7958 matches found
The software for email security, SonicWall Email Security and SonicWall Hosted Email Security, has a vulnerability related to incorrect path restrictions for access to restricted directories. This allows attackers to read arbitrary files.
The vulnerability of SonicWall Email Security and SonicWall Hosted Email Security software-related to incorrect path name restrictions in access-controlled directories. Exploiting this vulnerability could allow a malicious actor to read arbitrary files remotely...
The vulnerability of the microprogrammed software of TVT NVMS-1000 devices arises from incorrect restrictions on the path to the restricted access catalog. This allows attackers to disclose protected information.
The vulnerability of the microprogrammed software of TVT NVMS-1000 exists due to an incorrect limitation on the path name to the restricted access catalog. Exploiting this vulnerability can allow a malicious actor, operating remotely, to disclose the protected information...
The vulnerability of the Preferences component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the Preferences component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in path name checking for restricted access directories. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected...
CVE-2021-40853
TCMAN GIM does not perform an authorization check when trying to access determined resources. A remote attacker could exploit this vulnerability to access URL that require privileges without having them. The exploitation of this vulnerability might allow a remote attacker to obtain sensible...
The vulnerability of the ZipArchive::extractTo function in the PHP interpreter allows a attacker to create or overwrite files.
The vulnerability of the ZipArchive::extractTo function in the PHP interpreter exists due to an incorrect limitation on the path name of the restricted directory. Exploiting this vulnerability could allow a malicious actor to create or re-record files remotely...
Bitdefender GravityZone 路径遍历漏洞
Bitdefender GravityZone is a scanning software from Bitdefender Romania. Bitdefender GravityZone suffers from a path traversal vulnerability that stems from an improperly restricted pathname "path traversal" vulnerability in the UpdateServer component of Bitdefender GravityZone that allows an...
CVE-2021-1013
In checkExistsAndEnforceCannotModifyImmutablyRestrictedPermission of PermissionManagerService.java, there is a possible way to determine whether an app is installed, without query permissions, due to side channel information disclosure. This could lead to local information disclosure with no...
cWifi Hotspot Wireless CP - Code Execution Vulnerability
Document Title: =============== cWifi Hotspot Wireless CP - Code Execution Vulnerability References Source: ==================== https://www.vulnerability-lab.com/getcontent.php?id=2310 Release Date: ============= 2021-12-15 Vulnerability Laboratory ID VL-ID: ====================================...
CVE-2021-42022
A vulnerability has been identified in SIMATIC eaSie PCS 7 Skill Package All versions V21.00 SP3. When downloading files, the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the...
CVE-2021-42022
A vulnerability has been identified in SIMATIC eaSie PCS 7 Skill Package All versions V21.00 SP3. When downloading files, the affected systems do not properly neutralize special elements within the pathname. An attacker could then cause the pathname to resolve to a location outside of the...
The vulnerability of OPPO’s 5G router web application, related to incorrect path name restrictions for accessing restricted catalogs, allows attackers to gain unauthorized access to protected information.
The vulnerability of OPPO’s 5G router web application is related to an incorrect restriction on the path to the restricted catalog. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
UBUNTU-CVE-2021-39941
An information disclosure vulnerability in GitLab CE/EE versions 12.0 to 14.3.6, 14.4 to 14.4.4, and 14.5 to 14.5.2 allowed non-project members to see the default branch name for projects that restrict access to the repository to project members...
The vulnerability of Zyxel VPN2S network interface card’s microprogramming software arises from incorrect pathname restrictions for the restricted access directory. This vulnerability allows attackers to gain access to confidential information.
The vulnerability of Zyxel VPN2S network interface card’s microprogramming software exists due to an incorrect restriction on the path name to the restricted access directory. Exploiting this vulnerability can allow a malicious actor to gain access to confidential information...
PT-2021-22781 · Gitlab · Gitlab Ce/Ee +1
Name of the Vulnerable Software and Affected Versions: GitLab CE/EE versions 12.0 to 14.3.6 GitLab CE/EE versions 14.4 to 14.4.4 GitLab CE/EE versions 14.5 to 14.5.2 Description: An information disclosure issue allowed non-project members to see the default branch name for projects that restrict...
KNIME directory traversal vulnerability
A directory traversal vulnerability exists in Knime, the Swiss company's enterprise software for putting data science workflows into production. knime stems from a failure of a networked system or product to properly filter special elements in a resource or file path, which could be exploited by ...
CVE-2021-41449
A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet...
CVE-2021-41449
A path traversal attack in web interfaces of Netgear RAX35, RAX38, and RAX40 routers before v1.0.4.102, allows a remote unauthenticated attacker to gain access to sensitive restricted information, such as forbidden files of the web application, via sending a specially crafted HTTP packet...
Knime Server 路径遍历漏洞
A directory traversal vulnerability exists in Knime, the Swiss company's enterprise software for putting data science workflows into production. knime stems from a failure of a networked system or product to properly filter special elements in a resource or file path, which could be exploited by ...