CVE-2020-28603

CGAL CGAL-5.1.1 Nef polygon parsing contains CVE-2020-28603: an out-of-bounds read in PM_io_parser::read_hedge() e->set_prev() can lead to code execution. Connected advisories confirm the same family of vulnerabilities and provide upgrade guidance. Mitigation: upgrade CGAL to a newer release. ...

CVE-2020-28602

Multiple code execution vulnerabilities exists in the Nef polygon-parsing functionality of CGAL libcgal CGAL-5.1.1. A specially crafted malformed file can lead to an out-of-bounds read and type confusion, which could lead to code execution. An attacker can provide malicious input to trigger any o...

CVE-2022-24843 Path Traversal in github.com/flipped-aurora/gin-vue-admin

Gin-vue-admin is a backstage management system based on vue and gin, which separates the front and rear of the full stack. Gin-vue-admin 2.50 has arbitrary file read vulnerability due to a lack of parameter validation. This has been resolved in version 2.5.1. There are no known workarounds for th...

CVE-2022-22279

CVE-2022-22279 describes a post-authentication arbitrary file read affecting end-of-life SonicWall SRA appliances (all 8.x and 9.0.0.5-19sv and earlier) and SMA 100 series firmware (9.0.0.9-26sv and earlier). The available sources do not specify the exact vulnerable component or root cause. Impac...

CVE-2021-39805

In l2cbleprocesssigcmd of l2cble.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure through Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

PT-2022-3913 · Adobe · Acrobat Reader

Name of the Vulnerable Software and Affected Versions: Adobe Acrobat Reader versions 22.001.20085 and earlier Adobe Acrobat Reader versions 20.005.30314 and earlier Adobe Acrobat Reader versions 17.012.30205 and earlier Description: The issue is caused by an out-of-bounds read vulnerability when...

Out-of-bounds Read in r_bin_ne_get_entrypoints function

Description Out-of-bounds OOB read vulnerability exists in rbinnegetentrypoints function in Radare2 5.6.7 Version bash radare2 5.6.7 27777 @ linux-x86-64 git.5.6.6 commit: 0c4af43def68ce29f7a74847bb1b7286da155200 build: 2022-04-1008:53:32 Analysis The vulnerability exists due to the invalid type...

Mozilla: Incorrect AliasSet used in JIT Codegen

A flaw was found in Mozilla. The Mozilla Foundation Security Advisory describes this flaw as: When generating the assembly code for MLoadTypedArrayElementHole, an incorrect AliasSet was used. In conjunction with another vulnerability, this could have been used for an out-of-bounds memory read...

HPE OneView 安全漏洞

A file read vulnerability exists in versions prior to HPE OneView 6.6, which stems from a network system or product that does not properly restrict access to resources from unauthorized roles. An attacker could exploit this vulnerability to cause local unauthorized file read access...

GHSA-8P4X-FQ8V-XHV4 Arbitrary file read vulnerability in Jenkins Continuous Integration with Toad Edge Plugin

Jenkins Continuous Integration with Toad Edge Plugin 2.3 and earlier allows attackers with Item/Configure permission to read arbitrary files on the Jenkins controller by specifying an input folder on the Jenkins controller as a parameter to its build steps...

USN-5348-1 smarty3 vulnerabilities

David Gnedt and Thomas Konrad discovered that Smarty was incorrectly sanitizing the paths present in the templates. An attacker could possibly use this use to read arbitrary files when controlling the executed template. CVE-2018-13982 It was discovered that Smarty was incorrectly sanitizing the...

CVE-2021-42720

Adobe Bridge version 11.1.1 and earlier is affected by an out-of-bounds read vulnerability when parsing a crafted file, which could result in a read past the end of an allocated memory structure. An attacker could leverage this vulnerability to execute code in the context of the current user...

CVE-2021-40050

There is an out-of-bounds read vulnerability in the IFAA module. Successful exploitation of this vulnerability may cause stack overflow...

UBUNTU-CVE-2021-34342

Ming 0.4.8 has an out-of-bounds read vulnerability in the function newVarN in decompile.c which causes a huge information leak...

PT-2022-10224 · Panorama Tools +4 · Libpano13 +4

Name of the Vulnerable Software and Affected Versions: Panorama Tools libpano13 version v2.9.20 Description: The issue is related to an out-of-bounds read in the function panoParserFindOLine in the file parser.c. This out-of-bounds read can potentially lead to information disclosure or other...

DEBIAN-CVE-2021-44962

An out-of-bounds read vulnerability exists in the GCode::extrude functionality of Slic3r libslic3r 1.3.0 and Master Commit b1a5500. A specially crafted stl file could lead to information disclosure. An attacker can provide a malicious file to trigger this vulnerability...

Code injection

The auto-completion plugin in Ametys CMS before 4.5.0 allows a remote unauthenticated attacker to read documents such as plugins/web/service/search/auto-completion//en.xml and similar pathnames for other languages, which contain all characters typed by all users, including the content of private...

PT-2022-2115 · Unknown +9 · Libarchive +9

Name of the Vulnerable Software and Affected Versions: libarchive version 3.6.0 Description: The issue is related to an out-of-bounds read via the zipx lzma alone init function in the libarchive library. This can allow a remote attacker to disclose protected information or cause a denial of...

Kubernetes: File Read Vulnerability allows Attackers to Compromise S3 buckets using Prow

A vulnerability was found in AWS Prow that allowed attackers to sign the base path of S3 buckets used by Prow, leading to the dumping of the entire private bucket details and reading any file in the bucket. This could result in the compromise of S3 buckets containing production data...

CVE-2021-39664

In LoadedPackage::Load of LoadedArsc.cpp, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure when parsing an APK file with no additional execution privileges needed. User interaction is needed for exploitation.Product:...