CVE-2021-26919

Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker...

Nanchang Yunduan Network Technology Co., Ltd. website building system has arbitrary file reading vulnerability

Nanchang Cloud Network Technology Co., Ltd. is a dual-soft enterprise and high-tech enterprise focusing on the field of online education. The Nanchang Yunduan Network Technology Co., Ltd. website building system has an arbitrary file reading vulnerability, which can be exploited by an attacker to...

Ningbo Yinzhou Tianyi Science and Technology Co.

Ningbo Yinzhou Tianyi Technology Co., Ltd. is a high-tech enterprise. Ningbo Yinzhou Tianyi Science and Technology Co., Ltd. station building system there are arbitrary file reading vulnerability, attackers can use the vulnerability to obtain sensitive information...

The vulnerability of the “Commons Compress” compression tool’s reading method, related to the infinite loop that allows a hacker to cause a service failure.

The vulnerability of the “toolset for compressing Commons” reading method is related to an error during the return of the EOF indicator. Exploiting this vulnerability could allow an attacker to cause a service failure...

SQL Injection Vulnerability in Paid Reading System of Zibo Shining Network Technology Co.

Paid Reading System is a website template for a paid knowledge system developed with fahuo100 in mind. Zibo Shining Network Technology Co., Ltd paid reading system SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information in the database...

XSS Vulnerability in Paid Reading System of Zibo Shining Network Technology Co.

Paid Reading System is a website template for a paid knowledge system developed with fahuo100 in mind. Zibo Shining Network Technology Co., Ltd Paid Reading System has an XSS vulnerability that can be exploited by an attacker to obtain an administrator cookie...

OurPHP backend has an arbitrary file read vulnerability

OurPHP is an enterprise e-commerce marketing website building system. OurPHP backend has an arbitrary file reading vulnerability, which can be exploited by an attacker to read any system file...

The vulnerability of the Google Chrome browser’s reading mode, related to insufficient validation of input data, allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of the Google Chrome browser’s reading mode is related to insufficient validation of entered data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

RHEL 7 / 8 : OpenShift Container Platform 4.5.34 (RHSA-2021:0713)

The remote Redhat Enterprise Linux 7 / 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:0713 advisory. Red Hat OpenShift Container Platform is Red Hat's cloud computing Kubernetes application platform solution designed for on-premise or...

CVE-2020-1918

In-memory file operations ie: using fopen on a data URI did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, a...

CVE-2020-1918

In-memory file operations ie: using fopen on a data URI did not properly restrict negative seeking, allowing for the reading of memory prior to the in-memory buffer. This issue affects HHVM versions prior to 4.56.3, all versions between 4.57.0 and 4.80.1, all versions between 4.81.0 and 4.93.1, a...

CVE-2021-3310

Western Digital My Cloud OS 5 devices before 5.10.122 mishandle Symbolic Link Following on SMB and AFP shares. This can lead to code execution and information disclosure by reading local files...

Exploit for Server-Side Request Forgery in Microsoft

CVE-2021-26855-PoC PoC exploit code for CVE-2021-26855. Orig...

Webware Webdesktop Code Issue Vulnerability

Webware Webdesktop is an application software from the company Webware in the Republic of Estonia. A document management software. A code issue vulnerability exists in Webware Webdesktop version 5.1.15. The vulnerability stems from the system allowing an attacker to read all files on the server. ...

Extreme PDF Editor has an out-of-bounds reading vulnerability

Extreme PDF Editor is a simple and good PDF editor. Extreme PDF Editor has an out-of-bounds read vulnerability that can be exploited by attackers to cause a denial of service...

Aurora 路径遍历漏洞

Afterlogic Aurora is a set of U.S. Afterlogic Inc. using PHP language written in the enterprise mail server platform. The platform includes features such as e-mail, file storage and address book management. A path traversal vulnerability exists in AfterLogic Aurora through 7.7.9 and WebMail Pro...

CVE-2021-28030

An issue was discovered in the truetype crate before 0.30.1 for Rust. Attackers can read the contents of uninitialized memory locations via a user-provided Read operation within Tape::takebytes...

Design/Logic Flaw

LumisXP aka Lumis Experience Platform before 10.0.0 allows unauthenticated blind XXE via an API request to PageControllerXml.jsp. One can send a request crafted with an XXE payload and achieve outcomes such as reading local server files or denial of service...

Harbin Weicheng Technology Co., Ltd. ourphp exists arbitrary file reading vulnerability

OURPHP is a brand, a PHP + MySQL development based on W3C standard building system. Harbin Weicheng Technology Co. ourphp there are arbitrary file reading vulnerability , attackers can use the vulnerability to obtain sensitive information...

Omni-channel customer service system of Foshan Beame Information Technology Co., Ltd. suffers from arbitrary file reading vulnerability

Foshan Beamy Information Technology Co., Ltd. is an Internet software company. There is an arbitrary file reading vulnerability in the omni-channel customer service system of Foshan Bemis Information Technology Co. Ltd, which can be exploited by attackers to obtain sensitive information...