Lucene search
+L

80 matches found

BDU FSTEC
BDU FSTEC
added 2026/07/20 12:00 a.m.10 views

The vulnerability of the ColdFusion software platform arises from incorrect restrictions on path names in the catalog, allowing attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

9.9CVSS6.2AI score0.01097EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/07/20 12:00 a.m.9 views

The vulnerability of the ColdFusion software platform, related to incorrect restrictions on path names in the catalog, allows attackers to gain unauthorized access to protected information.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

6.8CVSS5.3AI score0.00468EPSS
SaveExploits0References2
BDU FSTEC
BDU FSTEC
added 2026/07/20 12:00 a.m.15 views

The vulnerability of the ColdFusion software platform arises from incorrect restrictions on path names in the catalog, allowing attackers to execute arbitrary code.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the directory structure. Exploiting this vulnerability allows an attacker who operates remotely to execute arbitrary code...

9.1CVSS6.2AI score0.3229EPSS
SaveExploits0References2
NVD
NVD
added 2026/07/14 6:17 p.m.20 views

CVE-2026-50510

Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally...

7.8CVSS0.00359EPSS
SaveExploits0References1
Microsoft CVE
Microsoft CVE
added 2026/07/14 2:00 p.m.19 views

GitHub Copilot Remote Code Execution Vulnerability

Improper restriction of names for files and other resources in Github Copilot allows an unauthorized attacker to execute code locally...

7.8CVSS6.2AI score0.00359EPSS
SaveExploits0
Redos
Redos
added 2026/07/13 12:00 a.m.16 views

ROS-20260713-73-0042

The vulnerability in python-mako is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to protected information...

8.7CVSS6.1AI score0.00361EPSS
SaveExploits0
EUVD
EUVD
added 2026/06/25 7:40 p.m.28 views

EUVD-2026-39549

Certificates with wildcard DNS SANs e.g. .example.com bypassed CA name-constraint checks. A certificate with a wildcard DNS SAN that should be rejected by the issuing CA's permitted/excluded DNS name constraints could be accepted...

6.3CVSS5.8AI score0.00199EPSS
SaveExploits0References2
GithubExploit
GithubExploit
added 2026/06/17 6:08 a.m.102 views

Exploit for Improper Restriction of Names for Files and Other Resources in Microsoft

cve-id ⚡ Simple Usage Use this project only in safe and...

8.8CVSS8.3AI score0.04028EPSS
SaveExploits29
BDU FSTEC
BDU FSTEC
added 2026/05/18 12:00 a.m.11 views

The vulnerability of the node-tar library on the Node.js software platform allows attackers to gain unauthorized access to protected information.

The vulnerability of the node-tar library in the Node.js software platform is related to an incorrect limitation on the path name for the restricted-access directory. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

6.3CVSS5.8AI score0.00439EPSS
SaveExploits2References5Affected Software2
Redos
Redos
added 2026/04/30 12:00 a.m.19 views

ROS-20260430-73-0004

Vulnerability in buildkit related to incorrect path name restriction to a restricted directory. Exploitation of the vulnerability may allow a remote attacker to gain unauthorized access to protected information...

9.8CVSS5.4AI score0.00498EPSS
SaveExploits0
CNNVD
CNNVD
added 2026/03/13 12:00 a.m.18 views

Erlang/OTP 安全漏洞

Erlang/OTP is an open-source JavaScript library for handling exceptions. This library can catch exceptions caused by Node.js’s built-in APIs. Versions 17.0 to 28.4.1, 27.3.4.9, and 26.2.5.18 of Erlang/OTP contain security vulnerabilities due to improper path name restrictions, which may lead to...

5.4CVSS7.1AI score0.00363EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
added 2026/03/12 12:00 a.m.13 views

The vulnerability of Active Directory Domain Services (AD DS) on Windows operating systems allows a perpetrator to increase their privileges.

The vulnerability of Active Directory Domain Services AD DS on Windows operating systems is related to incorrect restrictions on file names and other resources. Exploiting this vulnerability can allow a malicious actor to increase their privileges remotely...

9CVSS5.3AI score0.01282EPSS
SaveExploits1References3Affected Software21
OSV
OSV
added 2026/03/10 6:18 p.m.13 views

CVE-2026-25177

Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.01282EPSS
SaveExploits1References1
attackerkb
attackerkb
added 2026/03/10 5:04 p.m.10 views

CVE-2026-25177

Improper restriction of names for files and other resources in Active Directory Domain Services allows an authorized attacker to elevate privileges over a network...

8.8CVSS5.8AI score0.01282EPSS
SaveExploits1References2Affected Software21
CNNVD
CNNVD
added 2026/02/26 12:00 a.m.24 views

Hexpm 安全漏洞

Hexpm is a web page and interface developed by Hex. Hexpm has a security vulnerability, which stems from improper path name restrictions, potentially leading to relative path traversal...

7.5CVSS5.8AI score0.00409EPSS
SaveExploits0References3
CNNVD
CNNVD
added 2026/02/20 12:00 a.m.22 views

WordPress plugin User Extra Fields 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions of...

7.7CVSS5.8AI score0.00474EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/02/20 12:00 a.m.18 views

WordPress plugin User Extra Fields 路径遍历漏洞

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application extension. Versions of...

8.6CVSS5.8AI score0.00538EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2026/01/22 12:00 a.m.17 views

WordPress plugin Anona: Path traversal vulnerability

WordPress and WordPress plugins are both products of the WordPress Foundation. WordPress is a blog platform developed using the PHP language. This platform allows users to create personal blog websites on servers based on PHP and MySQL. A WordPress plugin is an application that can be installed t...

8.6CVSS5.8AI score0.00516EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
added 2026/01/19 12:00 a.m.11 views

The vulnerability of the Node.js software platform, related to incorrect restrictions on path names for directories with restricted access, allows attackers to compromise the system.

The vulnerability of the Node.js software platform is related to incorrect restrictions on path names for directories with restricted access. Exploiting this vulnerability can allow an attacker to compromise the system...

7.7CVSS7.4AI score0.01723EPSS
SaveExploits2References3
BDU FSTEC
BDU FSTEC
added 2025/11/12 12:00 a.m.17 views

The vulnerability of the Docker Compose tool for managing multi-container applications arises from incorrect path name restrictions for restricted access directories. This allows attackers to re-record arbitrary files.

The vulnerability of the Docker Compose tool for managing multi-container applications is related to incorrect path name restrictions for restricted access directories. Exploiting this vulnerability could allow a malicious actor to re-record arbitrary files...

10CVSS7.7AI score0.13653EPSS
SaveExploits0References7Affected Software3
Rows per page
Query Builder