37 matches found
Office Online Package ONLYOFFICE Docs Path Traversal
The vulnerability of the office online package ONLYOFFICE Docs DocumentServer is related to incorrect restrictions on the path to the catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
MariaDB extra/mariabackup/xbstream.cc Buffer Overflow
The vulnerability of the extra/mariabackup/xbstream.cc file of the MariaDB database management system is related to an incorrect limitation on the path name for the restricted access directory. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and...
ROS-20261001-73-0023
The vulnerability in glib2 relates to incorrect restrictions on the path name to the restricted access catalog. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...
Glances secure_popen Command Execution
The vulnerability of the securepopen function in the Glances monitoring tool glances/secure.py is related to an incorrect restriction on the path to the restricted directory. Exploiting this vulnerability could allow a attacker to execute arbitrary commands...
PT-2026-96455
In the Linux kernel, the following vulnerability has been resolved: fs: fix user path of nested backing files backing file open derives the path to be stored in the new backing file from user file-f path. This is incorrect when user file itself is a backing file, which is the case for nested...
Azure Application Insights Profiler Path Traversal Privilege Escalation
The vulnerability of Azure’s Application Insights Profiler, a cloud-based tool for analyzing web application performance, is related to an incorrect path name limitation. Exploiting this vulnerability could allow an attacker to increase their privileges remotely...
CVE-2026-47676: Inconsistent Interpretation of HTTP Requests
Hono is a Web application framework that provides support for any JavaScript runtime. Prior to 4.12.21, app.mount strips the mount prefix from the incoming request path using the raw URL pathname, while route matching is performed against the percent-decoded path. This inconsistency causes the...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from a reference leak during PM runtime on an incorrect path. This could lead to the reference count...
Linux Kernel Security Vulnerabilities
The Linux kernel is the kernel used by the Linux operating system developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from an error in the doprocmapquery function, potentially leading to a double mmput operation due to an...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from the failure to release sp on the wrong path, potentially leading to system crashes...
Linux Kernel Security Vulnerabilities
The Linux kernel is the core of the open-source operating system Linux, developed by the Linux Foundation in the United States. There is a security vulnerability in the Linux kernel, which stems from resetting nextsmb2rcvhdroff in an incorrect path, potentially leading to infinite loops...
DotNetZip Path Traversal
The vulnerability of the DotNetZip library for working with zip files is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...
ROS-20250630-01
A vulnerability in the pgAdmin 4 database management tool exists due to an incorrect restriction of the name of the of the path to a restricted directory. Exploitation of the vulnerability could allow an attacker, acting remotely, to execute arbitrary code...
CVE-2022-29944
An issue was discovered in ONOS 2.5.1. There is an incorrect comparison of paths installed by intents. An existing intents does not redirect to a new path, even if a new intent that shares the path with higher priority is installed...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from ath11k not clearing the IRQ affinity hint in the wrong path, which could result in a warning...
CVE-2025-29787 zip Vulnerable to Incorrect Path Canonicalization During Archive Extraction, Leading to Arbitrary File Write
zip is a zip library for rust which supports reading and writing of simple ZIP files. In the archive extraction routine of affected versions of the zip crate starting with version 1.3.0 and prior to version 2.3.0, symbolic links earlier in the archive are allowed to be used for later files in the...
ROS-20241203-20
Apache Ivy package manager vulnerability is related to incorrect path name restriction to a directory with a restricted directory. Exploitation of the vulnerability could allow an attacker acting remotely, gain unauthorized access to the file system Apache Ivy package manager vulnerability is...
PT-2024-7820
Name of the Vulnerable Software and Affected Versions Buildah affected versions not specified Description A vulnerability exists in Buildah due to incorrect restriction of the path name to a directory with limited access. This issue allows an attacker to elevate privileges in the system by...
Linux Kernel Security Vulnerabilities
Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in Linux kernel that stems from overriding a wrong path...
