CVE-2024-2366 Remote Code Execution in parisneo/lollms-webui

A remote code execution vulnerability exists in the parisneo/lollms-webui application, specifically within the reinstallbinding functionality in lollmscore/lollms/server/endpoints/lollmsbindinginfos.py of the latest version. The vulnerability arises due to insufficient path sanitization, allowing...

CVE-2024-2366 Remote Code Execution in parisneo/lollms-webui

A remote code execution vulnerability exists in the parisneo/lollms-webui application, specifically within the reinstallbinding functionality in lollmscore/lollms/server/endpoints/lollmsbindinginfos.py of the latest version. The vulnerability arises due to insufficient path sanitization, allowing...

PT-2024-20009 · Parisneo · Lollms-Webui

Name of the Vulnerable Software and Affected Versions: parisneo/lollms-webui version latest Description: A remote code execution issue exists due to insufficient path sanitization in the reinstall binding functionality. This allows an attacker to exploit path traversal and navigate to arbitrary...

CVE-2023-45685

Insufficient path validation when extracting a zip archive in South River Technologies' Titan MFT and Titan SFTP servers on Windows and Linux allows an authenticated attacker to write a file to any location on the filesystem via path traversal...

CVE-2023-45686

CVE-2023-45686 affects South River Technologies’ Titan MFT and Titan SFTP servers. The root cause is insufficient path validation in WebDAV handling, enabling an authenticated attacker to perform path traversal and write a file to an arbitrary location on the filesystem (Linux). The issue is post...

CVE-2023-45685

CVE-2023-45685 (and related CVEs 45686–45690) affect South River Technologies Titan MFT and Titan SFTP servers on Windows and Linux. The issues stem from insufficient path validation and path traversal, enabling an authenticated attacker (often with administrative/privileged access) to perform ac...

CVE-2023-33188: Unintended Proxy or Intermediary

Omni-notes is an open source note-taking application for Android. The Omni-notes Android app had an insufficient path validation vulnerability when displaying the details of a note received through an externally-provided intent. The paths of the note's attachments were not properly validated,...

ownCloud: GitHub Security Lab (GHSL) Vulnerability Report: Insufficient path validation in ReceiveExternalFilesActivity.java (GHSL-2022-060)

The Owncloud Android app was found to have insufficient path validation in the ReceiveExternalFilesActivity activity, allowing attackers to read from and write to the application's internal storage. This could be exploited by uploading arbitrary files from the app's internal storage or by writing...

PT-2021-7454

Name of the Vulnerable Software and Affected Versions Moxa MXView affected versions not specified Description The issue is related to insufficient path validation in a directory with restricted access. This can be exploited by a remote attacker to read arbitrary files. Recommendations At the...

PT-2021-7805

Name of the Vulnerable Software and Affected Versions Emerson Rosemount X-STREAM Gas Analyzer affected versions not specified Description A vulnerability has been found in the Emerson Rosemount X-STREAM Gas Analyzer, allowing access to stored data through specially crafted URLs. The issue is...

CVE-2021-1532: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the video endpoint API xAPI of Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software could allow an authenticated, remote attacker to read arbitrary files from the underlying operating system. This vulnerability is due to insufficient path validation o...

FreeBSD : AccountService -- Insufficient path check in user_change_icon_file_authorized_cb() (75aae50b-9e3c-11eb-9bc3-8c164582fbac)

NVD reports : Directory Traversal with ../ sequences occurs in AccountsService before 0.6.50 because of an insufficient path check in userchangeiconfileauthorizedcb in user.c. C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from the FreeBSD...

Cisco Data Center Network Manager Path Traversal Vulnerability (CNVD-2021-09308)

Cisco Data Center Network Manager DCNM is a suite of data center network managers from Cisco that provides multiprotocol management of the network and troubleshooting of switch operating conditions and performance. A path traversal vulnerability exists in one of the REST API endpoints in Cisco Da...

CVE-2020-3237 Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability

A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, local attacker to overwrite arbitrary files in the virtual instance that is running on the affected device. The vulnerability is due to insufficient path restriction...

CVE-2020-3237 Cisco IOx Application Framework Arbitrary File Overwrite Vulnerability

A vulnerability in the Cisco Application Framework component of the Cisco IOx application environment could allow an authenticated, local attacker to overwrite arbitrary files in the virtual instance that is running on the affected device. The vulnerability is due to insufficient path restriction...

dotCMS CMSFilter Authentication Bypass (CVE-2020-6754)

An access control weakness exists in the dotCMS content management system. The vulnerability is due to insufficient path validation in the CMSFilter class...

Huawei EulerOS: Security Advisory for accountsservice (EulerOS-SA-2019-2443)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2019-11120

Insufficient path checking in the installer for IntelR Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2019-11120: Undefined Security Weakness

Insufficient path checking in the installer for IntelR Active System Console before version 8.0 Build 24 may allow an authenticated user to potentially enable escalation of privilege via local access...

PT-2019-4059

Name of the Vulnerable Software and Affected Versions IntelR Active System Console versions prior to 8.0 Build 24 Description The issue is related to insufficient path checking in the installer, which may allow an authenticated user to potentially enable escalation of privilege via local access. ...