CVE-2021-43279: Out-of-bounds Write

An out-of-bounds write vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...

The vulnerability of the automated information system “Registration in OO” arises from the lack of measures taken to protect the structure of the web page, allowing attackers to read arbitrary files.

The vulnerability of the automated information system “Registration in OO” is related to the lack of measures taken to protect the structure of the web page. Exploiting this vulnerability allows a malicious actor to remotely read arbitrary files by sending a specially crafted POST request...

PT-2021-23797

Name of the Vulnerable Software and Affected Versions Open Design Alliance PRC SDK versions prior to 2022.10 Description An out-of-bounds read issue exists in the U3D file reading procedure. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. This can be leveraged b...

PT-2021-23798

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.11 Description An Out-of-bounds Read issue exists in the OBJ file reading procedure due to the lack of input length validation, allowing a read past the end of an allocated buffer. This...

PT-2021-23799

Name of the Vulnerable Software and Affected Versions Open Design Alliance PRC SDK versions prior to 2022.10 Description An out-of-bounds write issue exists in the U3D file reading procedure. Crafted data in a U3D file can trigger a write past the end of an allocated buffer. An attacker can...

PT-2021-23795

Name of the Vulnerable Software and Affected Versions Open Design Alliance Drawings SDK versions prior to 2022.8 Description A Use After Free vulnerability exists in the DGN file reading procedure. The issue results from the lack of validating the existence of an object prior to performing...

CVE-2021-36172

An improper restriction of XML external entity reference vulnerability in the parser of XML responses of FortiPortal before 6.0.6 may allow an attacker who controls the producer of XML reports consumed by FortiPortal to trigger a denial of service or read arbitrary files from the underlying file...

Kingdee Cloud Star Management Center has an arbitrary file reading vulnerability

Kingdee Cloud Star Management Center is a new generation of strategic enterprise management software developed by Kingdee Software China Co. based on cloud computing, big data, social, artificial intelligence, Internet of Things and other cutting-edge technologies. There is an arbitrary file...

GHSA-6V6P-P97V-G2P7 Out-of-bounds Write in OpenCV

OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python and OpenCV-Contrib-Python 3.3.0.9 has an invalid write in the cv::RLByteStream::getBytes function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the...

GHSA-33H2-69J3-R336 Out-of-bounds Read in OpenCV

OpenCV Open Source Computer Vision Library through 3.3 corresponding to OpenCV-Python 3.3.0.9 has an out-of-bounds read error in the cv::RBaseStream::readBlock function in modules/imgcodecs/src/bitstrm.cpp when reading an image file by using cv::imread, as demonstrated by the...

CVE-2021-40500

SAP BusinessObjects Business Intelligence Platform Crystal Reports - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations at endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can enable the...

Online Traffic Offense Management System 1.0 - Privilage escalation Vulnerability

Exploit Title: Online Traffic Offense Management System 1.0 - Privilage escalation Unauthenticated Exploit Author: Hubert Wojciechowski Contact Author: email protected Vendor Homepage: https://www.sourcecodester.com Software Link:...

CVE-2021-3856

ClassLoaderTheme and ClasspathThemeResourceProviderFactory allows reading any file available as a resource to the classloader. By sending requests for theme resources with a relative path from an external HTTP client, the client will receive the content of random files if available...

PT-2021-22585

Name of the Vulnerable Software and Affected Versions: BIQS IT Biqs-drive versions 1.83 and below Description: A local file inclusion LFI issue exists when sending a specific payload as the file parameter to the "download/index.php" endpoint. This allows an attacker to read arbitrary files from t...

PortlandLabs Concrete CMS Path Traversal Vulnerability (CNVD-2021-76081)

PortlandLabs Concrete Cms is a team-oriented open source content management system for the United States PortlandLabs . A path traversal vulnerability exists in PortlandLabs Concrete CMS, which stems from the product's failure to securely handle user input data. The vulnerability can be exploited...

CVE-2021-40103

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF...

CVE-2021-40103

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF...

Path traversal

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF...

CVE-2021-40103

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF...

CVE-2021-40103

An issue was discovered in Concrete CMS through 8.5.5. Path Traversal can lead to Arbitrary File Reading and SSRF...