PT-2024-26698

Name of the Vulnerable Software and Affected Versions Strategery Migrations versions n/a through 1.0 Description The issue affects Strategery Migrations, allowing Path Traversal and File Manipulation due to an Improper Limitation of a Pathname to a Restricted Directory. Recommendations For versio...

Fedora: Security Advisory for rust-uu_rm (FEDORA-2024-40ee18b2e7)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2024-3322 Path Traversal in parisneo/lollms-webui

A path traversal vulnerability exists in the 'cybersecurity/codeguard' native personality of the parisneo/lollms-webui, affecting versions up to 9.5. The vulnerability arises from the improper limitation of a pathname to a restricted directory in the 'processfolder' function within...

[SECURITY] Fedora 39 Update: rust-uu_rm-0.0.23-3.fc39

rm uutils remove PATHNAME...

[SECURITY] Fedora 39 Update: rust-uu_dirname-0.0.23-3.fc39

Dirname uutils display parent directory of PATHNAME...

[SECURITY] Fedora 39 Update: rust-uu_basename-0.0.23-3.fc39

basename uutils display PATHNAME with leading directory components removed...

CVE-2024-37032: Improper Limitation of a Pathname to a Restricted Directory

Ollama before 0.1.34 does not validate the format of the digest sha256 with 64 hex digits when getting the model path, and thus mishandles the TestGetBlobsPath test cases such as fewer than 64 hex digits, more than 64 hex digits, or an initial ../ substring...

Sharp MFP Security Vulnerability

Sharp MFP is a series of multifunction printers from Sharp Japan. A security vulnerability exists in Sharp MFP that stems from a failure to properly neutralize a special element in a pathname that could cause the pathname to resolve to a location outside of a restricted directory, making it...

CVE-2024-36427: Improper Limitation of a Pathname to a Restricted Directory

The file-serving function in TARGIT Decision Suite before 24.06.19002 TARGIT Decision Suite 2024 – June allows authenticated attackers to read or write to server files via a crafted file request. This can allow code execution via a .xview file...

CVE-2024-34854: Improper Limitation of a Pathname to a Restricted Directory

F-logic DataCube3 v1.0 is vulnerable to File Upload via /admin/transceiverschedule.php...

Fedora: Security Advisory for rust-uu_basename (FEDORA-2024-ce2936b568)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] Fedora 40 Update: rust-uu_rm-0.0.23-3.fc40

rm uutils remove PATHNAME...

[SECURITY] Fedora 40 Update: rust-uu_dirname-0.0.23-3.fc40

Dirname uutils display parent directory of PATHNAME...

[SECURITY] Fedora 40 Update: rust-uu_basename-0.0.23-3.fc40

basename uutils display PATHNAME with leading directory components removed...

CVE-2024-36079: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in Vaultize 21.07.27. When uploading files, there is no check that the filename parameter is correct. As a result, a temporary file will be created outside the specified directory when the file is downloaded. To exploit this, an authenticated user would upload a file with ...

CVE-2023-24379 WordPress Landing Page Builder – Free Landing Page Templates plugin <= 3.1.9.9 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Web-Settler Landing Page Builder – Free Landing Page Templates allows Path Traversal.This issue affects Landing Page Builder – Free Landing Page Templates: from n/a through 3.1.9.9...

CVE-2024-34808: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in Samuel Marshall JCH Optimize.This issue affects JCH Optimize: from n/a through 4.2.0...

CVE-2024-27810: Improper Limitation of a Pathname to a Restricted Directory

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Monterey 12.7.5, macOS Sonoma 14.5, macOS Ventura 13.6.7, tvOS 17.5, watchOS 10.5. An app may be able to read sensitive location information...

CVE-2024-27821: Improper Limitation of a Pathname to a Restricted Directory

A path handling issue was addressed with improved validation. This issue is fixed in iOS 17.5 and iPadOS 17.5, macOS Sonoma 14.5, watchOS 10.5. A shortcut may output sensitive user data without consent...

CVE-2024-32465: Improper Limitation of a Pathname to a Restricted Directory

Git is a revision control system. The Git project recommends to avoid working in untrusted repositories, and instead to clone it first with git clone --no-local to obtain a clean copy. Git has specific protections to make that a safe operation even with an untrusted source repository, but...