WCMS Directory Traversal Vulnerability (CNVD-2021-28257)

WCMS is a content management system CMS that uses an open web interface to build websites. A directory traversal vulnerability exists in WCMS version 0.3.2. The vulnerability can be exploited to read arbitrary files on the server running the application via the pagename parameter of wex/html.php...

Ningbo Yinzhou Tianyi Science and Technology Co.

Ningbo Yinzhou Tianyi Technology Co., Ltd. is a high-tech enterprise. Ningbo Yinzhou Tianyi Science and Technology Co., Ltd. station building system there are arbitrary file reading vulnerability, attackers can use the vulnerability to obtain sensitive information...

Webware Webdesktop Code Issue Vulnerability

Webware Webdesktop is an application software from the company Webware in the Republic of Estonia. A document management software. A code issue vulnerability exists in Webware Webdesktop version 5.1.15. The vulnerability stems from the system allowing an attacker to read all files on the server. ...

Array Out-of-Bounds Read Vulnerability in Extreme PDF Reader

Extreme PDF Reader is a simple, small, efficient and effective PDF reader developed by Beijing Haiteng Times Technology Co. Extreme PDF Reader has an array out-of-bounds reading vulnerability that can be exploited by attackers to cause the program to crash...

RainbowFish PacsOne Server 代码问题漏洞

RainbowFish PacsOne Server is an image archiving and communication system server from RainbowFish, which is used to save incoming images. The system is used to save incoming images, and a file reading vulnerability exists in Rainbowfish PacsOne Server that could be exploited by an attacker to cau...

Design/Logic Flaw

An issue has been discovered in GitLab CE/EE affecting all versions starting from 8.8.9. A specially crafted request could bypass Multipart protection and read files in certain specific paths on the server. Affected versions are: =8.8.9, =13.4, =13.5, 13.5.2...

Mail.ru: file read on MCS servers via supplying a QCOW2 image with external backing file

Local file read in mcs.mail.ru by providing QCOW2 disk image with backing image pointing to external file Mail.ru Cloud Solutions allows uploading custom images for disks. This functionality supported QCOW2 disk images. A QCOW2 disk image can have a so-called "backing image" - a file to read...

CVE-2020-15100 Uncontrolled Resource Consumption in freewvs

In freewvs before 0.1.1, a user could create a large file that freewvs will try to read, which will terminate a scan process. This has been patched in 0.1.1...

CVE-2020-15507

CVE-2020-15507 describes an arbitrary file reading vulnerability in MobileIron Core, affecting versions 10.3.0.3 and earlier, 10.4.x, 10.5.x, and 10.6.0.0, that allows a remote attacker to read files on the system via unspecified vectors. The Red Hat/NVD entries and related advisories confirm thi...

OPENSUSE-SU-2020:0429-1 Security update for GraphicsMagick

This update for GraphicsMagick fixes the following issues: - CVE-2019-12921: Fixed an issue where text filename components potentially coulf have allowed reading of arbitrary files via TranslateTextEx boo1167208. - CVE-2020-10938: Fixed an integer overflow and resultant heap-based buffer overflow...

[SECURITY] [DLA 2152-1] graphicsmagick security update

Package : graphicsmagick Version : 1.3.20-3+deb8u9 CVE ID : CVE-2019-12921 A vulnerability was discovered in graphicsmagick, a collection of image processing tools, that allows allows an attacker to read arbitrary files via a crafted image because of TranslateTextEx for SVG. For Debian 8 "Jessie"...

WordPress WP Database Backup File Read Vulnerability

WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WP Database Backup is a data backup plugin used in it. A security vulnerability exists in WordPress WP Database Backup 5.5 and earlier...

PT-2020-07: Arbitrary file reading in Oracle WebLogic Server

A vulnerability in Oracle WebLogic Server allows remote attackers to read local files in the context of the web server using a service URL and a specially crafted request. To exploit the vulnerability an adversary should have an administrative account. Access to the administrative panel is not...

Authorization

All versions up to V4.01.01.02 of ZTE ZXCLOUD GoldenData VAP product have a file reading vulnerability. Attackers could obtain log file information without authorization, causing the disclosure of sensitive information...

CVE-2019-3429

CVE-2019-3429 affects ZTE ZXCLOUD GoldenData VAP, with all versions prior to 4.01.01.02 vulnerable to a file-read vulnerability that allows an attacker to obtain log file information and disclose sensitive data. The linked sources consistently identify the affected product and version boundary (p...

The vulnerability of the VideoLAN VLC media player, which arises from reading data beyond the buffer in memory, allows a hacker to cause a system failure.

The vulnerability of the VideoLAN VLC media player arises from reading data beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to cause the code to fail by using a specially created .wmv file...

KLA11566 RCE vulnerability in Foxit Reader

Out-of-bounds reading vulnerabilities was found in Foxit Reader. Malicious users can exploit this vulnerability via specially designed document to execute arbitrary code or cause denial of service. Technical details Potentially vulnerable components are AcroForm, TIF File ConvertToPDF, JPG File...

CVE-2018-14865

The CVE-2018-14865 case concerns Odoo, specifically the Report engine in Odoo Community versions 9.0–11.0 and earlier and Odoo Enterprise versions 9.0–11.0 and earlier. The vulnerability stems from the Report engine not using secure options when passing documents to wkhtmltopdf, which can allow a...

[SECURITY] [DLA 1798-1] jackson-databind security update

Package : jackson-databind Version : 2.4.2-2+deb8u6 CVE ID : CVE-2019-12086 Debian Bug : 929177 A Polymorphic Typing issue was discovered in jackson-databind, a JSON library for Java. When Default Typing is enabled either globally or for a specific property for an externally exposed JSON endpoint...

CVE-2019-11510

In Pulse Secure Pulse Connect Secure PCS 8.2 before 8.2R12.1, 8.3 before 8.3R7.1, and 9.0 before 9.0R3.4, an unauthenticated remote attacker can send a specially crafted URI to perform an arbitrary file reading vulnerability . Recent assessments: dmelcher5151 at April 15, 2020 4:11pm UTC reported...