510 matches found
CVE-2023-26469
In Jorani 1.0.0, an attacker could leverage path traversal to access files and execute code on the server...
CVE-2023-38950
A path traversal vulnerability in the iclock API of ZKTeco BioTime v8.5.5 allows unauthenticated attackers to read arbitrary files via supplying a crafted payload. This vulnerability was fixed in version 9.0.120240617.19506 of ZKBioTime...
PT-2023-9652 · Python +6 · Python +6
Name of the Vulnerable Software and Affected Versions: Python versions 3.11 through 3.11.4 Description: The issue is related to the os.path.normpath function, which truncates a path unexpectedly at the first '0' byte if such bytes are present in the path. This could lead to security issues, as...
CVE-2023-31857
Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...
CVE-2023-31857
Sourcecodester Online Computer and Laptop Store 1.0 allows unrestricted file upload and can lead to remote code execution. The vulnerability path is /classes/Users.php?f=save...
OPENSUSE-SU-2023:0108-1 Security update for dcmtk
This update for dcmtk fixes the following issues: - CVE-2022-43272: Fixed memory leak via the TASCAssociation object boo1206070 - Update to 3.6.7 boo1208639, boo1208638, boo1208637, CVE-2022-2121, CVE-2022-2120, CVE-2022-2119 - CVE-2022-2121: Fixed possible DoS via NULL pointer dereference -...
CVE-2023-27409
A vulnerability has been identified in SCALANCE LPE9403 All versions V2.1. A path traversal vulnerability was found in the deviceinfo binary via the mac parameter. This could allow an authenticated attacker with access to the SSH interface on the affected device to read the contents of any file...
FANUC ROBOGUIDE-HandlingPRO
1. EXECUTIVE SUMMARY CVSS v3 6.8 ATTENTION: Exploitable remotely Vendor: FANUC Equipment: ROBOGUIDE-HandlingPRO Vulnerability: Path Traversal 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to read and/or overwrite files on the system running the affected...
PT-2023-22774 · Gatsby · Gatsby-Plugin-Sharp
Name of the Vulnerable Software and Affected Versions: gatsby-plugin-sharp versions prior to 5.8.1 and 4.25.1 Description: The gatsby-plugin-sharp plugin contains a path traversal vulnerability exposed when running the Gatsby develop server gatsby develop. By default, gatsby develop is only...
CVE-2023-2059 DedeCMS select_templets.php path traversal
A vulnerability was found in DedeCMS 5.7.87. It has been rated as problematic. Affected by this issue is some unknown functionality of the file uploads/include/dialog/selecttemplets.php. The manipulation leads to path traversal: '..\filedir'. The attack may be launched remotely. The exploit has...
PT-2023-2849 · Gitlab · Gitlab
Name of the Vulnerable Software and Affected Versions: GitLab versions 16.0.0 Description: The issue is related to a path traversal vulnerability that allows an unauthenticated malicious user to read arbitrary files on the server when an attachment exists in a public project nested within at leas...
Student Study Center Desk Management System 路径遍历漏洞
Student Study Center Desk Management System is a student study center desk management system. A path traversal vulnerability exists in SourceCodester Student Study Center Desk Management System version 1.0, which originates in the component POST Parameter Handler's Master.php? and results in path...
CVE-2017-20181 hgzojer Vocable Trainer VocableTrainerProvider.java path traversal
A vulnerability classified as critical was found in hgzojer Vocable Trainer up to 1.3.0 on Android. This vulnerability affects unknown code of the file src/at/hgz/vocabletrainer/VocableTrainerProvider.java. The manipulation leads to path traversal. Attacking locally is a requirement. Upgrading to...
CVE-2023-20943
In clearApplicationUserData of ActivityManagerService.java, there is a possible way to remove system files due to a path traversal error. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersion...
CVE-2023-0947 Path Traversal in flatpressblog/flatpress
Path Traversal in GitHub repository flatpressblog/flatpress prior to 1.3...
PT-2023-1534 · Fortinet · Fortiweb
Name of the Vulnerable Software and Affected Versions: FortiWeb versions 7.0.1 and below FortiWeb versions 6.4 and below FortiWeb versions 6.3 and below FortiWeb versions 6.2 and below Description: The issue is related to incorrect restriction of a directory path name with limited access in the...
PT-2023-13000 · Fortinet · Fortiweb
Name of the Vulnerable Software and Affected Versions: FortiWeb versions 6.0 through 7.0.1 FortiWeb versions 6.1 FortiWeb versions 6.2 FortiWeb versions 6.3.0 through 6.3.19 FortiWeb versions 6.4 Description: A path traversal issue in the API of FortiWeb may allow an authenticated attacker to...
PT-2023-2474 · Php +10 · Php +10
Name of the Vulnerable Software and Affected Versions: PHP versions 8.0.0 through 8.0.27 PHP versions 8.1.0 through 8.1.15 PHP versions 8.2.0 through 8.2.2 Description: The issue is related to the core path resolution function in PHP, which allocates a buffer one byte too small. When resolving...
CVE-2023-24804 ownCloud Android app vulnerable to Path Traversal
The ownCloud Android app allows ownCloud users to access, share, and edit files and folders. Prior to version 3.0, the app has an incomplete fix for a path traversal issue and is vulnerable to two bypass methods. The bypasses may lead to information disclosure when uploading the app’s internal...