290 matches found
CVE-2023-39912
Zoho ManageEngine ADManager Plus before 7203 allows Help Desk Technician users to read arbitrary files on the machine where this product is installed...
Design/Logic Flaw
1Panel is an open source Linux server operation and maintenance management panel. In version 1.4.3, arbitrary file reads allow an attacker to read arbitrary important configuration files on the server. In the api/v1/file.go file, there is a function called LoadFromFile, which directly reads the...
DEBIAN-CVE-2023-32213
When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects Firefox 113, Firefox ESR 102.11, and Thunderbird 102.11...
CVE-2022-47188
Generex UPS CS141, affected in versions prior to 2.06, contains an arbitrary local file read vulnerability. An attacker using default credentials can upload a backup file containing a symlink to /etc/shadow, enabling content access to that path. The issue is documented in CVE-2022-47188 and corro...
Google Pixel 缓冲区错误漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...
Google Pixel 缓冲区错误漏洞
Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from a security vulnerability that stems from a lack of boundary checking and possible out-of-bounds reading...
CVE-2022-39347
FreeRDP is a free remote desktop protocol library and clients. Affected versions of FreeRDP are missing path canonicalization and base path check for drive channel. A malicious server can trick a FreeRDP based client to read files outside the shared directory. This issue has been addressed in...
CVE-2022-40705 Apache SOAP: XML External Entity Injection (XXE) allows unauthenticated users to read arbitrary files via HTTP
An Improper Restriction of XML External Entity Reference vulnerability in RPCRouterServlet of Apache SOAP allows an attacker to read arbitrary files over HTTP. This issue affects Apache SOAP version 2.2 and later versions. It is unknown whether previous versions are also affected. NOTE: This...
CVE-2022-32275
Grafana 8.4.3 is listed as CVE-2022-32275 for a potential directory/traversal issue that could let an attacker read arbitrary files via crafted URLs such as /dashboard/snapshot/{...}/etc/passwd. The description notes the vendor’s position that there is no vulnerability and that the request yields...
CVE-2022-22648
This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.6.5, macOS Monterey 12.3, Security Update 2022-003 Catalina. An application may be able to read restricted memory...
PT-2022-15682 · Cybonet · Cybonet Pineapp Mail Relay
Name of the Vulnerable Software and Affected Versions: Cybonet PineApp Mail Relay affected versions not specified Description: The issue allows an attacker to send a request to the "/manage/mailpolicymtm/log/eml viewer/email.content.body.php" API endpoint with a filesystem path parameter set to a...
The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to exploit their privileges and gain unauthorized access to protected information.
The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information...
Arbitrary File Read Vulnerability in the Flash Flood Monitoring and Early Warning Platform of Siltronic Technology Limited (CNVD-2022-10309)
Siltronic Ltd. is an information service provider for disaster reduction and profitability in China. An arbitrary file read vulnerability exists in the flash flood monitoring and early warning platform of Sicron Technology Limited, which can be exploited by attackers to obtain sensitive informati...
CVE-2021-43277
An out-of-bounds read vulnerability exists in the U3D file reading procedure in Open Design Alliance PRC SDK before 2022.10. Crafted data in a U3D file can trigger a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute...
SUSE SLED15: postgresql12 / postgresql12-contrib / postgresql12-devel / etc (SUSE-SU-2021:3256-1)
The remote SUSE Linux SLED15 / SLES15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2021:3256-1 advisory. - CVE-2021-3677: Fixed memory disclosure in certain queries bsc1189748. - Fixed build with llvm12 on s390x bsc1185952. - Re-enabled icu for...
Little Raccoon Novel CMS has an arbitrary file read vulnerability
Little Raccoon Novel CMS is open source novel CMS with attitude, based on thinkphp 6.0 development. Little Raccoon novel cms has an arbitrary file read vulnerability , attackers can use the vulnerability to obtain sensitive information...
Arbitrary File Read Vulnerability in DSKMS
DSKMS is a professional content payment system tailored for enterprise customers by Changsha Deshaun Network Technology Co. DSKMS suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...
Arbitrary File Read Vulnerability in Fiberhome Network Behavior Audit System
Established in 1999, Fiberhome Communication Technology Co., Ltd. is currently the only scientific research and industrial entity integrating three strategic technologies in the field of optical communication in China. An arbitrary file read vulnerability exists in Fiberhome Network Behavior Audi...
YzmCMS 代码问题漏洞
YzmCMS is a lightweight open source content management system based on PHP+Mysql architecture developed by Yuan Zhimeng alone. YzmCMS 5.8 version of the back-end collection management server-side request forgery vulnerability, an attacker can use the vulnerability to read any file...