ImageMagick Directory Traversal

The vulnerability of the console-based graphic editor ImageMagick is related to deficiencies in pathname restrictions for the directory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

EUVD-2002-0452

Malware in sbrugna...

EUVD-2010-1160

Malware in sbrugna...

EUVD-2016-5756

Malware in sbrugna...

SUSE CVE-2011-2225

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh...

CVE-2022-46255

An improper limitation of a pathname to a restricted directory vulnerability was identified in GitHub Enterprise Server that enabled remote code execution. A check was added within Pages to ensure the working directory is clean before unpacking new content to prevent an arbitrary file overwrite...

TheFuck Path Traversal

The vulnerability of TheFuck programming language package is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service failures...

Django archive extract Path Traversal

The vulnerability of the django.utils.archive.extract method in the Django framework is related to shortcomings in pathname restrictions. Exploiting this vulnerability could allow an attacker to compromise data integrity...

CVE-2020-28010

Exim 4 before 4.94.2 allows Out-of-bounds Write because the main function, while setuid root, copies the current working directory pathname into a buffer that is too small on some common platforms...

YARN NodeManager Component Introduces Malicious Code

The vulnerability of the YARN NodeManager component in Apache Hadoop distributed development and execution platforms exists due to an incorrect pathname limitation for the restricted access directory. Exploiting this vulnerability allows a malicious actor to bypass existing security restrictions...

CVE-2016-4771

The kernel in Apple iOS before 10 and OS X before 10.12 allows local users to bypass intended file-access restrictions via a crafted directory pathname...

CVE-2016-4771

The kernel in Apple iOS before 10 and OS X before 10.12 allows local users to bypass intended file-access restrictions via a crafted directory pathname...

CVE-2016-4771: Exposure of Sensitive Information to an Unauthorized Actor

The kernel in Apple iOS before 10 and OS X before 10.12 allows local users to bypass intended file-access restrictions via a crafted directory pathname...

PT-2016-6127

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 10 Apple OS X versions prior to 10.12 Description The issue allows local users to bypass intended file-access restrictions. This is achieved by using a crafted directory pathname. Recommendations For Apple iOS...

CVE-2011-2225

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh...

Design/Logic Flaw

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh...

CVE-2011-2225

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh...

CVE-2011-2225: Undefined Security Weakness

Unspecified vulnerability in Kiwi before 3.74.2, as used in SUSE Studio 1.1 before 1.1.4, allows attackers to have an unknown impact via a crafted directory pathname that is inserted into config.sh...

Design/Logic Flaw

The safemode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / slash character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function...

CVE-2010-1129

The safemode implementation in PHP before 5.2.13 does not properly handle directory pathnames that lack a trailing / slash character, which allows context-dependent attackers to bypass intended access restrictions via vectors related to use of the tempnam function...