Heap overflow

A heap-based buffer overflow exists in the DXF file reading procedure in Open Design Alliance Drawings SDK before 2023.6. The specific flaw exists within the parsing of DXF files. The issue results from the lack of proper validation of the length of user-supplied XRecord data prior to copying it ...

CVE-2022-47501

Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07...

CVE-2022-47501

Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07...

Design/Logic Flaw

Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07...

CVE-2022-47501 Apache OFBiz: Arbitrary file reading vulnerability

Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07...

CVE-2022-47501 Apache OFBiz: Arbitrary file reading vulnerability

Arbitrary file reading vulnerability in Apache Software Foundation Apache OFBiz when using the Solr plugin. This is a pre-authentication attack. This issue affects Apache OFBiz: before 18.12.07...

TigerGraph 安全漏洞

TigerGraph is one of the world's fastest and most scalable graph analytics platforms from the TigerGraph community. Enabling real-time big data graph applications. A security vulnerability exists in TigerGraph Enterprise Free Edition version 3.x that stems from the ability to read authentication...

http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

A flaw was found in http-cache-semantics. When the server reads the cache policy from the request using this library, a Regular Expression Denial of Service occurs, caused by malicious request header values sent to the server...

The vulnerability of the DOMBindings component in the Google Chrome browser allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.

The vulnerability of the DOMBindings component in the Google Chrome browser is related to out-of-memory reading. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of protected information through a specially created web page...

http-cache-semantics: Regular Expression Denial of Service (ReDoS) vulnerability

A flaw was found in http-cache-semantics. When the server reads the cache policy from the request using this library, a Regular Expression Denial of Service occurs, caused by malicious request header values sent to the server...

CVE-2022-47188

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

Default credentials

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

CVE-2022-47188

Generex UPS CS141, affected in versions prior to 2.06, contains an arbitrary local file read vulnerability. An attacker using default credentials can upload a backup file containing a symlink to /etc/shadow, enabling content access to that path. The issue is documented in CVE-2022-47188 and corro...

CVE-2022-47188 Improper Input Validation in Generex CS141

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

CVE-2022-47188 Improper Input Validation in Generex CS141

There is an arbitrary file reading vulnerability in Generex UPS CS141 below 2.06 version. An attacker, making use of the default credentials, could upload a backup file containing a symlink to /etc/shadow, allowing him to obtain the content of this path...

CVE-2023-21808

A vulnerability exists in how dotnet reads debugging symbols. Reading a malicious symbols file may result in remote code execution...

CVE-2022-36982

This vulnerability allows remote attackers to read arbitrary files on affected installations of Ivanti Avalanche 6.3.3.101. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the AgentTaskHandle...

The vulnerability of the RPM package manager’s reading function allows a perpetrator to compromise data integrity.

The vulnerability of the RPM package manager’s reading function is related to improper verification of the cryptographic signature of data. Exploiting this vulnerability allows a remote attacker to compromise the integrity of the data...

The vulnerability of the Exiv2 metadata management library, related to reading beyond the allowed buffer data limits, allows a hacker to cause a service failure.

The vulnerability of the Exiv2 metadata management library relates to reading data beyond the acceptable buffer limit. Exploiting this vulnerability could allow a malicious actor to cause service interruptions through the use of a specially created image file...

The vulnerability of the Pillow library for working with raster graphics lies in the reading of data beyond the allowed buffer limit. This allows attackers to compromise the integrity of the data and cause service failures.

The vulnerability of the Pillow library for working with raster graphics is related to improper handling of gaps in path names. Exploiting this vulnerability can allow a remote attacker to compromise data integrity and cause service failures...