DEBIAN-CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

UBUNTU-CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

CVE-2024-6781 Calibre Arbitrary File Read

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

CVE-2024-6781 Calibre Arbitrary File Read

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

CVE-2024-6781 Calibre Arbitrary File Read

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

Calibre 安全漏洞

Calibre is an open source and free all-in-one eBook reading management and format conversion tool from the individual developer Kovid Goyal in India. A security vulnerability exists in Calibre version 7.14.0 and prior versions, which stems from a path traversal that allows an unauthenticated...

Flowise Path Injection at /api/v1/openai-assistants-file

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, the /api/v1/openai-assistants-file endpoint in index.ts is vulnerable to arbitrary file read due to lack of sanitization of the fileName body parameter. No known patches for this...

GHSA-W7C4-5W4F-JM3G Duplicate Advisory: Reposilite Arbitrary File Read vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-82j3-hf72-7x93. This link is maintained to preserve external references. Original description Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM...

GHSA-RCVG-RGF7-PPPV Nuxt Devtools has a Path Traversal: '../filedir'

Summary Nuxt Devtools is missing authentication on the getTextAssetContent RPC function which is vulnerable to path traversal. Combined with a lack of Origin checks on the WebSocket handler, an attacker is able to interact with a locally running devtools instance and exfiltrate data abusing this...

Nuxt Devtools has a Path Traversal: '../filedir'

Summary Nuxt Devtools is missing authentication on the getTextAssetContent RPC function which is vulnerable to path traversal. Combined with a lack of Origin checks on the WebSocket handler, an attacker is able to interact with a locally running devtools instance and exfiltrate data abusing this...

Security Bulletin: IBM Content Navigator is vulnerable to Server Side Request Forgery leading to Arbitrary File Read due to Oracle Outside In Technology (CVE-2023-35896)

Summary Oracle Outside In Technology is used in some configurations of IBM Content Navigator as part of the document viewer. CVE-2023-35896. Vulnerability Details CVEID:CVE-2023-35896 DESCRIPTION: IBM Content Navigator is vulnerable to server-side request forgery SSRF. This may allow an...

Arbitrary file read vulnerability exists in NC Cloud of UFIDA Network Technology Corporation (CNVD-2024-37279)

NC Cloud is a large enterprise digitalization platform. An arbitrary file read vulnerability exists in UFIDA Network Technology Corporation NC Cloud, which can be exploited by attackers to obtain sensitive information...

CVE-2024-7135 Tainacan <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read

The Tainacan plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the 'getfile' function in all versions up to, and including, 0.21.7. The function is also vulnerable to directory traversal. This makes it possible for authenticated attackers, with...

WordPress Tainacan plugin <= 0.21.7 - Missing Authorization to Authenticated (Subscriber+) Arbitrary File Read vulnerability

Missing Authorization to Authenticated Subscriber+ Arbitrary File Read vulnerability discovered by 1337Wannabe in WordPress Plugin Tainacan versions = 0.21.7...

Arbitrary File Read

anki is vulnerable to Arbitrary File Read. The vulnerability is due to the lack of proper sanitization of the verbatim package when processing Latex, which allows attackers to share a specially crafted flashcard to trigger this vulnerability...

Arbitrary File Read Vulnerability in Tianwen Property ERP System of Chengdu Tianwen Interconnection Technology Co. Ltd (CNVD-2024-36506)

Based on software development and technical services, Chengdu Tianwen Interlink Technology Co., Ltd. establishes property ERP application system and provides property management companies with intelligent property management solutions aiming at cost reduction, quality assurance and efficiency...

PT-2024-29686 · Spx · Spx

Name of the Vulnerable Software and Affected Versions: SPX aka php-spx versions 0.4.15 and earlier Description: The issue allows for SPX UI URI Directory Traversal, enabling the reading of arbitrary files. Recommendations: For SPX aka php-spx versions 0.4.15 and earlier, consider restricting acce...

CosmicSting: Magento Arbitrary File Read (CVE-2024-34102) + PHP Buffer Overflow in the iconv() function of glibc (CVE-2024-2961)

This combination of an Arbitrary File Read CVE-2024-34102 and a Buffer Overflow in glibc CVE-2024-2961 allows for unauthenticated Remote Code Execution on the following versions of Magento and Adobe Commerce and earlier if the PHP and glibc versions are also vulnerable: - 2.4.7 and earlier -...