management that allows attackers to gain unauthorized access to protected information

Vulnerability of the iblock module in the Content Management System CMS of 1C-Bitrix: Website management is associated with errors in processing the relative path to the catalog. Exploiting this vulnerability can allow unauthorized users to gain unauthorized access to protected information...

6.8CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/18 12:00 a.m.10 views

The vulnerability in the web interface of the Cisco Unified Contact Center Express software’s operator management software allows a perpetrator to escalate their privileges and execute arbitrary code.

The vulnerability in the web interface of the Cisco Unified Contact Center Express Unified CCX software for managing operator operations is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability can allow a perpetrator to enhance their privileges...

3.4CVSS5.8AI score0.00157EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/18 12:00 a.m.15 views

Vulnerability of the iblock module in the 1C-Bitrix website management system: Website management that allows attackers to gain unauthorized access to protected information

Vulnerability of the iblock module in the Content Management System CMS of 1C-Bitrix: Website management is associated with errors in processing the relative path to the catalog. Exploiting this vulnerability can allow unauthorized users to gain unauthorized access to protected information...

6.8CVSS5.5AI score
SaveExploits0References1Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/11 12:00 a.m.13 views

The vulnerability of the Jenkins continuous integration server’s HTML plugin arises from incorrect path name restrictions for the catalog directory, allowing attackers to gain unauthorized access to protected information.

The vulnerability of the Jenkins automation server plugin is related to an incorrect restriction on the path to the catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

6.5CVSS5.5AI score0.00443EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
added 2025/07/04 12:00 a.m.17 views

The vulnerability of the OAM service of the Nokia Single RAN network management platform allows a hacker to enhance their privileges.

The vulnerability of the OAM service of the Nokia Single RAN network management platform is related to incorrect restrictions on the path name to the catalog, leading to errors in privilege management. Exploiting this vulnerability can allow attackers to enhance their privileges...

6.4CVSS5.5AI score0.00135EPSS
SaveExploits0References2
Rows per page
Query Builder