The vulnerability of the Xerox FreeFlow Core platform for intelligent automation of work processes lies in the incorrect limitation of the path name to the restricted access catalog, allowing attackers to execute arbitrary commands.

The vulnerability of the Xerox FreeFlow Core platform for intelligent automation of work processes is related to an incorrect limitation on the name of the path to the restricted-access catalog. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

The vulnerability of the Jira JVM software product for data processing in Atlassian’s Jira Software Data Center and Server allows a perpetrator to execute arbitrary code.

The vulnerability of the Jira JVM software product for data processing in Atlassian’s Jira Software Data Center and Server products is related to an incorrect limitation on the path name to the directory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

The vulnerability of the Claude Code tool, related to incorrect restrictions on the path name to the restricted access catalog, allows attackers to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Claude Code code editor is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

Vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and Data Domain OS—due to incorrect path name restrictions in the restricted access directory—allows unauthorized individuals to gain unauthorized access to the compromised system and trigger service failure.

The vulnerability of data protection software through PowerProtect Data Domain backup, data protection software in the corporate environment using cloud technologies like APEX Protection Storage, PowerProtect DD Virtual Edition data protection platform, and the Data Domain OS operating system is...

The vulnerability of D-Link Nuclias Connect software for centralized control of wireless networks arises from incorrect path name restrictions in the restricted access directory. This allows attackers to delete any files they desire.

The vulnerability of D-Link Nuclias Connect wireless network management software is related to an incorrect path name limitation in the access-limited directory. Exploiting this vulnerability could allow a remote attacker to delete any files they desire...

The vulnerability of AndSoft e-TMS software management system for transportation transportations lies in the improper restriction of path names to the catalog, without taking measures to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of AndSoft e-TMS software management system for transportation transport is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

The vulnerability of the Cisco Nexus Dashboard Fabric Controller (NDFC) platform, related to incorrect restrictions on the path name to the restricted catalog, allows a perpetrator to increase their privileges.

The vulnerability of the Cisco Nexus Dashboard Fabric Controller NDFC network resource management platform is related to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to increase their privileges remotely...

The vulnerability of AndSoft e-TMS software management system for transportation transportations lies in the improper limitation of the path name when accessing the catalog using unreliable cryptographic algorithms. This allows a hacker to gain unauthorized access to protected information.

The vulnerability of the AndSoft e-TMS transportation management software is related to the use of unreliable cryptographic algorithms. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

The vulnerability of AndSoft e-TMS software management system for transportation transportations lies in the improper restriction of path names to the catalog, without taking measures to protect the website structure. This allows attackers to perform cross-site scripting attacks (XSS).

The vulnerability of AndSoft e-TMS software management system for transportation transport is related to the lack of measures taken to protect the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS remotely...

EUVD-2005-1453

Malware in sbrugna...

EUVD-2022-1255

Malicious code in bioql PyPI...

The vulnerability of Cisco IOS XE operating systems, related to incorrect restrictions on path names in restricted access directories, allows attackers to circumvent existing security restrictions.

The vulnerability of Cisco IOS XE operating systems is related to incorrect restrictions on path names in the restricted access directory. Exploiting this vulnerability can allow attackers to bypass existing security restrictions...

The vulnerability of the ColdFusion software platform lies in the incorrect limitation of the path name for the restricted access catalog, allowing attackers to write arbitrary files.

The vulnerability of the ColdFusion software platform is related to incorrect restrictions on path names in the restricted access catalog. Exploiting this vulnerability allows a malicious actor to write arbitrary files...

The vulnerability of the Q-Free MaxTime traffic light control software lies in improper restrictions on path names in the directory structure, allowing a violator to gain unauthorized access to protected information.

The vulnerability of the Q-Free MaxTime traffic light management software is related to an incorrect limitation on the path name for the maxtime/api/database/database. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information through a...

The vulnerability of the Q-Free MaxTime traffic light control software lies in improper restrictions on path names in the directory structure. This allows a violator to gain unauthorized access to protected information and increase their privileges.

The vulnerability of the Q-Free MaxTime traffic light control software is related to an incorrect limitation on the path name for accessing the maxtime/api/database/database. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information and enhan...

The vulnerability of the Q-Free MaxTime traffic light control software lies in the improper limitation of the path name in the directory structure, allowing a violator to gain unauthorized access to protected information.

The vulnerability of the Q-Free MaxTime traffic light management software is related to an incorrect restriction on the path name for the maxtime/api/database/database. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information through a...

The vulnerability of the integration IoT/SCADA platform Delta Industrial Automation DIALink, which stems from incorrect naming restrictions on paths leading to restricted-access catalogs, allows a perpetrator to execute arbitrary codes.

The vulnerability of the integration IoT/SCADA platform Delta Industrial Automation DIALink is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability of the tar-fs package from the tar-stream library in the Node.js software platform allows a hacker to write arbitrary files.

The vulnerability of the tar-fs package from the tar-stream library for processing tar format files on Node.js software platforms is related to an incorrect path name limitation for the restricted access directory. Exploiting this vulnerability could allow a remote attacker to write arbitrary fil...

The vulnerability of the WinRAR file archiver, related to incorrect restrictions on the path name of the restricted directory, allows a hacker to execute arbitrary code.

The vulnerability of the WinRAR file archiver is related to incorrect restrictions on the path name of the restricted directory. Exploiting this vulnerability allows an attacker to execute arbitrary code during the extraction of a specially crafted file...

The vulnerability in the web interface of the microprogramming software for Digital Optical Network Systems Infinera G42 allows a intruder to gain unauthorized access to protected information.

The vulnerability of the web interface of Microprogramming Software for Digital Optical Network Systems Infinera G42 is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to...