153 matches found
BIT-TOMCAT-2020-9484
When using Apache Tomcat versions 9.0.0 through 9.0.34, 8.5.0 to 8.5.54 and 7.0.0 to 7.0.103 if a an attacker is able to control the contents and name of a file on the server; and b the server is configured to use the PersistenceManager with a FileStore; and c the PersistenceManager is configured...
PT-2024-2128 · Ibm · Ibm Watson Cp4D Data Stores
Name of the Vulnerable Software and Affected Versions: IBM Watson CP4D Data Stores versions 4.6.0 through 4.6.3 Description: The issue is related to incorrect external control of a file name or path, which could allow a user with physical access and specific knowledge of the system to modify file...
CVE-2023-49343
Temporary data passed between application components by Budgie Extras Dropby applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false...
CVE-2023-49346
Temporary data passed between application components by Budgie Extras WeatherShow applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false...
CVE-2023-49342
Temporary data passed between application components by Budgie Extras Clockworks applet could potentially be viewed or manipulated. The data is stored in a location that is accessible to any user who has local access to the system. Attackers may pre-create and control this file to present false...
PT-2023-7417 · Mitsubishi · Gx Works3 +4
Name of the Vulnerable Software and Affected Versions: Mitsubishi Electric FA Engineering Software Products affected versions not specified MELSOFT iQ AppPortal affected versions not specified MELSOFT Navigator affected versions not specified Motion Control Setting affected versions not specified...
CVE-2023-41718
When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a specific file...
CVE-2023-41718
When a particular process flow is initiated, an attacker may be able to gain unauthorized elevated privileges on the affected system when having control over a specific file...
SUSE-SU-2023:4119-1 Security update for slurm
This update for slurm fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. bsc1216207...
SUSE-SU-2023:4113-1 Security update for slurm
This update for slurm fixes the following issues: - CVE-2023-41914: Fixed a filesystem handling race conditions that could lead to an attacker taking control of an arbitrary file. bsc1216207...
CVE-2023-41717
Inappropriate file type control in Zscaler Proxy versions 3.6.1.25 and prior allows local attackers to bypass file download/upload restrictions...
The vulnerability in the /model/__lang_msg.php microprogramming software of the D-LINK DIR-300 router allows a attacker to compromise the confidentiality, integrity, and accessibility of the protected information.
The vulnerability of the /model/langmsg.php microprogrammed software in D-LINK DIR-300 routers is related to incorrect external control of file names or files. Exploiting this vulnerability can allow an attacker to compromise the confidentiality, integrity, and accessibility of protected...
CVE-2023-28669
Jenkins JaCoCo Plugin 3.3.2 and earlier does not escape class and method names shown on the UI, resulting in a stored cross-site scripting XSS vulnerability exploitable by attackers able to control input files for the 'Record JaCoCo coverage report' post-build action...
CVE-2023-1105 External Control of File Name or Path in flatpressblog/flatpress
External Control of File Name or Path in GitHub repository flatpressblog/flatpress prior to 1.3...
CVE-2022-39952
A external control of file name or path in Fortinet FortiNAC versions 9.4.0, 9.2.0 through 9.2.5, 9.1.0 through 9.1.7, 8.8.0 through 8.8.11, 8.7.0 through 8.7.6, 8.6.0 through 8.6.5, 8.5.0 through 8.5.4, 8.3.7 may allow an unauthenticated attacker to execute unauthorized code or commands via...
CVE-2022-46660
An unauthorized user could alter or write files with full control over the path and content of the file...
CVE-2022-45918
ILIAS before 7.16 allows External Control of File Name or Path...
CVE-2022-2400
External Control of File Name or Path in GitHub repository dompdf/dompdf prior to 2.0.0...
