182 matches found
CVE-2025-21189: Improper Resolution of Path Equivalence
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2025-21332: Improper Resolution of Path Equivalence
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2025-21219: Improper Resolution of Path Equivalence
MapUrlToZone Security Feature Bypass Vulnerability...
CVE-2025-21328: Improper Resolution of Path Equivalence
MapUrlToZone Security Feature Bypass Vulnerability...
The vulnerability of the CORS mechanism implementation in Python PyPi storage solutions allows attackers to disclose protected information.
The vulnerability of the CORS mechanism implemented in Python PyPi software repositories is related to improper resolution of path equivalence. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
The vulnerability of the Security Zone Mapping component in Windows operating systems allows attackers to circumvent existing security restrictions.
The vulnerability of the Security Zone Mapping component in Windows operating systems is related to improper resolution of path equivalence. Exploiting this vulnerability can allow an attacker to bypass existing security restrictions...
CVE-2024-45405: Improper Resolution of Path Equivalence
gix-path is a crate of the gitoxide project an implementation of git written in Rust dealing paths and their conversions. Prior to version 0.10.11, gix-path runs git to find the path of a configuration file associated with the git installation, but improperly resolves paths containing unusual or...
CVE-2024-30036: Improper Resolution of Path Equivalence
Windows Deployment Services Information Disclosure Vulnerability...
CVE-2023-46169: Improper Resolution of Path Equivalence
IBM DS8900F HMC 89.21.19.0, 89.21.31.0, 89.30.68.0, 89.32.40.0, and 89.33.48.0 could allow an authenticated user to arbitrarily delete a file. IBM X-Force ID: 269406...
CVE-2023-36396: Improper Resolution of Path Equivalence
Windows Compressed Folder Remote Code Execution Vulnerability...
CVE-2023-34092: Path Equivalence: '//multiple/leading/slash'
Vite provides frontend tooling. Prior to versions 2.9.16, 3.2.7, 4.0.5, 4.1.5, 4.2.3, and 4.3.9, Vite Server Options server.fs.deny can be bypassed using double forward-slash // allows any unauthenticated user to read file from the Vite root-path of the application including the default fs.deny...
whmcs_plugin has an unspecified vulnerability
whmcsplugin is a whmcs plugin. whmcsplugin versions prior to 0.0.4 have a security vulnerability that stems from a path equivalence parsing error in the software. No detailed vulnerability details are currently available...
CVE-2022-0855
Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...
Input validation
Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...
CVE-2022-0855
Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...
PT-2022-13474
Name of the Vulnerable Software and Affected Versions whmcs plugin versions prior to 0.0.4 Description The issue is related to improper resolution of path equivalence in the GitHub repository microweber-dev/whmcs plugin. Recommendations For versions prior to 0.0.4, update to version 0.0.4 or late...
CVE-2022-0855: Improper Resolution of Path Equivalence
Improper Resolution of Path Equivalence in GitHub repository microweber-dev/whmcsplugin prior to 0.0.4...
whmcs_plugin 安全漏洞
whmcsplugin is a whmcs plugin. whmcsplugin versions prior to 0.0.4 have a security vulnerability that stems from a path equivalence parsing error in the software. No detailed vulnerability details are currently available...
The vulnerability of the LibreLogo software module of the LibreOffice office software package allows a hacker to execute arbitrary code on the target system.
The vulnerability of the LibreLogo software module in the LibreOffice office software package stems from errors in calculating path equivalence. Exploiting this vulnerability allows a malicious actor to execute arbitrary code on the target system using a specially crafted file...
CVE-2019-9855
LibreOffice is typically bundled with LibreLogo, a programmable turtle vector graphics script, which can execute arbitrary python commands contained with the document it is launched from. LibreOffice also has a feature where documents can specify that pre-installed scripts can be executed on...