CVE-2023-41886

OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file read vulnerability allows any unauthenticated user to read a file on a server. Version 3.7.5 fixes this issue...

CVE-2023-41886

CVE-2023-41886 affects OpenRefine prior to version 3.7.5. The vulnerability is an arbitrary file read allowing any unauthenticated user to read a file on the server. The issue is fixed in version 3.7.5. Affected product: OpenRefine. Root cause: improper file read handling, leading to unauthorized...

CVE-2023-41886 OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack

OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file read vulnerability allows any unauthenticated user to read a file on a server. Version 3.7.5 fixes this issue...

Moderate: Red Hat Security Advisory: librsvg2 security update

An update for librsvg2 is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Design/Logic Flaw

Adobe After Effects versions 22.0 and earlier and 18.4.2 and earlier are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user...

CVE-2021-44188

Adobe After Effects versions 22.0 and earlier and 18.4.2 and earlier are affected by an out-of-bounds read vulnerability which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

Design/Logic Flaw

Adobe Photoshop version 22.5.1 ?and earlier?versions???are affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in...

Design/Logic Flaw

Adobe Premiere Pro versions 22.0 and earlier and 15.4.2 and earlier are affected by an out-of-bounds read vulnerability which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

Design/Logic Flaw

Adobe Media Encoder version 15.2 and earlier is affected by an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. Exploitation of this issue requires user interaction in that a victi...

Arbitrary File Read Vulnerability in Reporter of Beijing Huaqing Xin'an Technology Co.

Beijing Huaqing Xinan Technology Co., Ltd. is a network security enterprise, a national high-tech enterprise and Zhongguancun high-tech enterprise. Reporter of Beijing Huaqing Xinan Technology Co., Ltd. has an arbitrary file reading vulnerability that can be exploited by attackers to obtain...

CVE-2023-4616 thumbnail Directory Path Traversal Allows Unauthenticated Arbitrary File Read Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of LG LED Assistant. Authentication is not required to exploit this vulnerability. The specific flaw exists within the /api/thumbnail endpoint. The issue results from the lack of proper validati...

Adobe Acrobat Reader Out-of-Bounds Read Vulnerability (CNVD-2023-62953)

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDF. Adobe Acrobat Reader has an out-of-bounds read vulnerability that can be exploited by an attacker to cause a sensitive memory leak...

CVE-2023-39553 Apache Airflow Drill Provider Arbitrary File Read Vulnerability

Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Drill Provider. Apache Airflow Drill Provider is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection with DrillHook giving an opportunity to read fil...

Intel oneVPL GPU Buffer Error Vulnerability

Intel oneVPL GPU is a product of Intel Corporation USA. It is a runtime implementation of the oneVPL API for Intel's generation of GPUs. A security vulnerability exists in IntelR oneVPL GPU versions prior to 22.6.5, which originates from an out-of-bounds read. An attacker could exploit the...

Adobe Acrobat Reader Buffer Error Vulnerability

Adobe Acrobat Reader is a PDF viewer from the American company Audobee Adobe. The software is used to print, sign and annotate PDFs. A buffer error vulnerability previously existed in Adobe Acrobat Reader version 23.003.20244, which originated from being affected by an out-of-bounds read...

Siemens Parasolid和Siemens Teamcenter Visualization 缓冲区错误漏洞

Parasolid is a 3D geometric modeling tool that supports a variety of techniques including solid modeling, direct editing, and free-form surface/table modeling.Teamcenter Visualization enables organizations to enhance their product lifecycle management PLM environments with a range of comprehensiv...

Siemens Solid Edge 缓冲区错误漏洞

Solid Edge is a portfolio of software tools that address a variety of product development processes: 3D design, simulation, manufacturing and design management. Siemens Solid Edge suffers from an out-of-bounds read vulnerability that can be exploited by an attacker to execute code in the context ...

Linux kernel 缓冲区错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An out-of-bounds read vulnerability exists in the Linux kernel, which stems from improper validation of user-supplied data and can be exploited by an attacker to cause an...

SUSE CVE-2023-38252

An out-of-bounds read flaw was found in w3m, in the Strnewsize function in Str.c. This issue may allow an attacker to cause a denial of service through a crafted HTML file...

Juniper Networks Junos OS SRX 缓冲区错误漏洞

Juniper Networks Junos OS SRX is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. Juniper Networks Junos OS SRX has a buffer error vulnerability that originates from an out-of-bounds rea...