CVE-2022-41710

Markdownify 1.4.1 is vulnerable to information disclosure: when a client renders a malicious markdown file, an external attacker can read arbitrary local files. The root cause cited across multiple connected sources is an inadequate security posture for rendering content—specifically, the lack of...

PT-2022-25314 · Zettlr · Zettlr

Name of the Vulnerable Software and Affected Versions: Zettlr version 2.3.0 Description: The issue allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Zettlr. This is possible because the application does not...

CVE-2022-41710

Markdownify version 1.4.1 allows an external attacker to remotely obtain arbitrary local files on any client that attempts to view a malicious markdown file through Markdownify. This is possible because the application does not have a CSP policy or at least not strict enough and/or does not...

PT-2022-26535 · Candidats · Candidats

Name of the Vulnerable Software and Affected Versions: CandidATS version 3.0.0 Description: The issue allows an external attacker to read arbitrary files from the server due to the application being vulnerable to XXE. Recommendations: For CandidATS version 3.0.0, consider restricting access to...

PT-2022-10672 · Opencart · Opencart

Name of the Vulnerable Software and Affected Versions: OpenCart version 3.0.3.7 Description: The issue allows users to obtain database information or read server files through SQL injection in the background. This can potentially lead to unauthorized access to sensitive data. Recommendations: For...

Design/Logic Flaw

Incorrect Default Permissions vulnerability in Hitachi Infrastructure Analytics Advisor on Linux Analytics probe component, Hitachi Ops Center Analyzer on Linux Analyzer probe component, Hitachi Ops Center Viewpoint on Linux Viewpoint RAID Agent component allows local users to read and write...

CVE-2020-36605

CVE-2020-36605 is an Incorrect Default Permissions vulnerability across Hitachi products: Hitachi Infrastructure Analytics Advisor (Linux) – Analytics probe component; Hitachi Ops Center Analyzer (Linux) – Analyzer probe component; Hitachi Ops Center Viewpoint (Linux) – Viewpoint RAID Agent compo...

PT-2022-20983 · Hitachi · Hitachi Ops Center Analyzer

Name of the Vulnerable Software and Affected Versions: Hitachi Ops Center Analyzer versions 10.8.1-00 through 10.9.0-00 Description: The issue allows local users to gain sensitive information due to the insertion of sensitive information into log files. This is related to the Virtual Strage...

WP User Frontend < 3.5.29 - Obscure Registration as Admin

The plugin uses a user supplied argument called urhidden in its registration form, which contains the role for the account to be created with, encrypted via wpufencryption. This could allow an attacker having access to the AUTHKEY and AUTHSALT constant via an arbitrary file access issue for...

METTLER TOLEDO IND780 路径遍历漏洞

The METTLER TOLEDO IND780 is a highly flexible terminal from METTLER TOLEDO USA. Capable of supporting simple to complex, stand-alone to integrated weighing and control applications. A security vulnerability exists in METTLER TOLEDO IND780 8.0.07 March 19, 2018, 7.2.10 June 18, 2012 . An attacker...

High-Severity Flaws in Juniper Junos OS Affect Enterprise Networking Devices

Multiple high-severity security flaws have been disclosed as affecting Juniper Networks devices, some of which could be exploited to achieve code execution. Chief among them is a remote pre-authenticated PHP archive file deserialization vulnerability CVE-2022-22241, CVSS score: 8.1 in the J-Web...

Code injection

Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher...

PT-2022-18121 · Apache · Apache Dolphinscheduler

Name of the Vulnerable Software and Affected Versions: Apache DolphinScheduler versions prior to 2.0.6 Description: The issue allows users to read any files by logging into the server. Apache DolphinScheduler users are advised to take action to protect themselves. Recommendations: For versions...

CVE-2022-26884 Apache DolphinScheduler exposes files without authentication

Users can read any files by log server, Apache DolphinScheduler users should upgrade to version 2.0.6 or higher...

PT-2022-6234 · Cisco · Cisco Identity Services Engine

Name of the Vulnerable Software and Affected Versions: Cisco Identity Services Engine ISE affected versions not specified Description: A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to access sensitive...

PT-2022-26225 · Gl.Inet · Gl.Inet Goodcloud Iot Device Management System

Name of the Vulnerable Software and Affected Versions: GL.iNet GoodCloud IoT Device Management System version 1.00.220412.00 Description: The issue concerns command injection vulnerabilities in the ping and traceroute tools of the system, allowing attackers to read arbitrary files on the system...

CVE-2022-20822 Cisco Identity Services Engine Unauthorized File Access Vulnerability

A vulnerability in the web-based management interface of Cisco Identity Services Engine ISE could allow an authenticated, remote attacker to read and delete files on an affected device. This vulnerability is due to insufficient validation of user-supplied input. An attacker could exploit this...

CVE-2022-20822

Cisco Identity Services Engine (ISE) is affected via its web-based management interface. The root cause is insufficient validation of user-supplied input, enabling authenticated, remote attackers to read and delete files by sending crafted HTTP requests with path-sequence characters. Reported imp...

CVE-2022-31256

CVE-2022-31256 is a local privilege-escalation issue in the openSUSE/openSUSE Factory sendmail workflow. Affected component: a script invoked by the sendmail systemd service. Root cause: improper link resolution before file access ("link following") in that script allows a local attacker to escal...

CVE-2022-31256

A Improper Link Resolution Before File Access 'Link Following' vulnerability in a script called by the sendmail systemd service of openSUSE Factory allows local attackers to escalate from user mail to root. This issue affects: SUSE openSUSE Factory sendmail versions prior to 8.17.1-1.1...