The vulnerability of the fs/nfsd/nfs3xdr.c component in the Linux operating system allows a hacker to execute arbitrary code.

The vulnerability of the fs/nfsd/nfs3xdr.c component in the Linux operating system is related to an incorrect limitation on the path name for the restricted-access directory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by calling READDIRPLUS...

The vulnerability of the IOx software platform for Cisco IOS XE and Cisco IOS operating systems, as well as the Cisco IC3000 Industrial Compute Gateway hardware security solution, arises from incorrect restrictions on path names in the restricted access directory. This allows attackers to compromise the confidentiality and integrity of the protected information.

The vulnerability of the IOx software platform for Cisco IOS XE and Cisco IOS operating systems, as well as the Cisco IC3000 Industrial Compute Gateway hardware security solution, is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this...

The vulnerability in the web interface of the Cisco IOS XE operating system allows a hacker to elevate their privileges to the root level.

The vulnerability in the Cisco IOS XE operating system’s web interface relates to incorrect restrictions on the path name of the restricted access directory. Exploiting this vulnerability allows a malicious actor to elevate their privileges to the root level remotely...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

Design/Logic Flaw

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

CVE-2021-20206

CVE-2021-20206 involves containernetworking/cni before 0.8.1 where the network configuration field type can include path traversal ("../"), allowing an authenticated attacker to reference and execute binaries outside the plugin directory (e.g., reboot). Impact affects confidentiality, integrity, ...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni in versions before 0.8.1. When specifying the plugin to load in the 'type' field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the syste...

The vulnerability of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, is related to incorrect path name restrictions for restricted access catalogs. This allows attackers to execute arbitrary code.

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to incorrect path name restrictions for access to restricted catalogs. Exploiting these vulnerabilities can allow an...

PT-2021-7627 · Sinatra +7 · Sinatra +7

Name of the Vulnerable Software and Affected Versions: Sinatra versions prior to 2.2.0 Description: The issue is related to insufficient path name restrictions in the Ruby Sinatra web application framework, allowing a remote attacker to access confidential data. The vulnerability occurs because...

The vulnerability in the web interface of the Cisco Unified Communications Manager and Cisco Unified Communications Manager SME systems allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Cisco Unified Communications Manager and Cisco Unified Communications Manager SME web interface management interfaces is related to incorrect path name restrictions. Exploiting this vulnerability could allow an attacker to gain unauthorized access to protected information...

CVE-2021-20206

An improper limitation of path name flaw was found in containernetworking/cni. When specifying the plugin to load in the type field in the network configuration, it is possible to use special elements such as "../" separators to reference binaries elsewhere on the system. This flaw allows an...

Xen Management Tool DoS (XSA-323)

According to its self-reported version number, the Xen hypervisor installed on the remote host is affected by a denial of service vulnerability due to a bad path name limit in oxenstored. A malicious guest administrator can exploit this, by creating paths in the guest's own namespace that are too...

The vulnerability in the web-based management interface of Cisco SD-WAN allows a malicious actor to gain unauthorized access to protected information.

The vulnerability in the Cisco SD-WAN programmatically-defined network management web interface is related to an incorrect path name limitation for accessing the directory. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

The vulnerability of the Cisco Webex Meetings Desktop App’s software lies in the incorrect path name limitation, which allows a malicious actor to execute arbitrary code.

The vulnerability of the Cisco Webex Meetings Desktop App software-related web conferencing software is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a attacker to execute arbitrary code...

The vulnerability of the command-line interface (CLI) of the programmatically defined Cisco SD-WAN network allows a attacker to trigger a service failure.

The vulnerability of the command-line interface CLI of the programmatically defined Cisco SD-WAN network is related to an incorrect path name limitation for the directory. Exploiting this vulnerability could allow a attacker to cause service failures...

The vulnerability of Cisco Enterprise NFV Infrastructure Software (NFVIS) relates to incorrect path name restrictions for access-limited directories, allowing a perpetrator to re-record arbitrary files in the operating system of the vulnerable device.

The vulnerability of Cisco Enterprise NFV Infrastructure Software NFVIS is related to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability could allow a malicious actor to re-record any files in the operating system of the vulnerable device remotely...