380 matches found
PT-2025-9110 · Loggrove · Loggrove
Name of the Vulnerable Software and Affected Versions: Loggrove version 1.0 Description: The issue concerns SQL Injection in the read.py file. Recommendations: For version 1.0, consider restricting access to the read.py file until a patch is available. As a temporary workaround, review and modify...
CVE-2024-13374: Missing Authorization
The WP Table Manager plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on thewptmgetFolders AJAX action in all versions up to, and including, 4.1.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to read...
CVE-2024-57252
OtCMS =V7.46 is vulnerable to Server-Side Request Forgery SSRF in /admin/read.php, which can Read system files arbitrarily...
AZL-67605 CVE-2024-53219 affecting package kernel 5.15.200.1-1
In the Linux kernel, the following vulnerability has been resolved: virtiofs: use pages instead of pointer for kernel direct IO When trying to insert a 10MB kernel module kept in a virtio-fs with cache disabled, the following warning was reported: ------------ cut here ------------ WARNING: CPU: ...
CVE-2024-53219 virtiofs: use pages instead of pointer for kernel direct IO
In the Linux kernel, the following vulnerability has been resolved: virtiofs: use pages instead of pointer for kernel direct IO When trying to insert a 10MB kernel module kept in a virtio-fs with cache disabled, the following warning was reported: ------------ cut here ------------ WARNING: CPU: ...
GHSA-6VRW-MPJ8-3J59 Duplicate Advisory: Keycloak Path Traversal Vulnerability Due to External Control of File Name or Path
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-5545-r4hg-rj4m. This link is maintained to preserve external references. Original Description A vulnerability was found in Keycloak. A user with high privileges could read sensitive information from a Vault file...
PT-2024-40897 · Unknown · Langchainjs
Name of the Vulnerable Software and Affected Versions: langchainjs version 0.2.5 Description: A path traversal issue exists, allowing attackers to save files anywhere in the filesystem, overwrite existing text files, read .txt files, and delete files. This is exploited through the setFileContent,...
DEBIAN-CVE-2024-49966
In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqisyncwork before freeing oinfo ocfs2globalreadinfo will initialize and schedule dqisyncwork at the end, if error occurs after successfully reading global quota, it will trigger the following warning with...
UBUNTU-CVE-2024-49966
In the Linux kernel, the following vulnerability has been resolved: ocfs2: cancel dqisyncwork before freeing oinfo ocfs2globalreadinfo will initialize and schedule dqisyncwork at the end, if error occurs after successfully reading global quota, it will trigger the following warning with...
Malicious code in fs-read-file (npm)
--- -= Per source details. Do not edit below this line.=-...
MAL-2024-9636 Malicious code in fs-read-file (npm)
--- -= Per source details. Do not edit below this line.=-...
CVE-2024-8752
The Windows version of WebIQ 2.15.9 is affected by a directory traversal vulnerability that allows remote attackers to read any file on the system...
CVE-2024-8752 WebIQ 2.15.9 Runtime on Windows - Directory Traversal Vulnerability
The Windows version of WebIQ 2.15.9 is affected by a directory traversal vulnerability that allows remote attackers to read any file on the system...
ClanSphere 2011.3 Local File Inclusion
This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule 'ClanSphere 2011.3 Local File Inclusion Vulnerability', 'Description' = %q This module exploits a directory traversal flaw found in Clansphere...
PT-2024-41481 · Ооо 'Ред Софт' · Ред База Данных
Уязвимость функции evlReadFile в модуле SysFunction.cpp системы управления базами данных «Ред База Данных» связана с механизмом доступа к файловым блобам, настроенным в конфигурационном файле directories.conf. Эксплуатация уязвимости может позволить нарушителю, действующему удаленно, получить...
PT-2024-29276
Name of the Vulnerable Software and Affected Versions streamlit-geospatial versions prior to commit c4f81d9616d40c60584e36abb15300853a66e489 Description The issue arises from the url variable in the pages/9 🔲 Vector Data Visualization.py file, which takes user input. This input is then passed to...
streamlit-geospatial 代码问题漏洞
streamlit-geospatial is an Open Geospatial Solutions open source streamlit multi-page application for geospatial applications. A code issue vulnerability exists in streamlit-geospatial that stems from pages/9? The url variable in VectorDataVisualization.py accepts user input, which is then passed...
ifm electronic Smart PLC AC14xx and Smart PLC AC4xxS Operating System Command Injection Vulnerability
The ifm electronic Smart PLC AC14xx and ifm electronic Smart PLC AC4xxS are a series of hosts/gateways from ifm electronic Germany. An operating system command injection vulnerability exists in the ifm electronic Smart PLC AC14xx and Smart PLC AC4xxS versions 4.3.17 and earlier, which originates...
GHSA-9CHM-M6X2-6FVC lollms vulnerable to path traversal due to unauthenticated root folder settings change
A path traversal vulnerability exists in the XTTS server included in the lollms package, version v9.6. This vulnerability arises from the ability to perform an unauthenticated root folder settings change. Although the read file endpoint is protected against path traversals, this protection can be...
