PYSEC-2024-184

A local file inclusion vulnerability exists in the JSON component of gradio-app/gradio version 4.25. The vulnerability arises from improper input validation in the postprocess function within gradio/components/jsoncomponent.py, where a user-controlled string is parsed as JSON. If the parsed JSON...

JetBrains TeamCity < 2022.04.7 / 2022.05.x < 2022.10.6 / 2023.x < 2023.05.6 / 2023.06.x < 2023.11.5 / 2024.x < 2024.03.2 Multiple Vulnerabilities

The version of JetBrains TeamCity installed on the remote host is prior to 2022.04.7, or prior to 2022.10.6, or prior to 2023.05.6, or prior to 2023.11.5, or prior to 2024.03.2. It is, therefore, affected by multiple vulnerabilities: - In JetBrains TeamCity before 2022.04.7, 2022.10.6, 2023.05.6,...

CVE-2024-36362

CVE-2024-36362 describes a path traversal in JetBrains TeamCity servers that allows reading arbitrary files from the server. Affected versions are TeamCity before 2022.04.7, 2022.10.6, 2023.05.6, 2023.11.5, and 2024.03.2. Remediation is to upgrade to the corresponding fixed releases: 2022.04.7 or...

PT-2024-35096 · Opentext · Opentext Dimensions Rm

Name of the Vulnerable Software and Affected Versions: OpenText Dimensions RM affected versions not specified Description: The issue allows authenticated users to read files stored on the server via webservices, potentially leading to unauthorized access to sensitive information. Recommendations:...

CVE-2023-41290

A path traversal vulnerability has been reported to affect QuFirewall. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version:...

PT-2024-11539 · Mautic · Mautic

Name of the Vulnerable Software and Affected Versions: Mautic versions prior to 4.4.12 Mautic versions prior to 5.0.4 Description: An authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery SSRF vulnerability...

CVE-2024-1974

The HT Mega – Absolute Addons For Elementor plugin for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 2.4.6 via the render function. This makes it possible for authenticated attackers, with contributor access or higher, to read the contents of arbitrary files...

PT-2024-24617 · Pebble · Pebble

Name of the Vulnerable Software and Affected Versions: Pebble versions prior to 1.10.2 Pebble versions 1.1.1, 1.4.2, and 1.7.4 are fixed versions, but all versions prior to 1.10.2 are considered vulnerable. Description: The issue allows unprivileged local users to read files with root-equivalent...

The vulnerability of the ColdFusion software platform, related to deficiencies in access control, allows attackers to gain access to confidential information.

The vulnerability of the ColdFusion software platform is related to deficiencies in access control. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to confidential information—specifically, to read and write files...

Apache Pulsar 安全漏洞

Apache Pulsar is the United States Apache Apache Foundation for cloud environments, set of messages, storage, lightweight functional computing as one of the distributed message flow platform. The software supports multi-tenant, persistent storage, multi-machine room cross-region data replication,...

PT-2024-2611 · Apache · Apache Pulsar

Name of the Vulnerable Software and Affected Versions: Apache Pulsar versions prior to 2.10.6 Apache Pulsar versions prior to 2.11.4 Apache Pulsar versions prior to 3.0.3 Apache Pulsar versions prior to 3.1.3 Apache Pulsar versions prior to 3.2.1 Description: The issue is related to the Pulsar...

CVE-2023-47221

A path traversal vulnerability has been reported to affect Photo Station. If exploited, the vulnerability could allow authenticated administrators to read the contents of unexpected files and expose sensitive data via a network. We have already fixed the vulnerability in the following version:...

AiLux imx6 Security Vulnerability

AiLux imx6 is a computing module from AiLux. AiLux imx6 A security vulnerability exists in versions prior to imx6 imx61.0.7-2, which stems from a failure of a protection mechanism that allows a physical attacker to read arbitrary files on the system, change the configuration of the embedded...

CVE-2023-41829

An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files without authorization...

Input validation

An improper export vulnerability was reported in the Motorola Carrier Services application that could allow a malicious, local application to read files without authorization...

Motorola Carrier Security Breach

Motorola Carrier is a suite of solutions and services from Motorola, Inc. designed to help operators build and manage their mobile communications networks. A security vulnerability exists in Motorola Carrier that stems from the presence of an incorrect export vulnerability that could allow a...

HGiga OAKlouds Path Traversal Vulnerability

Hgiga Oaklouds is an enterprise collaborative work portal network of China Henderson Technology Hgiga Company. It is used for just-in-time communication and resource reservation. A path traversal vulnerability exists in HGiga OAKlouds. An attacker can exploit this vulnerability to read and delete...

PT-2024-20112 · Unknown +3 · Openrefine +3

Name of the Vulnerable Software and Affected Versions: OpenRefine versions = 3.7.7 Description: A jdbc attack vulnerability exists in OpenRefine where an attacker may construct a JDBC query to read files on the host filesystem. This issue allows attackers to read sensitive files on the target...

The vulnerability of the Google Chrome browser’s Extensions allows a malicious actor to install a malicious extension and gain access to read files.

The vulnerability of the Google Chrome browser’s Extensions exists due to insufficient validation of input data. Exploiting this vulnerability allows attackers to deploy malicious extensions and gain access to files by using a specially crafted HTML page...

Path Traversal

iodine is vulnerable to Path Traversal . The vulnerability is due to improper validation or URL's allowrf to manipulate the static file server. This issue can be exploited by an attacker to read files outside the public folder via a malicious URL...