SINEC INS Network Path Traversal Unauthorized Access

The vulnerability of the SINEC INS network infrastructure management software is related to deficiencies in checking the path name when processing the final endpoint /api/sftp/uploadFiles. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized access to...

VMI web interface Privilege Escalation

The vulnerability in the VCenter Server Management Interface of the VMware vCenter Server web interface relates to deficiencies in path name checking for access to restricted directories. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information by...

Cisco IP Phones File Write

The vulnerability of the web interface of Cisco IP phones—IP Phone 8800, IP Conference Phone 8832, IP Phone 8821, and IP Phone 8821-EX—is related to deficiencies in path name checking for access-controlled directories. Exploiting this vulnerability allows a malicious actor to write arbitrary file...

PT-2016-3256

Name of the Vulnerable Software and Affected Versions HPE UCMDB versions v10.10 through v10.31 Description A Remote Code Execution issue was discovered, related to the UploadFileOnUIServerServlet component in HPE UCMDB. This issue is associated with inadequate path name checking in a directory wi...