Design/Logic Flaw

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...

CVE-2018-14907

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...

PT-2018-12792

Name of the Vulnerable Software and Affected Versions 3CX version 15.5.8801.3 Description The issue concerns improper error handling in stack traces, which can lead to information leakage. This is demonstrated by the possibility of discovering a full pathname. Recommendations For version...

CVE-2018-14907: Generation of Error Message Containing Sensitive Information

The Web server in 3CX version 15.5.8801.3 is vulnerable to Information Leakage, because of improper error handling in Stack traces, as demonstrated by discovering a full pathname...

CVE-2018-14362

An issue was discovered in Mutt before 1.10.1 and NeoMutt before 2018-07-16. pop.c does not forbid characters that may have unsafe interaction with message-cache pathnames, as demonstrated by a '/' character...

CVE-2018-14363

CVE-2018-14363 affects NeoMutt prior to 2018-07-16. The issue is in newsrc.c where it does not properly restrict the '/' character, which may interact unsafely with cache pathnames. The vulnerability could impact the integrity of cache-related data; the OpenVAS/SUSE advisories indicate numerous r...

CVE-2018-1103: Improper Limitation of a Pathname to a Restricted Directory

Openshift Enterprise source-to-image before version 1.1.10 is vulnerable to an improper validation of user input. An attacker who could trick a user into using the command to copy files locally, from a pod, could override files outside of the target directory of the command...

USN-3671-1 git vulnerabilities

Etienne Stalmans discovered that git did not properly validate git submodules files. A remote attacker could possibly use this to craft a git repo that causes arbitrary code execution when "git clone --recurse-submodules" is used. CVE-2018-11235 It was discovered that an integer overflow existed ...

CVE-2018-11233

In Git before 2.13.7, 2.14.x before 2.14.4, 2.15.x before 2.15.2, 2.16.x before 2.16.4, and 2.17.x before 2.17.1, code to sanity-check pathnames on NTFS can result in reading out-of-bounds memory...

Integer overflow

stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution...

CVE-2018-11236

stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution...

CVE-2018-11236

stdlib/canonicalize.c in the GNU C Library aka glibc or libc6 2.27 and earlier, when processing very long pathname arguments to the realpath function, could encounter an integer overflow on 32-bit architectures, leading to a stack-based buffer overflow and, potentially, arbitrary code execution...

CVE-2017-6020: Improper Limitation of a Pathname to a Restricted Directory

Leao Consultoria e Desenvolvimento de Sistemas LCDS LTDA ME LAquis SCADA software versions prior to version 4.1.0.3237 do not neutralize external input to ensure that users are not calling for absolute path sequences outside of their privilege level...

CVE-2018-10122

QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps pro1.6 allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to www/file.php...

PT-2018-9694

Name of the Vulnerable Software and Affected Versions: QingDao Nature Easy Soft Chanzhi Enterprise Portal System aka chanzhieps version pro1.6 Description: The issue allows remote attackers to read arbitrary files via directory traversal sequences in the pathname parameter to "www/file.php" API...

CVE-2018-9851

In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to read any file via a modified pathname in an Admin-Tpl request, as demonstrated by use of '|' instead of '/' as a directory separator, in conjunction with a ".." sequence...

CVE-2018-9851

In Gxlcms QY v1.0.0713, Lib\Lib\Action\Admin\TplAction.class.php allows remote attackers to read any file via a modified pathname in an Admin-Tpl request, as demonstrated by use of '|' instead of '/' as a directory separator, in conjunction with a ".." sequence...

PT-2018-19075

Name of the Vulnerable Software and Affected Versions Gxlcms QY version 1.0.0713 Description The issue allows remote attackers to read any file via a modified pathname in an Admin-Tpl request. This can be achieved by using '|' instead of '/' as a directory separator, in conjunction with a ".."...

CVE-2018-7586: Improper Limitation of a Pathname to a Restricted Directory

In the nextgen-gallery plugin before 2.2.50 for WordPress, gallery paths are not secured...

CVE-2017-14804: Improper Limitation of a Pathname to a Restricted Directory

The build package before 20171128 did not check directory names during extraction of build results that allowed untrusted builds to write outside of the target system,allowing escape out of buildroots...