Python pip Directory Restriction

The vulnerability of the Python programming language’s pip module is related to an incorrect limitation on the path name for the directory. Exploiting this vulnerability could allow an attacker to compromise the integrity of the protected information...

Vite Local Server Path Traversal

The vulnerability of the Vite application development local server is related to an incorrect restriction on the path name to the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

SAP NetWeaver Java Application Server Unauthorized Access

The vulnerability of web containers in SAP NetWeaver Java Application Servers is related to incorrect path name restrictions for directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to confidential information or cause service failures by sending specially...

UniFi OS Server Path Traversal

The vulnerability of the UniFi OS Server network management center is related to an incorrect limitation on the path name to the catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Poetry Path Traversal

The vulnerability of the Poetry dependency manager in the Python programming language is related to incorrect restrictions on the path name to the directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CUPS Path Traversal

The vulnerability of the CUPS printing server is related to an incorrect restriction on the path to the directory during the processing of the notify-recipient-uri parameter. Exploiting this vulnerability allows a malicious actor to compromise the integrity and accessibility of the protected...

jsPDF loadFile Unauthorized Access

The vulnerability of the loadFile method in the jsPDF library relates to an incorrect limitation on the path name restrictions for directories. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Spring Web multipart file rewrite

The vulnerability of the org.springframework.web.multipart package in the Spring Web framework is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to re-upload files stored in the web server’s directory from a...

OPC WorkstationST Path Traversal

The vulnerability of the OPC server WorkstationST is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain access to the server’s directory...

PT-2024-1736 · Honeywell · Honeywell Experion Controledge Virtualuoc +1

Name of the Vulnerable Software and Affected Versions: Honeywell Experion ControlEdge VirtualUOC and ControlEdge UOC affected versions not specified Description: The issue is related to incorrect restriction of directory path names with limited access, potentially allowing an attacker to read fil...

Cisco Network Services Orchestrator Unauthorized Access

The vulnerability of the API component and the web interface of the Cisco Network Services Orchestrator software relates to incorrect restrictions on the path name to the directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected...

GNU Patch Unauthenticated File Modification

The vulnerability of the Git-style programmatic Unix utility GNU Patch for operating systems like Ubuntu and Fedora is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability allows a malicious actor to remotely modify arbitrary files with the target user’s...