Lucene search
+L

41 matches found

BDU FSTEC
BDU FSTEC
•added 2026/09/25 12:00 a.m.•12 views

The vulnerability of the Python programming language’s pip module allows attackers to gain unauthorized access to protected information.

The vulnerability of the Python programming language’s pip module is related to incorrect pathname restrictions for directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

4.6CVSS6.5AI score0.00292EPSS
SaveExploits0References14Affected Software5
Redos
Redos
•added 2026/06/17 12:00 a.m.•23 views

ROS-20260617-73-0021

The vulnerability of the console-based graphic editor ImageMagick is related to deficiencies in pathname restrictions for the directory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

8.6CVSS7.6AI score0.00807EPSS
SaveExploits0
Redos
Redos
•added 2026/06/17 12:00 a.m.•28 views

ROS-20260617-73-0022

The vulnerability of the console-based graphic editor ImageMagick is related to deficiencies in pathname restrictions for the directory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential data...

8.6CVSS7.6AI score0.00807EPSS
SaveExploits0
BDU FSTEC
BDU FSTEC
•added 2026/06/10 12:00 a.m.•17 views

NVIDIA Triton Inference Server Path Traversal

The vulnerability of the software for deploying and executing NVIDIA Triton Inference Server previously known as TensorRT Inference Server is related to incorrect path name restrictions in the catalog. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information or...

4.8CVSS5.7AI score0.0048EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/05/12 12:00 a.m.•19 views

httprequesthandler.py Code Execution

The vulnerability of the functions BaseHttpRequestHandler.post and aseHttpRequestHandler.gettemproot in the httprequesthandler.py component, a library for uploading dash-uploader files, is related to an incorrect pathname limitation. Exploiting this vulnerability could allow a remote attacker to...

10CVSS7.6AI score0.06142EPSS
SaveExploits4References5Affected Software1
BDU FSTEC
BDU FSTEC
•added 2026/03/17 12:00 a.m.•47 views

Online Store Path Traversal

The vulnerability of software platforms for developing and managing online stores such as Magento Open Source, Adobe Commerce, and Adobe Commerce B2B is related to incorrect path name restrictions. Exploiting this vulnerability can allow attackers to bypass security restrictions remotely...

6.8CVSS6.4AI score0.00648EPSS
SaveExploits0References2Affected Software3
CNNVD
CNNVD
•added 2025/05/06 12:00 a.m.•23 views

Dell Storage Manager 路径遍历漏洞

Dell Storage Manager is a centralized storage management platform from Dell that supports the configuration, monitoring and automated operation and maintenance of the full range of Dell EMC storage systems. A path traversal vulnerability exists in Dell Storage Manager, which stems from an...

4.3CVSS6.6AI score0.00278EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2025/04/22 12:00 a.m.•21 views

NVIDIA Nemo Framework 路径遍历漏洞

NVIDIA Nemo Framework is a framework for building and deploying generative AI models from NVIDIA. A path traversal vulnerability exists in NVIDIA Nemo Framework, which stems from an improper pathname restriction that could lead to arbitrary file writes and code execution...

9.8CVSS9AI score0.00625EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2025/04/15 12:00 a.m.•34 views

Linksys Velop WHW01 Path Traversal Privilege Escalation

The vulnerability of Linksys Velop WHW01 microprogrammed software lies in the incorrect limitation of the path name to the restricted access directory. Exploiting this vulnerability can allow an attacker to increase their privileges...

9CVSS5.5AI score0.02902EPSS
SaveExploits1References3Affected Software1
CNNVD
CNNVD
•added 2025/04/03 12:00 a.m.•17 views

WordPress plugin Docxpresso 路径遍历漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

5.9CVSS6.6AI score0.00475EPSS
SaveExploits0References1
BDU FSTEC
BDU FSTEC
•added 2023/12/26 12:00 a.m.•15 views

UnRAR Decompression Path Traversal

The vulnerability of the UnRAR decompression tool is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker operating remotely to gain access to confidential data...

7.8CVSS7AI score0.03048EPSS
SaveExploits1References6Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/11/09 12:00 a.m.•21 views

FortiWeb web applications Path Traversal

The vulnerability of FortiWeb web applications’ network firewalls exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information through specially crafted web requests...

6.8CVSS6.5AI score0.00558EPSS
SaveExploits0References2Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/10/29 12:00 a.m.•17 views

Eclipse Rich Client Platform FileUploadProcessor Code Execution

The vulnerability of the FileUploadProcessor.stripFileNameString name method in the Eclipse Rich Client Platform plugin suite is related to deficiencies in pathname restrictions. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

10CVSS8.1AI score0.0125EPSS
SaveExploits1References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/09/16 12:00 a.m.•34 views

Argo CD Pathname Restriction Unauthorized Access

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

6.8CVSS6.1AI score0.0096EPSS
SaveExploits0References4Affected Software2
BDU FSTEC
BDU FSTEC
•added 2023/09/12 12:00 a.m.•28 views

GitPython Symbolic XSS

The vulnerability of the symbolic.py component in the Python library for interacting with git repositories in GitPython is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

6.5CVSS6.3AI score0.01093EPSS
SaveExploits1References6Affected Software3
BDU FSTEC
BDU FSTEC
•added 2023/07/20 12:00 a.m.•22 views

DICOM Library Confidential Data Access

The vulnerability of the library for working with the DICOM format in DCMT is related to deficiencies in pathname restrictions for accessing the catalog. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...

10CVSS6.9AI score0.03288EPSS
SaveExploits0References10Affected Software5
SUSE CVE
SUSE CVE
•added 2023/02/15 5:07 a.m.•10 views

SUSE CVE-2016-1656

The download implementation in Google Chrome before 50.0.2661.75 on Android allows remote attackers to bypass intended pathname restrictions via unspecified vectors...

7.5CVSS9.1AI score0.01243EPSS
SaveExploits0References7
BDU FSTEC
BDU FSTEC
•added 2023/02/15 12:00 a.m.•23 views

Juniper Networks Junos HTTP Code Execution

The vulnerability of Juniper Networks Junos operating systems’ HTTP/HTTPS services exists due to incorrect pathname restrictions for access to restricted directories. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

10CVSS8.1AI score0.04843EPSS
SaveExploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
•added 2023/01/23 12:00 a.m.•20 views

Ruby Sinatra Name Path Limitation Confidential Data

The vulnerability of the Ruby Sinatra web application development framework is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability allows an attacker operating remotely to gain access to confidential data...

7.8CVSS6.6AI score0.02137EPSS
SaveExploits0References10Affected Software6
CNNVD
CNNVD
•added 2022/10/12 12:00 a.m.•22 views

Adobe ColdFusion 路径遍历漏洞

Adobe ColdFusion is a rapid application development platform from Adobe, which includes an integrated development environment and scripting language. Adobe ColdFusion is vulnerable to a path traversal vulnerability, which stems from an improper restriction of pathnames to restricted directories,...

4.9CVSS6.3AI score0.45697EPSS
SaveExploits0References3
Rows per page
Query Builder