4332 matches found
PT-2025-47167
Name of the Vulnerable Software and Affected Versions PDFPatcher versions through 1.1.3.4663 Description The software does not properly restrict XML external entity XXE references in its XML bookmark import functionality. The application utilizes .NET’s XmlDocument class without disabling externa...
The vulnerability of the usdGltf plugin in Adobe Format Plugins allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of the usdGltf plugin relates to the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information through a specially created file...
CVE-2022-4982
DBLTek GoIP-1 firmware versions up to and including GHSFVT-1.1-67-5 contain a local file inclusion vulnerability. The device's web server exposes handlers frame.html and frame.A100.html that accept a path parameter content or sidebar which is not properly validated or canonicalized. An attacker c...
EUVD-2025-136453
Malicious code in savihotn-reads npm...
UBUNTU-CVE-2025-40130
In the Linux kernel, the following vulnerability has been resolved: scsi: ufs: core: Fix data race in CPU latency PM QoS request handling The cpulatencyqosadd/remove/updaterequest interfaces lack internal synchronization by design, requiring the caller to ensure thread safety. The current...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-990827)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990827 advisory. In the Linux kernel, the following vulnerability has been resolved: media: cx24116: prevent overflows on SNR calculus as reported by Coverity, if reading SNR registe...
Unity Linux 20.1060e / 20.1070e Security Update: kernel (UTSA-2025-990780)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-990780 advisory. In the Linux kernel, the following vulnerability has been resolved: Input: iforce - invert valid length check when fetching device IDs syzbot is reporting...
OpenPrinting libcupsfilters 缓冲区错误漏洞
OpenPrinting libcupsfilters is an OpenPrinting open source printing system filter. A buffer error vulnerability exists in OpenPrinting libcupsfilters that stems from out-of-bounds reads and writes when processing TIFF images in imagetoraster filters, which can lead to memory corruption...
CVE-2025-11451
The Auto Amazon Links – Amazon Associates Affiliate Plugin plugin for WordPress is vulnerable to arbitrary files reads in all versions up to, and including, 5.4.3 via the '/wp-json/wp/v2/aalajaxunitloading' RST API endpoint. This makes it possible for unauthenticated attackers to read the content...
CVE-2018-25124 PacsOne Server 6.6.2 DICOM Web Viewer Directory Traversal LFI
PacsOne Server version 6.6.2 prior versions are likely affected contains a directory traversal vulnerability within the web-based DICOM viewer component. Successful exploitation allows a remote unauthenticated attacker to read arbitrary files via the 'nocache.php' endpoint with a crafted 'path'...
CVE-2025-34238
Advantech WebAccess/VPN versions prior to 1.1.5 contain an absolute path traversal via AjaxStandaloneVpnClientsController.ajaxDownloadRoadWarriorConfigFileAction that allows an authenticated network administrator to cause the application to read and return the contents of arbitrary files the web...
Advantech DeviceOn/iEdge
RISK EVALUATION Successful exploitation of these vulnerabilities could result in a denial-of-service condition, remote code execution, or an attacker reading arbitrary files. 2. RECOMMENDED PRACTICES CISA recommends users take defensive measures to minimize the risk of exploitation of these...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-989448)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989448 advisory. In the Linux kernel, the following vulnerability has been resolved: eeprom: ee1004: limit i2c reads to I2CSMBUSBLOCKMAX Commit effa453168a7 i2c: i801: Don't silently...
BMC Control-M/Agent 安全漏洞
BMC Control-M/Agent is a workload automation system from BMC USA. A security vulnerability exists in BMC Control-M/Agent that stems from not enabling mutual SSL/TLS authentication, which could lead to unauthenticated remote code execution, arbitrary file reads and writes, and similar unauthorized...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989635)
"The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989635 advisory. In the Linux kernel, the following vulnerability has been resolved: igc: Reinstate IGCREMOVED logic and implement it properly The initially merged version of the ig...
Unity Linux 20.1070e Security Update: kernel (UTSA-2025-989841)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-989841 advisory. In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-audio: Fix out of bounds reads when finding clock sources The current USB-audio driver...
Unity Linux 20.1070a Security Update: kernel (UTSA-2025-988864)
The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-988864 advisory. In the Linux kernel, the following vulnerability has been resolved: kvm: LAPIC: Restore guard to prevent illegal APIC register access Per the SDM, any access that...
GHSA-VVW2-H478-XWR3 DSPy does not properly restrict file reads
The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class...
DSPy does not properly restrict file reads
The overly permissive sandbox configuration in DSPy allows attackers to steal sensitive files in cases when users build an AI agent which consumes user input and uses the “PythonInterpreter” class...
