CWE-641: Improper Restriction of Names for Files and Other Resources
The product constructs the name of a file or other resource using input from an upstream component, but it does not restrict or incorrectly restricts the resulting name.
A kind of CWE-99 Improper Control of Resource Identifiers.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 more Python Elevation of Privilege Vulnerability 7.8 High
- cisco identity services engine software Cisco Identity Services Engine Authenticated Write Vulnerability 4.9 Medium
- eclipse mojarra In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not... 7.5 High
- microsoft github copilot, github copilot plugin for jetbrains ides +1 more GitHub Copilot Remote Code Execution Vulnerability 7.8 High
- yt-dlp yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519) 8.3 High
- go toolchain cmd/go, golang go, red hat openshift service mesh 2 +24 more +26 more Code execution vulnerability in SWIG code generation in cmd/go 8.8 High
- pixarra luminance studio Luminance Studio 2.17 Denial of Service via Malformed Input 6.9 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +27 more +29 more Active Directory Domain Services Elevation of Privilege Vulnerability 8.8 High
- microsoft office, 365 apps, 365 apps for enterprise +7 more +9 more Microsoft Office Remote Code Execution Vulnerability 7.8 High
- microsoft office, 365 apps, 365 copilot +9 more +11 more Microsoft Office Remote Code Execution Vulnerability 8.4 High
- axis communications ab os 51l3nc3, member of the AXIS OS Bug Bounty Program, has found that the VAPIX API mediaclip.cgi did... 6.5 Medium
- microsoft onenote, office, office ltsc for mac 2021 +2 more +4 more Microsoft Office OneNote Remote Code Execution Vulnerability 7.8 High
- microsoft outlook, office ltsc for mac 2021, office ltsc for mac 2024 +3 more +5 more Microsoft Outlook Remote Code Execution Vulnerability 7.8 High
- overleaf Arbitrary language parameter can passed to `aspell` executable via spelling requests in overleaf 5.3 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +29 more +31 more Windows Distributed File System (DFS) Remote Code Execution Vulnerability 6.7 Medium
- daloradius, lirantal lirantal/daloradius +1 more Improper Restriction of Names for Files and Other Resources in lirantal/daloradius 7.2 High
- cortexproject cortex Alertmanager can expose local files content via specially crafted config 6.5 Medium
- trend micro apex one, apex one and apex one as a service +1 more Improper validation of some components used by the rollback mechanism in Trend Micro Apex One and... 7.2 High
- bosch bf-os File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83 allows an... 8.8 High
- qutebrowser Arbitrary command execution on Windows in qutebrowser 8.8 High
- phpmailer project phpmailer, wordpress +1 more Object injection in PHPMailer/PHPMailer 9.8 Critical