2010 matches found
CVE-2024-54525
CVE-2024-54525 describes a logic issue in file handling where restoring a maliciously crafted backup file could modify protected system files. The issue affects Apple platforms across multiple OS lines via the MobileBackup stack, with fixes in: visionOS 2.2, watchOS 11.2, tvOS 18.2, macOS Sequoia...
Apple iOS和Apple iPadOS 安全漏洞
Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that stems from file handling improvements and could result ...
Uncontrolled Memory Consumption in `SimpleDirectoryReader` Due to Post-Limit File Processing
Description Summary: The SimpleDirectoryReader component in llamaindex.core contains a resource management flaw where user-specified file limits numfileslimit are applied after fully enumerating and loading all discovered files into memory. This design causes uncontrolled memory consumption and...
picklescan 数据伪造问题漏洞
picklescan is a security scanning program by the individual developer Matthieu Maitre. A data forgery issue vulnerability exists in picklescan versions prior to 0.0.23, which stems from a ZIP file manipulation that may cause a crash, thereby bypassing malicious payload detection...
CVE-2025-21830
In the Linux kernel, the following vulnerability has been resolved: landlock: Handle weird files A corrupted filesystem e.g. bcachefs might return weird files. Instead of throwing a warning and allowing access to such file, treat them as regular files...
CVE-2025-21830
In CVE-2025-21830, the Linux kernel Landlock feature was updated to handle “weird” files returned by corrupted filesystems (e.g., bcachefs). Previously, such files could bypass a warning and be treated as accessible regular files. The vulnerability is local (local access required) with a low-priv...
DOM-based Cross-site Scripting (XSS)
copyparty is vulnerable to DOM-based cross-site scripting. The vulnerability is due to improper handling of maliciously named files during drag-and-drop actions in the Web UI, allowing arbitrary JavaScript execution...
Linux Distros Unpatched Vulnerability : CVE-2024-27306
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - aiohttp is an asynchronous HTTP client/server framework for asyncio and Python. A XSS vulnerability exists on index pages for static file handling. This...
Linux Distros Unpatched Vulnerability : CVE-2023-52909
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: nfsd: fix handling of cached open files in nfsd4open codepath Commit fb70bf124b05 NFSD:...
webkitgtk: Copying a URL from Web Inspector may lead to command injection
A flaw was found in WebKitGTK. Copying a URL from Web Inspector may lead to command injection due to improper file handling...
AZL-57614 CVE-2024-45780 affecting package grub2 for versions less than 2.06-15
A flaw was found in grub2. When reading tar files, grub2 allocates an internal buffer for the file name. However, it fails to properly verify the allocation against possible integer overflows. It's possible to cause the allocation length to overflow with a crafted tar file, leading to a heap...
webkitgtk: Copying a URL from Web Inspector may lead to command injection
A flaw was found in WebKitGTK. Copying a URL from Web Inspector may lead to command injection due to improper file handling...
CVE-2022-49655
In the Linux kernel, the following vulnerability has been resolved: fscache: Fix invalidation/lookup race If an NFS file is opened for writing and closed, fscacheinvalidate will be asked to invalidate the file - however, if the cookie is in the LOOKINGUP state or the CREATING state, then request ...
USN-7286-1: iniParser vulnerability
It was discovered that iniParser incorrectly handled certain files. An attacker could possibly use this issue to cause iniParser to crash, resulting in a denial of service...
WordPress plugin VG PostCarousel 安全漏洞
WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...
Security update for grub2
This update for grub2 fixes the following issues: CVE-2024-45781: Fixed strcpy overflow in ufs. bsc1233617 CVE-2024-56737: Fixed a heap-based buffer overflow in hfs. bsc1234958 CVE-2024-45782: Fixed strcpy overflow in hfs. bsc1233615 CVE-2024-45780: Fixed an overflow in tar/cpio. bsc1233614...
Vulnerabilities of Linux operating system’s kernel components related to fs/file handling, which allow attackers to trigger service failures
The vulnerability of Linux operating system’s kernel components related to files and directories involves incorrect validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures...
SUSE CVE-2025-24150
A privacy issue was addressed with improved handling of files. This issue is fixed in Safari 18.3, iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3. Copying a URL from Web Inspector may lead to command injection...
CVE-2022-28686
This vulnerability allows remote attackers to execute arbitrary code on affected installations of AVEVA Edge 2020 SP2 Patch 04201.2111.1802.0000. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw...