CVE-2022-25197

Jenkins HashiCorp Vault Plugin 336.v182c0fbaaeb7 and earlier implements functionality that allows agent processes to read arbitrary files on the Jenkins controller file system...

CVE-2022-25177

CVE-2022-25177 affects Jenkins Pipeline: Shared Groovy Libraries Plugin (552.vd9cc05b8a2e1 and earlier). Root cause: the libraryResource path reading follows symbolic links outside the expected Pipeline library, enabling reading arbitrary files on the Jenkins controller filesystem. Impact: via cr...

CVE-2022-25179

CVE-2022-25179 affects Jenkins Pipeline: Multibranch Plugin (706.vd43c65dec013 and earlier). The issue: the readTrusted step can follow symbolic links outside the configured SCM checkout, allowing attackers with Pipeline Configure permission to read arbitrary files on the Jenkins controller files...

[SECURITY] Fedora 34 Update: libdxfrw-1.0.1-3.fc34

libdxfrw is a free C++ library to read and write DXF files in both formats, ASCII and binary form...

Weak password vulnerability in Xintiandi wireless GPRS meter reading and monitoring management system

The wireless GPRS meter reading and monitoring management system is a system designed mainly for metering, management, monitoring and analysis of urban water supply network. There is a weak password vulnerability in Xintiandi wireless GPRS meter reading and monitoring management system, which can...

Siemens Teamcenter Visualization and Solid Edge Out-of-Bounds Reading Vulnerability

Siemens Teamcenter Visualization is a software that provides team collaboration capabilities for designing 2D and 3D scenes. Siemens Solid Edge is a 3D CAD software from Siemens, a German company. Solid Edge has an out-of-bounds read vulnerability that can be exploited by attackers to execute cod...

PT-2022-9521 · WordPress · Wordpress Rsvp Plugin

Name of the Vulnerable Software and Affected Versions: RVM WordPress plugin versions prior to 6.4.2 Description: The issue concerns a lack of proper authorization, CSRF checks, and validation of the rvm upload regions file path parameter in the rvm import regions AJAX action. This allows any...

in luigirizzo/netmap

Description In the Netmap source code, calls to DbgPrint; can be found to contain a formatting argument %p to be specific yet no argument, this would in most cases lead to nearby data being printed to the debug stream. Impact This vulnerability is capable of allowing an attacker to read data from...

Palo Alto Networks Cortex XDR Information Disclosure Vulnerability

Palo Alto Networks Cortex XDR is a security operations platform for remote endpoint-based detection from Palo Alto Networks Malaysia. A security vulnerability exists in the Palo Alto Networks Cortex XDR agent that can be exploited by an attacker to read the contents of any file on the system with...

The vulnerability of the ImageIO component in iOS, iPadOS, tvOS, watchOS, and macOS allows attackers to gain access to confidential information.

The vulnerability of the ImageIO component in iOS, iPadOS, tvOS, watchOS, and macOS relates to the ability to read data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to access confidential information...

The vulnerability of the DirectComposition implementation in the Win32k component (Win32k.sys) of Windows operating systems allows a malicious actor to gain unauthorized access to protected information.

The vulnerability of the DirectComposition implementation in the Win32k component Win32k.sys of Windows operating systems relates to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

ROS-20220128-02

A vulnerability in the Python Pillow image library is related to buffer re-reading during the ImagePath.Path initialization in the pathgetbbox function in path.c. Exploitation of the vulnerability could allow an attacker acting remotely to pass a specially crafted file to a vulnerable library and...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory, allowing attackers to exploit their privileges and gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information...

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory, allowing attackers to exploit their privileges and gain unauthorized access to protected information.

The vulnerability of Adobe Dimension’s 3D design software relates to reading data beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information...

The vulnerability of Adobe After Effects’ video and dynamic image editing software lies in its ability to read data beyond the buffer in memory. This allows attackers to exploit their privileges and gain unauthorized access to protected information.

The vulnerability of Adobe After Effects video and dynamic image editing software relates to reading beyond the buffer in memory. Exploiting this vulnerability can allow a malicious actor to enhance their privileges and gain unauthorized access to protected information...

Mageia: Security Advisory (MGASA-2014-0286)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Design/Logic Flaw

A maliciously crafted JT file in Autodesk Inventor 2022, 2021, 2020, 2019 and AutoCAD 2022 may be forced to read beyond allocated boundaries when parsing the JT file. This vulnerability in conjunction with other vulnerabilities could lead to code execution in the context of the current process...

Rapid7 Insight Agent Arbitrary File Reading Vulnerability

Rapid7 Insight Agent is a lightweight software from Rapid7, Inc. that collects data from IT assets. The software is capable of collecting data from IT assets.An arbitrary file reading vulnerability exists in Rapid7 Insight Agent versions prior to 3.1.3, which stems from the software's lack of...

Adobe Acrobat Reader Dc Resource Management Error Vulnerability (CNVD-2022-11154)

Adobe Acrobat Reader Dc is a Pdf reading tool from the American company Adobe. It is used to reliably view, print and annotate Pdf documents. Adobe Acrobat Reader Dc suffers from a resource management error vulnerability, which stems from a post-release usage error when processing PDF files. A...

Adobe Acrobat Reader Dc code issue vulnerability (CNVD-2022-11150)

Adobe Acrobat Reader Dc is a Pdf reading tool from Adobe USA. Used to reliably view, print and annotate Pdf documents. Adobe Acrobat Reader Dc has a code issue vulnerability that stems from a NULL pointer dereference error. A remote attacker could use the vulnerability to trick victims into openi...