217 matches found
CVE-2022-24429: Improper Control of Generation of Code
The package convert-svg-core before 0.6.3 are vulnerable to Arbitrary Code Injection when using a specially crafted SVG file. An attacker can read arbitrary files from the file system and then show the file content as a converted PNG file...
CVE-2022-25249 PTC Axeda agent and Axeda Desktop Server Path Traversal
When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions disregarding Axeda agent v6.9.2 and v6.9.3 is vulnerable to directory traversal, which could allow a remote unauthenticated attacker to obtain file system read access via web server...
CVE-2022-25249: Improper Limitation of a Pathname to a Restricted Directory
When connecting to a certain port Axeda agent All versions and Axeda Desktop Server for Windows All versions disregarding Axeda agent v6.9.2 and v6.9.3 is vulnerable to directory traversal, which could allow a remote unauthenticated attacker to obtain file system read access via web server...
PTC Axeda agent 信息泄露漏洞
PTC Axeda agent is an agent software from PTC. An information disclosure vulnerability exists in the PTC Axeda agent that could allow an unauthenticated, remote attacker to gain file system read privileges via a web server...
Nomad alloc Filesystem and Container Escape
Summary Nomad and Nomad Enterprise “Nomad” allows operators with read-fs and alloc-exec or job-submit capabilities to read arbitrary files on the host filesystem as root through the Nomad client agent. This vulnerability, CVE-2022-24683, was fixed in Nomad 1.0.18, 1.1.12, and 1.2.6. Background...
Adobe FrameMaker 2019 <= 15.0.8 (2019.0.8) / Adobe FrameMaker 2020 < 16.0.3 (2020.0.3) Multiple Vulnerabilities (APSB21-74)
The version of Adobe FrameMaker installed on the remote Windows host is prior or equal to Adobe FrameMaker 2019 15.0.8 or prior to Adobe FrameMaker 2020 16.0.3. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-74 advisory. - Adobe Framemaker versions 2019 Update ...
Adobe Reader Classic 2020 Security Update (APSB21-55) - Windows
The host is missing an important security update according to Adobe September update. SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
APSB21-76 Security update available for AdobeCreative Cloud Desktop Applications
Adobe has released an update for the Creative Cloud Desktop for Windows and macOS. This update includes a fix for a critical vulnerability that could lead to arbitrary file system read in the context of current user...
APSB21-85 Security update available for Adobe XMP Toolkit SDK
Adobe has released updates for XMP Toolkit SDK. These updates resolve an important vulnerability. Successful exploitation could lead to arbitrary file system read in the context of the current user...
Adobe Bridge 11.x < 11.1.1 Multiple Vulnerabilities (APSB21-69)
The version of Adobe Bridge installed on the remote Windows host is prior to 11.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-69 advisory. - Adobe Bridge version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure handling of...
Adobe Bridge 11.x < 11.1.1 Multiple Vulnerabilities (APSB21-69)
The version of Adobe Bridge installed on the remote macOS or Mac OS X host is prior to 11.1.1. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb21-69 advisory. - Adobe Bridge version 11.1 and earlier is affected by a memory corruption vulnerability due to insecure...
Cisco TelePresence Collaboration Endpoint 路径遍历漏洞
Cisco TelePresence Collaboration Endpoint CE is a Cisco collaboration endpoint software used in Cisco video conferencing solutions. A path traversal vulnerability exists in Cisco TelePresence Collaboration Endpoint CE Software and Cisco RoomOS Software, which stems from insufficient path validati...
UBUNTU-CVE-2019-14194
An issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfsreadreply when calling storeblock in the NFSv2 case...
CVE-2017-5454: Exposure of Sensitive Information to an Unauthorized Actor
A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird 52.1,...
CVE-2017-14031: Improper Access Control
An Improper Access Control issue was discovered in Trihedral VTScada 11.3.03 and prior. A local, non-administrator user has privileges to read and write to the file system of the target machine...
EMC Cloud Tiering Appliance 10.0 - XML External Entity Arbitrary File Read (Metasploit)
EMC Cloud Tiering Appliance 10.0 - XML External Entity Arbitrary File Read Metasploit EMC Cloud Tiering Appliance v10.0 Unauthed XXE The following authentication request is susceptible to an XXE attack: POST /api/login HTTP/1.1 Host: 172.31.16.99 User-Agent: Mozilla/5.0 X11; Ubuntu; Linux x8664;...