Siemens RUGGEDCOM CROSSBOW 安全漏洞

Siemens RUGGEDCOM CROSSBOW is a proven secure access management solution from Siemens, Germany. Siemens RUGGEDCOM CROSSBOW suffers from a filename or path external control vulnerability due to an affected system allowing a privileged user to upload firmware files to the root installation director...

CVE-2024-25965: External Control of File Name or Path

Dell PowerScale OneFS versions 8.2.x through 9.7.0.2 contains an external control of file name or path vulnerability. A local high privilege attacker could potentially exploit this vulnerability, leading to denial of service...

CVE-2021-34970 Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability

Foxit PDF Reader print Method Use of Externally-Controlled Format String Information Disclosure Vulnerability. This vulnerability allows remote attackers to disclose sensitive information on affected installations of Foxit PDF Reader. User interaction is required to exploit this vulnerability in...

Malicious code in @symplr-ux/alloy-icons (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a17b660a440d2cb884c99312341fc58bf33cac16bb05ecf3065ab4f40c073c4b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2024-31492

An external control of file name or path vulnerability CWE-73 in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting the installation process...

CVE-2024-31492

An external control of file name or path vulnerability CWE-73 in FortiClientMac version 7.2.3 and below, version 7.0.10 and below installer may allow a local attacker to execute arbitrary code or commands via writing a malicious configuration file in /tmp before starting the installation process...

Malicious code in @lbnqduy11805/silver-parakeet (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 48fa3414b1fc4238faa198d07d0f7a8e656a706a83fae508bac516436f6860fc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in recxn-backup (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 09ab1a9ec173dddfe29440874a55934c0478e3e08950a7b36638ae2a7127f88e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in package-dfgpd-dfgdfg-24h (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8791e7d1940111ec98262882ec9b4ba3bc94bd1b739f62c31ba48ae31e6310bc Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Arbitrary File Read

paddlepaddle is vulnerable to External Control of File Name or Path. The vulnerability is caused due to improper input validation within paddle.vision.ops.readfile, which allows an attacker to read arbitrary files on the system...

CVE-2024-1603: External Control of File Name or Path

paddlepaddle/paddle 2.6.0 allows arbitrary file read via paddle.vision.ops.readfile...

Malicious code in raydium-connect (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 047809b4a0221ee733d518e35e840150721d191fd909cb32946b259540c2bb1a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2024-1120 Malicious code in functions-workshop (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 3a06f38f710e6db446e87fdd3bf34a273d5dbcb0a8cfc5a9f0440ec7a498845b Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

Malicious code in test12323123 (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 8ecbea51c0b15a8930a95267ce5c77d278fbf6de9907b7550db4f80b3958ca76 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-41842

A use of externally-controlled format string vulnerability CWE-134 vulnerability in Fortinet allows a privileged attacker to execute unauthorized code or commands via specially crafted command arguments...

CVE-2024-26185: External Control of File Name or Path

Windows Compressed Folder Tampering Vulnerability...

Malicious code in attrstore (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware a50727170dbaf38b7b8b01624914b7b9b56d7e618f7861e09108415276c8857a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-26282: External Control of File Name or Path

IBM Watson CP4D Data Stores 4.6.0 through 4.6.3 could allow a user with physical access and specific knowledge of the system to modify files or data on the system. IBM X-Force ID: 248415...

External Control Of Filename

phenx/php-svg-lib is vulnerable to External Control of Filename. The vulnerability is due to insecure handling of inline CSS font definitions, allowing an attacker to deserialize a PHAR file through the phar:// URL handler. Note that remote code execution is only possible on PHP versions less the...

CVE-2023-29181

A use of externally-controlled format string in Fortinet FortiOS 7.2.0 through 7.2.4, 7.0.0 through 7.0.11, 6.4.0 through 6.4.12, 6.2.0 through 6.2.14, 6.0.0 through 6.0.16, FortiProxy 7.2.0 through 7.2.4, 7.0.0 through 7.0.10, 2.0.0 through 2.0.12, 1.2.0 through 1.2.13, 1.1.0 through 1.1.6, 1.0....