2080 matches found
UBUNTU-CVE-2021-33910
basic/unit-name.c in systemd prior to 246.15, 247.8, 248.5, and 249.1 has a Memory Allocation with an Excessive Size Value involving strdupa and alloca for a pathname controlled by a local attacker that results in an operating system crash...
The vulnerability of the Python programming language’s pip module relates to deficiencies in pathname restrictions for directories, allowing attackers to compromise data integrity.
The vulnerability of the Python programming language’s pip module is related to shortcomings in pathname restrictions when specifying software for installation via URLs. Exploiting this vulnerability allows an attacker to compromise data integrity remotely...
CVE-2021-36376
dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory...
CVE-2021-36376
dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory...
CVE-2021-36376
dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory...
CVE-2021-36376
dandavison delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory...
PT-2021-20902 · Owasp · Owasp Modsecurity Core Rule Set
Name of the Vulnerable Software and Affected Versions: OWASP ModSecurity Core Rule Set versions 3.1.x through 3.1.1 OWASP ModSecurity Core Rule Set versions 3.2.x through 3.2.0 OWASP ModSecurity Core Rule Set versions 3.3.x through 3.3.1 Description: The issue is related to a Request Body Bypass...
CVE-2020-7387
Sage X3 Installation Pathname Disclosure. A specially crafted packet can elicit a response from the AdxDSrv.exe component that reveals the installation directory of the product. Note that this vulnerability can be combined with CVE-2020-7388 to achieve full RCE. This issue was fixed in AdxAdmin...
CVE-2021-32708 Time-of-check Time-of-use (TOCTOU) Race Condition in league/flysystem
Flysystem is an open source file storage library for PHP. The whitespace normalisation using in 1.x and 2.x removes any unicode whitespace. Under certain specific conditions this could potentially allow a malicious user to execute code remotely. The conditions are: A user is allowed to supply the...
VX Search 13.5.28 Unquoted Service Path
Exploit Title: VX Search 13.5.28 - 'Multiple' Unquoted Service Path Discovery by: Brian Rodriguez Date: 16-06-2021 Vendor Homepage: https://www.vxsearch.com Software Links: https://www.vxsearch.com/setupsx64/vxsearchsrvsetupv13.5.28x64.exe...
Sync Breeze 13.6.18 - (Multiple) Unquoted Service Path Vulnerability
Exploit Title: Sync Breeze 13.6.18 - 'Multiple' Unquoted Service Path Discovery by: Brian Rodriguez Vendor Homepage: https://www.syncbreeze.com/ Software Links: https://www.syncbreeze.com/setupsx64/syncbreezesrvsetupv13.6.18x64.exe...
CVE-2021-34551
PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...
CVE-2021-34551
PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...
Remote code execution
PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...
CVE-2021-34551
PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...
CVE-2021-34551
PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...
CVE-2021-34551
PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...
CVE-2021-34551: Unrestricted Upload of File with Dangerous Type
PHPMailer before 6.5.0 on Windows allows remote code execution if langpath is untrusted data and has a UNC pathname...
PT-2021-3321 · Phpmailer · Phpmailer
Name of the Vulnerable Software and Affected Versions: PHPMailer versions prior to 6.5.0 Description: The issue is related to errors in handling the lang path parameter in the setLanguage function of the PHPMailer library. This can allow a remote attacker to execute arbitrary code if the lang pat...
CVE-2021-22762
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in remote code execution, when a malicious CGF or WSP file is being parsed by IGSS Definition...