8280 matches found
CVE-2025-58835
Improper Validation of Specified Quantity in Input vulnerability in calliko Bonus for Woo bonus-for-woo allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Bonus for Woo: from n/a through = 7.6.6...
CVE-2025-25048
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...
SUSE-SU-2025:20670-1 Security update for dpkg
This update for dpkg fixes the following issues: - CVE-2025-6297: Fixed cleanup for control member with restricted directories bsc1245573...
Security update for dpkg
This update for dpkg fixes the following issues: CVE-2025-6297: Fixed cleanup for control member with restricted directories bsc1245573. Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST onlineupdate or "zypper patch". Alternatively you can ru...
Eaton NMC G2 安全漏洞
Eaton NMC G2 is a network management card from Eaton Corporation USA. A security vulnerability exists in the Eaton NMC G2 that originates from a privileged attacker being able to modify the contents of non-sensitive files via path traversal in a CLI restricted shell...
CVE-2025-25048
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...
CVE-2025-25048
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...
CVE-2025-25048 IBM Jazz Foundation path traversal
IBM Jazz Foundation 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002 could allow an authenticated user to upload files to the system due to improper neutralization of sequences that can resolve to a restricted directory...
CVE-2025-25048
CVE-2025-25048 affects IBM Engineering Lifecycle Management - Jazz Foundation (versions 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002). The issue is a Relative Path Traversal caused by improper neutralization of sequences that can resolve to a restricte...
Akinsoft e-Mutabakat 安全漏洞
Akinsoft e-Mutabakat is an electronic statement software from Akinsoft Turkey. A security vulnerability exists in Akinsoft e-Mutabakat versions prior to 2.02.06, which stems from an improperly restricted authentication attempt that could lead to authentication bypass...
IBM Jazz Foundation 安全漏洞
IBM Jazz Foundation is a next-generation collaboration platform for software delivery technology from International Business Machines IBM. A security vulnerability exists in IBM Jazz Foundation versions 7.0.2 through 7.0.2 iFix033, 7.0.3 through 7.0.3 iFix012, and 7.1.0 through 7.1.0 iFix002, whi...
CVE-2025-9822 Secret data extraction via elfinder
SummaryA user with administrator rights can change the configuration of the mautic application and extract secrets that are not normally available. ImpactAn administrator who usually does not have access to certain parameters, such as database credentials, can disclose them...
Linux Distros Unpatched Vulnerability : CVE-2016-8642
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Moodle 2.x and 3.x, the question engine allows access to files that should not be available. CVE-2016-8642 Note that Nessus relies on the presence of the...
QNAP Systems File Station 5 Unlimited Resource Allocation Vulnerability
QNAP Systems File Station 5威联通QNAP presents a file management application for browsing, uploading, downloading and managing files and folders stored on NAS devices, remote servers or external storage devices. An unrestricted resource allocation vulnerability exists in QNAP Systems File Station 5,...
Linux Distros Unpatched Vulnerability : CVE-2025-2498
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - An improper access control in Gitlab EE affecting all versions from 12.0 prior to 18.0.6, 18.1 prior to 18.1.4, and 18.2 prior to 18.2.2 that under certain...
The vulnerability of the software for energy monitoring, EcoStruxure Power Monitoring Expert and Power Operation, arises from incorrect restrictions on the path to the restricted-access catalog. This allows attackers to gain unauthorized access to protected information.
The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the incorrect restriction on the path to the restricted-access catalog. Exploiting this vulnerability could allow a malicious actor, operating remotely, to gain unauthorized access to protected...
The vulnerability of the Node.js software platform arises from incorrect restrictions on path names for restricted access directories. This allows attackers to gain read, modify, and delete permissions for files.
The vulnerability of the Node.js software platform is related to incorrect restrictions on path names in restricted access directories. Exploiting this vulnerability can allow an attacker to gain read, modify, and delete permissions for files...
The vulnerability of the software for energy monitoring, EcoStruxure Power Monitoring Expert and Power Operation, arises from incorrect restrictions on the path to the restricted-access catalog. This allows a perpetrator to execute arbitrary code.
The vulnerability of the EcoStruxure Power Monitoring Expert and Power Operation software lies in the incorrect restriction of the path name to the restricted access catalog. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...
CVE-2025-50753
Mitrastar GPT-2741GNAC-N2 devices are provided with access through ssh into a restricted default shell.The command "deviceinfo show file" is supposed to be used from restricted shell to show files and directories. By providing " /bin/sh" quotes included to the argument of this command will drop a...