455 matches found
CVE-2024-6717 Nomad Vulnerable to Allocation Directory Path Escape Through Archive Unpacking
HashiCorp Nomad and Nomad Enterprise 1.6.12 up to 1.7.9, and 1.8.1 archive unpacking during migration is vulnerable to path escaping of the allocation directory. This vulnerability, CVE-2024-6717, is fixed in Nomad 1.6.13, 1.7.10, and 1.8.2...
HashiCorp Nomad和HashiCorp Nomad Enterprise 安全漏洞
HashiCorp Nomad and HashiCorp Nomad Enterprise are both products of HashiCorp, Inc. of the U.S. HashiCorp Nomad is a simple and flexible scheduler and orchestrator. HashiCorp Nomad is a simple and flexible scheduler and orchestrator for managing containerized and non-containerized applications at...
The vulnerability of the rspamd_maps() function in the Docker-based email server deployment and management tool, mailcow:dockerized, allows a attacker to execute arbitrary code.
The vulnerability of the rspamdmaps function in the Docker-based email server deployment and management tool, mailcow:dockerized, is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...
Exploit for Path Traversal in Solarwinds Serv-U
CVE-2024-28995 Automated Path Traversal & Local File Read...
iRODS Security Vulnerabilities
iRODS is an open source data management software from iRODS Open Source. A security vulnerability exists in iRODS versions prior to 4.3.2, which stems from the fact that irodsServerMonPerf attempts to use a path that is not a directory...
PT-2024-28017 · Irods · Irods
Name of the Vulnerable Software and Affected Versions: iRODS versions prior to 4.3.2 Description: The issue arises when irodsServerMonPerf attempts to use a path even if it is not a directory. This can lead to unintended behavior. Recommendations: For versions prior to 4.3.2, update to version...
The vulnerability of the distributed Git version control system arises from an incorrect limitation on the path name for the restricted access directory, allowing a violator to execute arbitrary code.
The vulnerability of the distributed Git version control system is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute arbitrary code...
The vulnerability of the Windows Hyper-V hardware virtualization system allows a perpetrator to execute arbitrary code.
The vulnerability of the Windows Hyper-V hardware virtualization system in Windows operating systems is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
CVE-2023-51401
Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Brainstorm Force Ultimate Addons for Beaver Builder allows Relative Path Traversal.This issue affects Ultimate Addons for Beaver Builder: from n/a through 1.35.13...
PT-2024-5048 · Unknown · Deepjavalibrary
Name of the Vulnerable Software and Affected Versions: DeepJavaLibraryDJL versions 0.1.0 through 0.27.0 Description: The issue is related to the incorrect restriction of the directory path name with limited access. This can allow a remote attacker to overwrite system files. The estimated number o...
PT-2024-4724 · Ооо 'Кейсистемс' · Сервис Оправдательных Документов
Name of the Vulnerable Software and Affected Versions: Сервис оправдательных документов affected versions not specified Description: The issue is related to incorrect restriction of directory path names. It may allow a remote attacker to gain read access to local files. Recommendations: At the...
PT-2024-4728 · Ооо 'Кейсистемс' · Сервис Оправдательных Документов
Name of the Vulnerable Software and Affected Versions: Сервис оправдательных документов affected versions not specified Description: The issue is related to incorrect restriction of directory path names. It may allow a remote attacker to gain read and write access to local files. Recommendations:...
PT-2024-4720 · Microsoft · Net Core
Name of the Vulnerable Software and Affected Versions: .NET Core versions affected versions not specified Description: The issue is related to an incorrect restriction of directory path names in the .NET Core software component "Сервис обновлений". This could allow a remote attacker to gain read...
The vulnerability in the embedded Jetty API server of the CData API Server allows attackers to escalate their privileges.
The vulnerability in the embedded Jetty API server of the CData API Server is related to errors in processing the relative path to the directory, due to the lack of session verification for endpoints. Exploiting this vulnerability allows a malicious actor to increase their privileges by sending...
PT-2024-3202 · Microsoft · Defender For Iot
Name of the Vulnerable Software and Affected Versions: Microsoft Defender for IoT affected versions not specified Description: The issue is related to incorrect restriction of a directory path with limited access. Exploitation of this issue may allow a remote attacker to execute arbitrary code...
PT-2024-15524 · Openssl +1 · Openssl +1
Name of the Vulnerable Software and Affected Versions: Rapid7 Minerva Armor versions prior to 4.5.5 Description: The issue is a privilege escalation vulnerability that allows an authenticated attacker to elevate privileges and execute arbitrary code with SYSTEM privilege. This is caused by the...
PT-2024-7492 · Unknown · Platypus.Js
Name of the Vulnerable Software and Affected Versions: Platypus.js affected versions not specified Description: The issue is related to incorrect restriction of directory path names with limited access in the Platypus.js platform. Exploitation may allow a remote attacker to access confidential...
The vulnerability of the microprogramming software for UniLogic Studio series UniStream, related to errors in processing the relative path to the directory, allows attackers to bypass security restrictions and execute arbitrary code.
The vulnerability of the microprogramming software for UniLogic Studio series UniStream is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows an attacker to bypass security restrictions and execute arbitrary code...
