14580 matches found
CVE-2025-0742
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain files stored by others users by changing the "FILEID" of the endpoint "/embedai/files/show/"...
CVE-2025-0742
CVE-2025-0742 describes an Improper Access Control vulnerability in EmbedAI 2.1 and earlier. An authenticated attacker can access other users’ files by altering the FILE_ID in the endpoint /embedai/files/show/, exposing confidential data and reducing confidentiality. Reported impact in sources in...
CVE-2025-0742 Improper Access Control vulnerability in EmbedAI
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain files stored by others users by changing the "FILEID" of the endpoint "/embedai/files/show/"...
CVE-2025-0742 Improper Access Control vulnerability in EmbedAI
An Improper Access Control vulnerability has been found in EmbedAI 2.1 and below. This vulnerability allows an authenticated attacker to obtain files stored by others users by changing the "FILEID" of the endpoint "/embedai/files/show/"...
Unpatched PHP Voyager Flaws Leave Servers Open to One-Click RCE Exploits
Three security flaws have been disclosed in the open-source PHP package Voyager that could be exploited by an attacker to achieve one-click remote code execution on affected instances. "When an authenticated Voyager user clicks on a malicious link, attackers can execute arbitrary code on the...
The vulnerability of the CFileNameAttr::Parse() function in the NtfsHandler.cpp file of the 7-Zip archive tool allows a hacker to load arbitrary files and gain unauthorized access to protected information.
The vulnerability of the CFileNameAttr::Parse function in the NtfsHandler.cpp file of the 7-Zip archive processor is related to the occurrence of operations outside the buffer in memory, due to incorrect processing of two-byte elements in the NTFS file system. Exploiting this vulnerability allows...
CVE-2025-24788
snowflake-connector-net is the Snowflake Connector for .NET. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for .NET in which files downloaded from stages are temporarily placed in a world-readable local directory, making them accessible to unauthorized users on th...
CVE-2025-24788 Snowflake Connector for .NET has weak temporary files permissions
snowflake-connector-net is the Snowflake Connector for .NET. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for .NET in which files downloaded from stages are temporarily placed in a world-readable local directory, making them accessible to unauthorized users on th...
[SECURITY] [DLA 4034-1] simgear security update
------------------------------------------------------------------------- Debian LTS Advisory DLA-4034-1 [email protected] https://www.debian.org/lts/security/ Dr. Tobias Quathamer January 29, 2025 https://wiki.debian.org/LTS -...
Debian dla-4034 : libsimgear-dev - security update
The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4034 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4034-1 [email protected] https://www.debian.org/lts/security/...
CVE-2025-0781 Incorrect Authorization in SimGear
An attacker can bypass the sandboxing of Nasal scripts and arbitrarily write to any file path that the user has permission to modify at the operating-system level...
CVE-2025-23212 Tandoor Recipes - Local file disclosure - Users can read the content of any file on the server
Tandoor Recipes is an application for managing recipes, planning meals, and building shopping lists. The external storage feature allows any user to enumerate the name and content of files on the server. This vulnerability is fixed in 1.5.28...
DEBIAN-CVE-2024-0149
NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information disclosure...
CVE-2024-0149
NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information disclosure...
UBUNTU-CVE-2024-0149
NVIDIA GPU Display Driver for Linux contains a vulnerability which could allow an attacker unauthorized access to files. A successful exploit of this vulnerability might lead to limited information disclosure...
CVE-2022-31749
An argument injection vulnerability in the diagnose and import pac commands in WatchGuard Fireware OS before 12.8.1, 12.1.4, and 12.5.10 allows an authenticated remote attacker with unprivileged credentials to upload or read files to limited, arbitrary locations on WatchGuard Firebox and XTM...
NVIDIA GPU Display Driver 缓冲区错误漏洞
NVIDIA GPU Display Driver is an American NVIDIA driver for interactive support of graphics card display modules in operating systems. A buffer error vulnerability exists in NVIDIA GPU Display Driver, which stems from the inclusion of a vulnerability that could allow an attacker to gain unauthoriz...
PT-2025-4048 · Unknown · Esafenet Cdg V5
Name of the Vulnerable Software and Affected Versions: ESAFENET CDG V5 Description: A critical issue affects some unknown functionality of the file /content top.jsp. The manipulation of the id argument leads to SQL injection. The attack may be launched remotely. The exploit has been disclosed to...
PT-2025-4045 · Unknown · Esafenet Cdg
Name of the Vulnerable Software and Affected Versions: ESAFENET CDG version V5 Description: A vulnerability was found in ESAFENET CDG V5, classified as problematic. This issue affects some unknown processing of the file /SysConfig.jsp. The manipulation of the argument help leads to cross-site...