The vulnerability of the AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction() function in the remote monitoring software with virtual private network capabilities, such as Advantech WebAccess/VPN, allows a intruder to gain unauthorized access to protected information.

The vulnerability of the AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction function in the remote monitoring software with virtual private network capabilities, such as Advantech WebAccess/VPN, is related to an incorrect restriction on the path to the restricted directory...

ROS-20251020-01

Vulnerability in open source external resource management software Terraform is associated with an incorrect restriction on the path name of a restricted directory. Exploitation of the vulnerability could allow an attacker to download arbitrary files...

The vulnerability of AndSoft e-TMS software management system for transportation transportations lies in the incorrect limitation of the path name to the restricted access catalog. This allows a intruder to gain unauthorized access to protected information.

The vulnerability of the AndSoft e-TMS transportation management software lies in the incorrect restriction of the path name when accessing the restricted catalog, especially during the processing of the docurl parameter. Exploiting this vulnerability can allow an attacker to gain unauthorized...

The vulnerability of the Frontol Mark Unit tax control service arises from improper restrictions on the path to the restricted access catalog, allowing a violator to gain unauthorized access to protected information.

The vulnerability of the Frontol Mark Unit tax control service is related to an incorrect limitation on the path to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected information...

EUVD-2011-1584

Malware in sbrugna...

EUVD-2013-3361

Malware in sbrugna...

EUVD-2020-24508

Malware in sbrugna...

EUVD-2022-2796

Malicious code in bioql PyPI...

EUVD-2022-1574

Malicious code in bioql PyPI...

ROS-20250925-04

Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of the directory with restricted directory. Python programming language interpreter CPython functions...

ROS-20250925-01

Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of the directory with restricted directory. Python programming language interpreter CPython functions...

ROS-20250925-03

Vulnerability of TarFile.extractall and TarFile.extract functions of tarfile module of Python programming language interpreter CPython is related to incorrect restriction of path name of the directory with restricted directory. Python programming language interpreter CPython functions...

The vulnerability of the integration IoT/SCADA platform Delta Industrial Automation DIALink, which stems from incorrect naming restrictions on paths leading to restricted-access catalogs, allows a perpetrator to execute arbitrary codes.

The vulnerability of the integration IoT/SCADA platform Delta Industrial Automation DIALink is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

The vulnerability in the `apply.cgi` script of the Linksys E1500 and E2500 router microprogramming system allows a intruder to gain unauthorized access to protected information.

The vulnerability of the apply.cgi script of the Linksys E1500 and E2500 router microprogramming system is related to an incorrect limitation on the path name to the restricted access directory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected informati...

The vulnerability of the Splunk Web platform for operational analysis in Splunk Enterprise allows a perpetrator to trigger a service failure.

The vulnerability of the Splunk Enterprise operational analytics web platform’s Splunk component is related to an incorrect limitation on the path to the directory. Exploiting this vulnerability could allow a malicious actor to cause service interruptions remotely...

The vulnerability of the Node.js software platform arises from incorrect restrictions on path names for restricted access directories. This allows attackers to gain read, modify, and delete permissions for files.

The vulnerability of the Node.js software platform is related to incorrect restrictions on path names in restricted access directories. Exploiting this vulnerability can allow an attacker to gain read, modify, and delete permissions for files...

PT-2025-34784

Name of the Vulnerable Software and Affected Versions: Kapsch TrafficCom RIS-9260 RSU LEO versions 3.2.0.829.23, 3.8.0.1119.42, and 4.6.0.1211.28 Description: The Kapsch TrafficCom RIS-9260 RSU LEO software has the Android Debug Bridge ADB pre-installed and enabled by default. This allows...

The vulnerability of the duplicate-data-source command in the Tableau Server analytical platform allows a hacker to gain unauthorized access to protected information.

The vulnerability of the “duplicate-data-source” command in the Tableau Server analytical platform is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

The vulnerability of the IBM Planning Analytics Local software for managing business efficiency lies in the incorrect restriction on the path to the restricted catalog. This allows attackers to bypass security restrictions and gain access to delete any arbitrary files.

The vulnerability of the IBM Planning Analytics Local software for managing business efficiency is related to an incorrect restriction on the path name in the restricted access directory. Exploiting this vulnerability allows a malicious actor to bypass security restrictions and gain access to...

The vulnerability of the Tidal component of the Alpine iLX-507 audio system allows a hacker to execute arbitrary code.

The vulnerability of the Tidal component of the Alpine iLX-507 audio system is related to an incorrect restriction on the name path to the restricted-access catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...