173914 matches found
PT-2026-103630
Name of the Vulnerable Software and Affected Versions DeepWiki-Open versions prior to commit d92819a Description An unauthenticated arbitrary file read issue exists in the 'GET /codemap/file' endpoint. By providing a non-URL value to the repo url parameter, an attacker can bypass path containment...
CVE-2026-103235: Improperly Controlled Modification of Dynamically-Determined Object Attributes
MISP contains a mass assignment vulnerability in the event delegation feature. When a user with delegation permission submits a delegation request, the application authorized the user against the event identified in the URL but then persisted the entire submitted record, including caller-supplied...
PT-2026-103593
Yonyou U8 CRM before V16.5 and V18 contains an arbitrary file read vulnerability in /ajax/getemaildata.php that allows unauthenticated attackers to bypass authentication using the DontCheckLogin=1 parameter and read arbitrary files via an unvalidated filePath parameter. Attackers can exploit this...
The vulnerability of the rtw_restruct_wmm_ie() function in the drivers/staging/rtl8723bs/core/rtw_mlme.c module allows unauthorized access to protected information by a hacker. This vulnerability exposes additional devices that are supported by the Linux operating system.
The vulnerability of the rtwrestructwmmie function in the drivers/staging/rtl8723bs/core/rtwmlme.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a remote attacker to gain...
The vulnerability of the rtw_get_ie_ex() function in the drivers/staging/rtl8723bs/core/rtw_ieee80211.c module allows for unauthorized access to protected information by a hacker, thereby supporting additional devices in the Linux operating system.
The vulnerability of the rtwgetieex function in the drivers/staging/rtl8723bs/core/rtwieee80211.c module, which supports additional devices in the Linux operating system, is related to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain...
The vulnerability of the vcn_v3_0_dec_msg() function in the drivers/gpu/drm/amd/amdgpu/vcn_v3_0.c driver for AMD GPU cores in the Direct Rendering Infrastructure (DRI) of the Linux operating system allows a attacker to access protected information or cause a service failure.
The vulnerability of the vcnv30decmsg function in the drivers/gpu/drm/amd/amdgpu/vcnv30.c driver for AMD GPU cores in Linux operating systems is related to reading beyond the buffer boundaries. Exploiting this vulnerability may allow an attacker to access protected information or cause service...
ROS-20260930-73-0052
The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260930-73-0081
The vulnerability in the pci/ctxfi/ctamixer.c component of the Linux operating system is related to reading data from the buffer beyond its allowable limits. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260930-73-0040
The vulnerability in the kernel-lt is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260930-73-0051
The vulnerability of the phy/st/phy-stm32-usbphyc.c component in the Linux operating system is related to reading data from beyond the allowed buffer limits. Exploiting this vulnerability can allow an attacker to cause a service failure...
ROS-20260930-73-0008
The vulnerability of the processauthdone function in the net/ceph/messengerv2.c module, which is part of the Linux kernel’s networking functions, relates to reading beyond the buffer boundaries. Exploiting this vulnerability could allow a malicious actor to gain access to protected information or...
CVE-2024-58387: Improper Limitation of a Pathname to a Restricted Directory
Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/modelreport/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as...
VulnCheck KEV: CVE-2024-58387
Inspur Haiyue HCM Cloud contains an arbitrary file read vulnerability in the /api/modelreport/file/download endpoint that allows unauthenticated remote attackers to read arbitrary files by supplying unvalidated path parameters index and ext. Attackers can craft requests such as...
ROS-20260930-73-0136
The vulnerability in the fs/btrfs/inode.c module of the Linux operating system is related to the unlocking of a locked resource. Exploiting this vulnerability can allow an attacker to gain access to read and modify data...
CVE-2026-103591: External Control of File Name or Path
DeepWiki-Open through commit d92819a contains an unauthenticated arbitrary file read vulnerability in the GET /codemap/file endpoint via the repourl parameter. Attackers can supply a non-URL repourl value to bypass path containment checks and read any file accessible to the API process by...
PT-2026-103594
Name of the Vulnerable Software and Affected Versions Inspur Haiyue HCM Cloud affected versions not specified Description An arbitrary file read issue exists in the '/api/model report/file/download' endpoint. Unauthenticated remote attackers can read arbitrary files by providing unvalidated path...
CVE-2026-55224: Improper Limitation of a Pathname to a Restricted Directory
MineAdmin is a ready-to-use backend management system suitable for quickly building website backends, operation platforms, permission centers, internal management systems, CMS, CRM, OA, ERP and other business applications. Prior to version 3.2.0-alpha.2, the app-store plugin service concatenates...
CVE-2026-80490: Out-of-bounds Read
Algorithm::AhoCorasick::XS versions through 0.04 for Perl read the haystack string length before the scalar is stringified. The matches, firstmatch and matchdetails methods use the TSTDSTRING typemap to translate Perl scalars SVs into strings via the std::string constructor, using the SvPV macro ...
CVE-2026-47544: Out-of-bounds Read
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information disclosure, and data...
PT-2026-103393
🚨 CVE-2026-47544 NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel mode layer where an attacker could cause an out-of-bounds read. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privileges, information...