6550 matches found
CVE-2024-8602
When the XML is read from the codes in the PDF and parsed using a DocumentBuilder, the default settings of the DocumentBuilder allow for an XXE XML External Entity attack. Further information on this can be found on the website of the Open Worldwide Application Security Project OWASP. An attacker...
OSV-2024-1220 UNKNOWN READ in Assimp::NDOImporter::InternReadFile
OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=372765427 Crash type: UNKNOWN READ Crash state: Assimp::NDOImporter::InternReadFile Assimp::BaseImporter::ReadFile Assimp::Importer::ReadFile...
TEAMPLUS Team+ security vulnerabilities
TEAMPLUS Team+ is an enterprise private cloud communication and collaboration platform from China Interactive Ares TEAMPLUS. A security vulnerability exists in TEAMPLUS Team+ that originates from incorrectly validating specific page parameters, which allows an unauthenticated, remote attacker to...
Adobe Commerce Improper Input Validation Vulnerability (CNVD-2024-41454)
Adobe Commerce is the United States of America Odobie Adobe company's a business and brand-oriented global leader in digital commerce solutions. An improper input validation vulnerability exists in Adobe Commerce, which can be exploited by an attacker to read files from the system outside of the...
LoLLMs security vulnerabilities
LoLLMs is a Web UI for a large language multimodal system by the individual developer Saifeddine ALOUI. A security vulnerability exists in LoLLMs that stems from improper parameter cleanup, resulting in a path traversal vulnerability that allows an attacker to read any file on the victim's comput...
WireGuard Swap Endian DoS
The vulnerability of the swapendian function in the drivers/net/wireguard/allowedips.c sub-module of the WireGuard subsystem in the Linux operating system is related to incorrect data reading. Exploiting this vulnerability could allow a attacker to cause a service failure...
CentOS 7 : firefox (RHSA-2022:9072)
The remote CentOS Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:9072 advisory. - An attacker who compromised a content process could have partially escaped the sandbox to read arbitrary files via clipboard-related IPC messages.Thi...
Dell AppSync Server code-related vulnerabilities
Dell AppSync Server is a copy data management software from Dell USA. An XML external entity injection vulnerability exists in Dell AppSync Server versions 4.3 through 4.6, which arises from a networked system or product that does not have the correct filters in place to allow references to...
CVE-2024-45290 Path traversal and Server-Side Request Forgery when opening XLSX files in PHPSpreadsheet
PHPSpreadsheet is a pure PHP library for reading and writing spreadsheet files. It's possible for an attacker to construct an XLSX file which links media from external URLs. When opening the XLSX file, PhpSpreadsheet retrieves the image size and type by reading the file contents, if the provided...
CVE-2024-44097
According to the researcher: "The TLS connections are encrypted against tampering or eavesdropping. However, the application does not validate the server certificate properly while initializing the TLS connection. This allows for a network attacker to intercept the connection and read the data. T...
PT-2024-8624 · Cisco · Cisco Nexus Dashboard Fabric Controller
Name of the Vulnerable Software and Affected Versions: Cisco Nexus Dashboard Fabric Controller NDFC versions affected versions not specified Description: The issue is related to a lack of authorization in the implementation of the Cisco NDFC platform's application programming interface. This coul...
CVE-2024-9224
The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...
CVE-2024-9224
The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...
CVE-2024-9224 Hello World <= 2.1.1 - Authenticated (Subscriber+) Arbitrary File Read
The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...
CVE-2024-9224
CVE-2024-9224 corresponds to the WordPress Hello World plugin (<= v2.1.1) Arbitrary File Read. The vulnerability is triggered via the hello_world_lyric() function, allowing authenticated users with subscriber-level access or higher to read arbitrary server files containing sensitive informatio...
CVE-2024-9224: Improper Limitation of a Pathname to a Restricted Directory
The Hello World plugin for WordPress is vulnerable to Arbitrary File Reading in all versions up to, and including, 2.1.1 via the helloworldlyric function. This makes it possible for authenticated attackers, with subscriber-level access and above, to read the contents of arbitrary files on the...
PT-2024-41092 · Netalertxnetalertx +3 · * +1
Name of the Vulnerable Software and Affected Versions: NetAlertX versions 24.7.18 through 24.10.12 Description: The issue allows unauthenticated file reading due to factors related to strpos and directory traversal, where an HTTP client can ignore a redirect. This is related to components/logs.ph...
Agnai File Disclosure Vulnerability: JSON via Path Traversal
CWE-35: Path Traversal https://cwe.mitre.org/data/definitions/35.html CVSSv3.1 4.3 - Medium CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N Summary A vulnerability has been discovered in Agnai that permits attackers to read arbitrary JS...
hw: cpu: intel: Native Branch History Injection (BHI)
A flaw was found in some Intel CPUs where mitigations for the Spectre V2/BHI vulnerability were incomplete. This issue may allow an attacker to read arbitrary memory, compromising system integrity and exposing sensitive information...
DataEase XML External Entity Injection Vulnerability
DataEase is a lightweight, high-performance self-service data visualization and analysis tool that helps users quickly explore and understand complex data, provides real-time data analysis and report generation capabilities, supports a variety of data sources, and is designed to improve data...