JFrog Artifactory Path Traversal

The vulnerability of the JFrog Artifactory repository management platform is related to deficiencies in path name restrictions for restricted catalogs. Exploiting this vulnerability could allow a malicious actor to write arbitrary files...

ROS-20260707-73-0010

The vulnerability in rubygem-yard is related to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

MICSENS NMP Web+ Path Traversal

The vulnerability of the MICROSENS NMP Web+ network management platform lies in incorrect restrictions on the path name to the restricted catalog. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

Internet Explorer Path Traversal

The vulnerability of the Internet Explorer browser is related to incorrect restrictions on the path to the restricted access catalog. Exploiting this vulnerability allows a remote attacker to execute arbitrary code or gain increased privileges within the system...

Delta Industrial Automation DIALink Path Traversal Code Execution

The vulnerability of the integration IoT/SCADA platform Delta Industrial Automation DIALink is related to an incorrect restriction on the path name to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code...

Fortinet Path Traversal

The vulnerability of Fortinet’s software products is related to incorrect restrictions on path names in the restricted access catalog. Exploiting this vulnerability allows a malicious actor to overwrite arbitrary files remotely...

Booco business automation platform Path Traversal

The vulnerability of the Booco business automation platform is related to an incorrect restriction on the path name for restricted access catalogs. Exploiting this vulnerability allows a malicious actor to create or re-record files in file system catalogs and execute arbitrary code...

Linksys Velop WHW01 Path Traversal Privilege Escalation

The vulnerability of Linksys Velop WHW01 microprogrammed software lies in the incorrect limitation of the path name to the restricted access directory. Exploiting this vulnerability can allow an attacker to increase their privileges...

Xerox Workplace Suite Print Server Path Traversal

The vulnerability of the Xerox Workplace Suite print management server is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability can allow a malicious actor to gain read, modify, or delete access to data...

Fortinet Path Traversal Privilege Escalation

The vulnerability of Fortinet’s software products is related to incorrect restrictions on path names in the restricted access catalog. Exploiting this vulnerability can allow attackers to enhance their privileges through specially created packages...

Platypus.js Path Traversal Confidential Data

The vulnerability of the Platypus.js tooling platform is related to an incorrect restriction on the path name to the restricted-access catalog. Allowing this to be exploited could enable a malicious actor to gain access to confidential data...

Magento Path Traversal

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to incorrect path name restrictions for access to restricted catalogs. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files...

QTS QuTS hero QuTScloud Network Device Path Traversal

The vulnerability of QTS, QuTS Hero, and QuTScloud network devices from QNAP operating systems is related to incorrect path name restrictions in the restricted access catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information remotely...

Adobe RoboHelp Server Path Traversal

The vulnerability of server-based corporate software for project monitoring and management in Adobe RoboHelp Server relates to incorrect path name restrictions for restricted access directories. Exploitation of this vulnerability could allow an attacker to execute arbitrary code remotely...

FortiWeb web applications Path Traversal

The vulnerability of FortiWeb web applications’ network firewalls exists due to an incorrect restriction on the path name to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor to disclose protected information through specially crafted web requests...

Emerson Rosemount X-STREAM Enhanced Unauthorized Access

The vulnerability of Emerson Rosemount X-STREAM Enhanced flow analyzers’ microprogramming software is related to deficiencies in the name-based path restriction mechanism for access to restricted catalogs. Exploiting this vulnerability could allow an attacker to gain unauthorized access to...

Fortinet FortiPortal Path Traversal

The vulnerability of the Fortinet FortiPortal security analysis and management tool is related to an incorrect restriction on the path name to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information through a special...

Magento Path Traversal

The vulnerability of the Magento Open Source and Adobe Commerce software platforms for developing and managing online stores is related to incorrect path name restrictions for access to restricted catalogs. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code in t...

OPPO 5G Router Path Traversal

The vulnerability of OPPO’s 5G router web application is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

SAP NetWeaver Java Application Server Path Traversal

The vulnerability of SAP NetWeaver Java Application Server web applications relates to incorrect restrictions on the path name to the restricted directory. Exploiting this vulnerability allows an attacker, operating remotely, to gain unauthorized access to protected information by sending a...