Cisco Secure Email and Web Manager Relative Path Handling

The vulnerabilities of Cisco Secure Email and Web Manager, as well as Cisco Secure Email Gateway, are related to deficiencies in the handling of relative paths. Exploiting these vulnerabilities can allow a malicious actor to compromise the confidentiality, integrity, and accessibility of the...

Windows Kernel Privilege Escalation

The vulnerability of the user interface kernel of the Windows operating system is related to errors in the mechanism for handling relative paths to directories. Exploiting this vulnerability can allow an attacker to increase their privileges...

Cisco Unity Connection Path Traversal

The vulnerability of the integrated Cisco Unity Connection messaging system is related to errors in the mechanism for processing relative paths to the catalog. Exploiting this vulnerability allows a malicious actor to download arbitrary files from the vulnerable system...

TrueConf Server RCE

The vulnerability of the TrueConf Server software lies in errors in the mechanism for handling relative paths to the directory. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

Fedora Repository Path Traversal DoS

The vulnerability related to the collection of embedded sub-directories on FTP or HTTP servers in the Fedora Repository is linked to errors in processing relative pathnames to directories. Exploiting this vulnerability could allow a malicious actor to delete arbitrary files from the file system b...

XWiki Platform WebJars XSS

The vulnerability of the org.xwiki.platform:xwiki-platform-webjars-api component of the XWiki Platform development platform is related to errors in processing the relative path to the directory. Exploiting this vulnerability could allow a malicious actor to compromise the confidentiality and...

Advisory ROSA-SA-2025-2969

software: ghostscript 9.56.1 OS: ROSA-CHROME unaffected versions = ghostscript-9.56.1-3 affected versions ghostscript-9.56.1-3 CVE-ID: CVE-2024-33870 BDU-ID: 2024-05063 CVE-Crit: MEDIUM CVE-DESC.: A vulnerability in the Ghostscript document processing, conversion, and generation software suite...

NVIDIA NeMo Path Traversal

The vulnerability of NVIDIA NeMo’s integrated platform for training and applying neural networks in speech processing and natural language processing is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow attackers to execute arbitrary code...

JetBrains TeamCity Path Traversal

The vulnerability of the Continuous Integration and Deployment Application Delivery system CI/CD of JetBrains TeamCity is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows a malicious actor to write backup files to arbitrary directories...

ghostscript: path traversal to arbitrary files if the current directory is in the permitted paths

A flaw was found in Ghostscript. When the gpvalidatepathlen function validates a path, it distinguishes between absolute and relative paths. In the case of relative paths, it will check the path with and without the current-directory-prefix "foo" and "./foo". This does not take into account paths...

Ollama System Arbitrary File Access

The vulnerability of Ollama’s system for running and managing large language models is related to errors in processing the relative path to the catalog. Exploiting this vulnerability can allow a malicious actor to gain access to arbitrary files within the vulnerable system...

NVIDIA Triton Inference Server Code Execution

The vulnerability of the NVIDIA Triton Inference Server previously known as TensorRT Inference Server software for deploying and executing artificial intelligence models is related to errors in processing the relative path to the catalog during model loading. Exploiting this vulnerability can all...

PT-2023-8256 · Nvidia · Nvidia Triton Inference Server

Name of the Vulnerable Software and Affected Versions: NVIDIA Triton Inference Server affected versions not specified Description: The issue is related to errors in processing relative paths to directories during model loading in NVIDIA Triton Inference Server. This can allow a remote attacker to...

ISaGRAF Runtime Code Execution

The vulnerability of the eXchange Layer component in the application development environment for ISaGRAF Runtime Rockwell Automation relates to errors in processing the relative path to the restricted-access directory. Exploiting this vulnerability may allow a remote attacker to execute arbitrary...

Keysight N6841A UserFirmwareRequestHandler Unauthenticated Access

The vulnerability of the UserFirmwareRequestHandler class implementation in the microprogramming software for sensors monitoring the Keysight N6841A spectrum, as well as the microprogramming software for geolocation servers from Keysight, the N6854A, is related to errors in processing the relativ...

TwinCAT OPC UA Server File Manipulation

The vulnerability of the TwinCAT OPC UA Server is related to errors in processing the relative path to the directory. Exploiting this vulnerability allows a malicious actor to create and delete arbitrary files within the system...