Solar appScreener Platform Code Execution

The vulnerability of the Solar appScreener platform is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

PHPShop Path Traversal Code Execution

The vulnerability of the PHPShop content management system is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

OpenClaw Path Traversal

The vulnerability of the AI agent OpenClaw formerly known as ClawdBot or MoltBot is related to an incorrect restriction on the path name to the catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

CISA Thorium Path Traversal

The vulnerability of the CISA Thorium analytical platform is related to an incorrect limitation on the name of the path to the catalog. Exploiting this vulnerability can allow a malicious actor to gain unauthorized access to protected information...

mpdf Path Traversal Unauthorized Access

The vulnerability of the mPDF library is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

Tidal Component Code Execution

The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to an incorrect restriction on the name path to the restricted-access catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

N-able N-central Path Traversal

The vulnerability of the N-able N-central monitoring and management platform relates to an incorrect limitation on the path name for the /WEB-INF directory in the Apache Tomcat application. Exploiting this vulnerability allows a malicious actor to read arbitrary files...

Ivanti EPM Path Traversal

The vulnerability of the Ivanti EPM endpoint management software is related to incorrect restrictions on path names in the catalog. Exploiting this vulnerability can allow an attacker operating remotely to gain unauthorized access to protected information...

Apache Ivy Path Traversal

The vulnerability of the Apache Ivy package manager is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to write arbitrary files into the file system...

Delta Electronics InfraSuite Device Master Path Traversal NTLM Relay Disclosure

The vulnerability of the Delta Electronics InfraSuite Device Master software for real-time device monitoring is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability can allow a malicious actor to disclose user information, obtain login credentials in...

Atos Unify OpenScape Common Management Platform Bypass Code Execution

The vulnerability of the web interface of the Atos Unify OpenScape Common Management Platform’s administration and service portal is related to an incorrect restriction on the path to the catalog. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and execute...

SINEC INS Web Interface Code Execution

The vulnerability in the web interface for managing software for managing network infrastructure SINEC INS exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by loading arbitrar...