Arbitrary File Overwrite

keepalived is vulnerable to arbitrary file overwrite. The vulnerability exists as there is an improper pathname validation that allows for overwrite of arbitrary filenames via symlinks...

Moderate: Red Hat Security Advisory: keepalived security and bug fix update

An update for keepalived is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

CVE-2019-14322

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names such as C: in Windows pathnames...

CVE-2019-14322: Improper Limitation of a Pathname to a Restricted Directory

In Pallets Werkzeug before 0.15.5, SharedDataMiddleware mishandles drive names such as C: in Windows pathnames...

CVE-2019-1621: Improper Limitation of a Pathname to a Restricted Directory

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an unauthenticated, remote attacker to gain access to sensitive files on an affected device. The vulnerability is due to incorrect permissions settings on affected DCNM software. An attacke...

CVE-2019-9157: Improper Limitation of a Pathname to a Restricted Directory

Gemalto DS3 Authentication Server 2.6.1-SP01 allows Local File Disclosure...

CVE-2019-12459: Improper Limitation of a Pathname to a Restricted Directory

FileRun 2019.05.21 allows customizables/plugins/audioplayer Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12458: Improper Limitation of a Pathname to a Restricted Directory

FileRun 2019.05.21 allows css/ext-ux Directory Listing. This issue has been fixed in FileRun 2019.06.01...

CVE-2019-12277

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname...

CVE-2019-12277

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname...

Design/Logic Flaw

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname...

CVE-2019-12277

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname...

PT-2019-12729

Name of the Vulnerable Software and Affected Versions Blogifier versions prior to 2019-05-11 Description The issue is related to improper restriction of APIs, as demonstrated by missing checks for certain characters in a pathname. Recommendations For versions prior to 2019-05-11, update to a...

Blogifier design flaws

Blogifier is a lightweight open source blog system written using ASP.NET Core . Blogifier 2.3 prior to 2019-05-11 fails to restrict the API properly, as shown by the lack of a check in the pathname for... The check shown in the...

CVE-2019-12277: Improper Limitation of a Pathname to a Restricted Directory

Blogifier 2.3 before 2019-05-11 does not properly restrict APIs, as demonstrated by missing checks for .. in a pathname...

Arbitrary Code Execution

GNU C Library is vulnerable to arbitrary code execution attacks. This occurs in the stdlib/canonicalize.c when processing very long pathname arguments to the realpath function which may encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and potentially...

CVE-2017-18196

Leptonica 1.74.4 constructs unintended pathnames containing duplicated path components when operating on files in /tmp subdirectories, which might allow local users to bypass intended file restrictions by leveraging access to a directory located deeper within the /tmp directory tree, as...

The vulnerability of the urllib module in the Python programming language, related to deficiencies in pathname restrictions, allows attackers to gain access to confidential data and compromise its integrity.

The vulnerability of the urllib module in the Python programming language is related to errors in input validation. Exploiting this vulnerability allows an attacker to gain access to confidential data and compromise its integrity...

CVE-2019-9222: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in GitLab Community and Enterprise Edition before 11.6.10, 11.7.x before 11.7.6, and 11.8.x before 11.8.1. It has Insecure Permissions...

CVE-2019-9960: Improper Limitation of a Pathname to a Restricted Directory

The downloadZip function in application/controllers/admin/export.php in LimeSurvey through 3.16.1+190225 allows a relative path...