PHP File Read Vulnerability

PHP PHP: Hypertext Preprocessor is an open source general-purpose computer scripting language maintained by the PHP Group and the open source community. The language supports multiple syntaxes, multiple databases and operating systems, and support for C, C++ for program extensions and so on. A fi...

Pulp Private Key Read Vulnerability

Pulp is a free and open source repository platform for managing content. The platform supports pushing content from software packages to consumers. A private key read vulnerability exists in Pulp that stems from the program allowing the creation of certificates and private keys using 644...

Fusion K2 Wireless Router Override Read Configuration File Vulnerability

The Fusion K2 Wireless Router is a wireless router for home use. The Fusion K2 Wireless Router is vulnerable to an override read configuration file vulnerability. Since Fusion K2 can read the configuration file which contains the password of the logged-in device without logging in, it can illegal...

Oracle Database Server RDBMS Security Component Data Read Vulnerability

Oracle Database Server is a relational database management system from Oracle Corporation, of which RDBMS Security is a database security storage component. A data read vulnerability exists in the RDBMS Security component of Oracle Database Server version 12.1.0.1 and 12.1.0.2, which can be...

Oracle Fusion Middleware HTTP Server Component Data Read Vulnerability

Oracle Fusion Middleware Oracle Fusion Middleware is the United States Oracle Oracle company's set of business innovation platform for enterprise and cloud environments. Oracle HTTP Server is one of the open source technology based on Apache Web server components. A data read vulnerability exists...

Oracle Java SE and Java SE Embedded JCE Subcomponent Data Read Vulnerability

Oracle Java SE and Java SE Embedded are both products of Oracle Corporation. Java SE Java Platform Standard Edition is used to develop and deploy Java applications for desktops, servers, as well as embedded devices and real-time environments; Java SE Embedded is a Java platform for the developmen...

Oracle MySQL Server: DML Subcomponent Data Read Vulnerability

Oracle MySQL is an open source relational database management system from Oracle. This database system is characterized by high performance, low cost and good reliability. A data read vulnerability exists in the Server: DML subcomponent of Oracle MySQL. A local attacker could exploit this...

chromium-browser: out-of-bounds read in V8

The Array.prototype.concat implementation in builtins.cc in Google V8, as used in Google Chrome before 49.0.2623.108, does not properly consider element data types, which allows remote attackers to cause a denial of service out-of-bounds read or possibly have unspecified other impact via crafted...

CVE-2016-2800

The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7, allows remote attackers to cause a denial of service buffer over-read or possibly have unspecified other impact via a crafted Graphite smart font,...

Ipswitch MOVEit DMZ and MOVEit Mobile File Read Vulnerabilities

Ipswitch MOVEit is an automated file transfer system from Ipswitch USA. DMZ and Mobile are among the versions. Ipswitch MOVEit DMZ and MOVEit Mobile have a security vulnerability in the 'Send as attachment' function due to the mobile/sendMsg URI failing to adequately filter the ' serverFileIds'...

MGASA-2015-0489 Updated libpng12 packages fix security vulnerability

There is a underflow read in pngcheckkeyword in pngwutil.c in libpng 1.2.x before 1.2.56 CVE-2015-8540...

Wireshark - dissct_rsl_ipaccess_msg Static Out-of-Bounds Read

Source: https://code.google.com/p/google-security-research/issues/detail?id=660 The following crash due to a static out-of-bounds read can be observed in an ASAN build of Wireshark current git master, by feeding a malformed file to tshark "$ ./tshark -nVxr /path/to/file": --- cut --- ==7557==ERRO...

Cisco Firepower 9000 Firepower Extensible Operating System File Read Vulnerability

The Cisco Firepower Extensible Operating System on Firepower 9000 is an operating system from Cisco that runs in the 9000 series firewall appliances. A security vulnerability in Cisco Firepower Extensible Operating System 1.1 1.160 on Cisco Firepower 9000 devices allows remote attackers to read...

SUSE-SU-2015:2017-1 Security update for libpng12-0

The libpng12-0 package was updated to fix the following security issues: - CVE-2015-8126: Fixed a buffer overflow vulnerabilities in pnggetPLTE/pngsetPLTE functions bsc954980. - CVE-2015-7981: Fixed an out-of-bound read bsc952051...

CVE-2015-7314

The Precious module in gollum before 4.0.1 allows remote attackers to read arbitrary files by leveraging the lack of a certain temporary-file check...

CVE-2015-2059

CVE-2015-2059 affects libin (libidn) prior to 1.31 as used by jabberd2. The issue is an out-of-bounds read triggered by invalid UTF-8 characters in a string, potentially enabling memory disclosure. The provided documents do not specify a vendor patch, version, or concrete remediation for this CVE...

The vulnerability of the Firefox ESR browser, which allows a hacker to gain access to the contents of memory cells

The vulnerability of the ArrayBufferBuilder::append function in Firefox ESR is caused by buffer overflows in dynamic memory. Exploiting this vulnerability can allow a remote attacker to gain access to the contents of memory cells...

CVE-2015-2412

Microsoft Internet Explorer 10 and 11 allows remote attackers to read arbitrary local files via a crafted pathname, aka "Internet Explorer Information Disclosure Vulnerability."...

The star outside the host across the web catalog file read vulnerability-vulnerability warning-the black bar safety net

Recently encountered more and more are the star outside the host..a variety of balls.. The clouds broke, the stars outside the cross-the directory to read the file this vulnerability to bring a lot of convenience, so in this recording it for later reference use. Detailed description: The problem...

USN-2550-1 firefox vulnerabilities

Olli Pettay and Boris Zbarsky discovered an issue during anchor navigations in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass same-origin policy restrictions. CVE-2015-0801 Bobby Holley discovered that...