CVE-2023-41682

A improper limitation of a pathname to a restricted directory 'path traversal' vulnerability in Fortinet FortiSandbox 4.4.0, FortiSandbox 4.2.1 through 4.2.5, FortiSandbox 4.0.0 through 4.0.3, FortiSandbox 3.2 all versions, FortiSandbox 3.1 all versions, FortiSandbox 3.0 all versions, FortiSandbo...

CVE-2022-35908: Improper Limitation of a Pathname to a Restricted Directory

Cambium Enterprise Wi-Fi System Software before 6.4.2 does not sanitize the ping host argument in device-agent...

CVE-2023-42487

Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2023-42487: Improper Limitation of a Pathname to a Restricted Directory

Soundminer – CWE-22: Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal'...

CVE-2023-40026: Improper Limitation of a Pathname to a Restricted Directory

Argo CD is a declarative continuous deployment framework for Kubernetes. In Argo CD versions prior to 2.3 starting at least in v0.1.0, but likely in any version using Helm before 2.3, using a specifically-crafted Helm file could reference external Helm charts handled by the same repo-server to le...

CVE-2023-42462: Improper Limitation of a Pathname to a Restricted Directory

GLPI stands for Gestionnaire Libre de Parc Informatique is a Free Asset and IT Management Software package, that provides ITIL Service Desk features, licenses tracking and software auditing. The document upload process can be diverted to delete some files. Users are advised to upgrade to version...

The vulnerability of the declarative delivery tool for GitOps on Kubernetes Argo CD, related to deficiencies in pathname restrictions for directories, allows attackers to gain unauthorized access to protected information.

The vulnerability of GitOps’ continuous delivery tool for Kubernetes Argo CD is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow an attacker operating remotely to gain unauthorized access to protected information...

Debian dla-3563 : ctdb - security update

The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3563 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3563-1 [email protected]...

Strapi Improper Rate Limiting vulnerability

Summary There is a rate limit on the login function of Strapi's admin screen, but it is possible to circumvent it. 2. Details It is possible to avoid this by modifying the rate-limited request path as follows. 1. Manipulating request paths to upper or lower case. Pattern 1 - In this case,...

The vulnerability of the symbolic.py component in the Python library for interacting with Git repositories in GitPython allows a malicious individual to gain unauthorized access to protected information or cause service failures.

The vulnerability of the symbolic.py component in the Python library for interacting with git repositories in GitPython is related to shortcomings in pathname restrictions for directories. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected...

CVE-2023-2971: Improper Limitation of a Pathname to a Restricted Directory

Improper path handling in Typora before 1.7.0-dev on Windows and Linux allows a crafted webpage to access local files and exfiltrate them to remote web servers via "typora://app/typemark/". This vulnerability can be exploited if a user opens a malicious markdown file in Typora, or copies text fro...

CVE-2023-39400: Improper Limitation of a Pathname to a Restricted Directory

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization...

CVE-2023-39401: Improper Limitation of a Pathname to a Restricted Directory

Parameter verification vulnerability in the installd module. Successful exploitation of this vulnerability may cause sandbox files to be read and written without authorization...

CVE-2023-38176: Improper Limitation of a Pathname to a Restricted Directory

Azure Arc-Enabled Servers Elevation of Privilege Vulnerability...

CVE-2023-38695: Improper Limitation of a Pathname to a Restricted Directory

cypress-image-snapshot shows visual regressions in Cypress with jest-image-snapshot. Prior to version 8.0.2, it's possible for a user to pass a relative file path for the snapshot name and reach outside of the project directory into the machine running the test. This issue has been patched in...

CVE-2023-0956: Improper Limitation of a Pathname to a Restricted Directory

External input could be used on TEL-STER TelWin SCADA WebInterface to construct paths to files and directories without properly neutralizing special elements within the pathname, which could allow an unauthenticated attacker to read files on the system...

CVE-2023-3385: Improper Limitation of a Pathname to a Restricted Directory

An issue has been discovered in GitLab affecting all versions starting from 8.10 before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16.2.2. Under specific circumstances, a user importing a project 'from export' could access and read unrelated file...

CVE-2023-31427: Improper Limitation of a Pathname to a Restricted Directory

Brocade Fabric OS versions before Brocade Fabric OS v9.1.1c, and v9.2.0 Could allow an authenticated, local user with knowledge of full path names inside Brocade Fabric OS to execute any command regardless of assigned privilege. Starting with Fabric OS v9.1.0, “root” account access is disabled...

CVE-2023-37218

CVE-2023-37218 affects Tadiran Telecom Aeonix (software UC&C). The vulnerability is a Path Traversal (CWE-22) due to improper limitation of a pathname to a restricted directory. Attack vector is NETWORK with no authentication required and no user interaction; CVSS 3.1 base score 7.5 (HIGH) with C...

The vulnerability of the library for working with the DICOM format allows a perpetrator to gain access to confidential data, compromise its integrity, and cause service interruptions.

The vulnerability of the library for working with the DICOM format in DCMT is related to deficiencies in pathname restrictions for accessing the catalog. Exploiting this vulnerability allows a malicious actor to gain access to confidential data, compromise its integrity, and cause service failure...