CWE-29 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-29/ Sun, 26 Feb 2023 06:08:41 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-29 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-29/ 32 32 CVE-2023-1034 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-1034/ Sun, 26 Feb 2023 06:08:41 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2023-1034/ Path Traversal: ‘..filename’ in GitHub repository salesagility/suitecrm prior to 7.12.9.

The post CVE-2023-1034 appeared first on CVE Vulnerability.

]]> Path Traversal: ‘..filename’ in GitHub repository salesagility/suitecrm prior to 7.12.9.

The post CVE-2023-1034 appeared first on CVE Vulnerability.

]]> CVE-2023-0104 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0104/ Thu, 23 Feb 2023 14:13:53 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2023-0104/ The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data.

The post CVE-2023-0104 appeared first on CVE Vulnerability.

]]> The listed versions for Weintek EasyBuilder Pro are vulnerable to a ZipSlip attack caused by decompiling a malicious project file. This may allow an attacker to gain control of the user’s computer or gain access to sensitive data.

The post CVE-2023-0104 appeared first on CVE Vulnerability.

]]> CVE-2022-2788 https://cvevulnerability.com/cve_vulnerabilities/cve-2022-2788/ Thu, 23 Feb 2023 05:18:08 +0000 http://www.cvevulnerability.com/cve_vulnerabilities/cve-2022-2788/ Emerson Electric’s Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: ‘..Filename’, also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious […]

The post CVE-2022-2788 appeared first on CVE Vulnerability.

]]> Emerson Electric’s Proficy Machine Edition Version 9.80 and prior is vulnerable to CWE-29 Path Traversal: ‘..Filename’, also known as a ZipSlip attack, through an upload procedure which enables attackers to implant a malicious .BLZ file on the PLC. The file can transfer through the engineering station onto Windows in a way that executes the malicious code.

The post CVE-2022-2788 appeared first on CVE Vulnerability.

]]> CVE-2023-0316 https://cvevulnerability.com/cve_vulnerabilities/cve-2023-0316/ Wed, 22 Feb 2023 14:02:13 +0000 http://www.cvevulnerability.com/?cve_vulnerabilities=cve-2023-0316 Path Traversal: ‘..filename’ in GitHub repository froxlor/froxlor prior to 2.0.0.

The post CVE-2023-0316 appeared first on CVE Vulnerability.

]]> Path Traversal: ‘..filename’ in GitHub repository froxlor/froxlor prior to 2.0.0.

The post CVE-2023-0316 appeared first on CVE Vulnerability.

]]>