1323 matches found
The vulnerability of Honeywell’s industrial portable computer operating system, related to deficiencies in pathname restriction, allows attackers to perform cross-site scripting attacks.
The vulnerability of Honeywell’s industrial portable computer operating system is related to deficiencies in pathname restriction. Exploiting this vulnerability could allow a malicious actor to perform cross-site scripting attacks remotely...
The vulnerability of the Apache HTTP Server’s web server, related to defects in pathname restriction, allows attackers to execute arbitrary code or read arbitrary files on the target system.
The vulnerability of the Apache HTTP Server is related to deficiencies in pathname restriction. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or read arbitrary files on the target system...
ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname
The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS inode pathname, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...
ntfs-3g: Heap buffer overflow triggered by a specially crafted NTFS inode pathname
The ntfs3g package is susceptible to a heap overflow on crafted input. When processing an NTFS inode pathname, proper bounds checking was not enforced leading to this software flaw. The highest threat from this vulnerability is to confidentiality, integrity, as well as system availability...
The vulnerability of TheFuck programming language package, related to deficiencies in pathname restrictions for directories, allows attackers to compromise data integrity and cause service failures.
The vulnerability of TheFuck programming language package is related to deficiencies in pathname restrictions for directories. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service failures...
Design/Logic Flaw
A CWE-22: Improper Limitation of a Pathname to a Restricted Directory vulnerability exists in Harmony/HMI Products Configured by Vijeo Designer all versions prior to V6.2 SP11 , Vijeo Designer Basic all versions prior to V1.2, or EcoStruxure Machine Expert all versions prior to V2.0 that could...
GHSA-5XG3-J2J6-RCX4 Relative Path Traversal in git-delta
git-delta before 0.8.3 on Windows resolves an executable's pathname as a relative path from the current directory...
PT-2021-5782 · Ntfs-3G +7 · Ntfs-3G +7
Name of the Vulnerable Software and Affected Versions: NTFS-3G versions prior to 2021.8.22 Description: The issue is related to a heap buffer overflow that can occur when a specially crafted NTFS inode pathname is supplied in an NTFS image. This can result in memory disclosure, denial of service,...
CVE-2021-37348
Nagios XI before version 5.8.5 is vulnerable to local file inclusion through improper limitation of a pathname in index.php...
CVE-2021-38572
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated...
CVE-2021-38573
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated...
CVE-2021-38572
CVE-2021-38572 affects Foxit Reader and Foxit PhantomPDF prior to 10.1.4, where the extractPages pathname is not validated, allowing an attacker to write to arbitrary files. The connected documents confirm the affected products and the root cause (unvalidated extractPages pathname). No exploitati...
CVE-2021-38572
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because the extractPages pathname is not validated...
CVE-2021-38573
An issue was discovered in Foxit Reader and PhantomPDF before 10.1.4. It allows writing to arbitrary files because a CombineFiles pathname is not validated...
CVE-2021-38573
Foxit Reader and Foxit PhantomPDF are affected by CVE-2021-38573. The vulnerability arises from not validating the CombineFiles pathname, enabling arbitrary file writes via this component/file handling; affected product versions are prior to 10.1.4. The issue is described across multiple sources ...
Foxit Reader和Foxit PhantomPDF 安全漏洞
Foxit Reader and Foxit PhantomPDF are both PDF document readers from the Chinese company Foxit. A security vulnerability exists in Foxit Reader and PhantomPDF versions prior to 10.1.4, which stems from the application allowing arbitrary files to be written because the extractPages pathname is not...
CVE-2015-2074
The File Repository Server FRS CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681...
CVE-2015-2074
The File Repository Server FRS CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681...
Design/Logic Flaw
The File Repository Server FRS CORBA listener in SAP BussinessObjects Edge 4.0 allows remote attackers to write to arbitrary files via a full pathname, aka SAP Note 2018681...