6331 matches found
CVE-2024-48914
Summary (CVE-2024-48914): Vendure’s asset server plugin allows an attacker to traverse the server filesystem and read arbitrary files, including configs and environment data, due to using the decoded request path directly in path.join (no normalization). A second vector in the same code path can ...
CVE-2024-46898
SHIRASAGI prior to v1.19.1 processes URLs in HTTP requests improperly, resulting in a path traversal vulnerability. If this vulnerability is exploited, arbitrary files on the server may be retrieved when processing crafted HTTP requests...
CVE-2024-42640
The angular-base64-upload library (versions prior to v0.1.21 ) is vulnerable to unauthenticated remote code execution (RCE) . The root cause is an incorrect restriction on the path name of the restricted directory during the conversion of files to base64 format. An attacker can exploit the demo/s...
The vulnerability of the Remote Desktop Protocol Server, which handles remote desktop connections for Windows operating systems, allows a hacker to execute arbitrary code.
The vulnerability of the Remote Desktop Protocol Server for Windows operating systems relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...
CVE-2024-43582
Remote Desktop Protocol Server Remote Code Execution Vulnerability...
Exposure Of Information Through Directory Listing
@saltcorn/server is vulnerable to Exposure of Information Through Directory Listing. The vulnerability is due to missing validations of the builddirname parameter. This allows an attacker with admin permission to view files and directories on the filesystem...
CVE-2024-46887
The web server of affected devices do not properly authenticate user request to the '/ClientArea/RuntimeInfoData.mwsl' endpoint. This could allow an unauthenticated remote attacker to gain knowledge about current actual and configured maximum cycle times as well as about configured maximum...
Security Bulletin: Multiple vulnerabilities in microsoft.netcore.app affect IBM Robotic Process Automation.
Summary Multiple vulnerabilities in IBM microsoft.netcore.app affect IBM Robotic Process Automation. The vulnerabilities exist in BrotliSharpLib which was determined to not be required by IBM Robotic Process Automation. The offending module was removed from the product. Vulnerability Details...
The vulnerability of the cfGetPrinterAttributes5 function in the libcupsfilters library of the CUPS printing server allows a attacker to disclose protected information.
The vulnerability of the cfGetPrinterAttributes5 function in the libcupsfilters library of the CUPS printing server is related to the lack of measures taken to neutralize special elements used in OS commands. Exploiting this vulnerability may allow a malicious actor to disclose protected...
CVE-2024-6394
CVE-2024-6394 is a Local File Inclusion vulnerability affecting parisneo/lollms-webui versions below 9.8, caused by unverified path concatenation in the serve_js function of app.py. This flaw enables path traversal to access arbitrary server files, potentially exposing sensitive data such as priv...
Unauthorized File Access
Mesop is vulnerable to insufficient input validation. The vulnerability is due to lack of proper input validation mechanisms in the specific endpoint of the Mesop application, which allows an attacker to access files on the server that are not intended to be served...
MacTaggart Scott: Overwrite any file of the web server
The web server was vulnerable to file overwrite due to a vulnerable module used to generate files. An attacker could have overwritten any file on the web server, including critical system files, by sending a specially crafted request...
The vulnerability of the web servers of the microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP allows a perpetrator to cause service interruptions.
The vulnerability of the web servers of microprogramming software for communication modules of SIMATIC CP, SIPLUS ET, and SIPLUS NET CP is related to the use of memory after it is freed. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...
GHSA-WCJW-3V6P-4V3R MindsDB Eval Injection vulnerability
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine,...
PYSEC-2024-77
An arbitrary code execution vulnerability exists in versions 23.10.3.0 up to 24.7.4.1 of the MindsDB platform, when the Weaviate integration is installed on the server. If a specially crafted ‘SELECT WHERE’ clause containing Python code is run against a database created with the Weaviate engine,...
PYSEC-2024-81
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list item creation. If such a...
CVE-2024-45854
CVE-2024-45854 concerns MindsDB platform 23.10.3.0 and later, with a deserialization of untrusted data flaw that can let a maliciously uploaded ‘inhouse’ model execute arbitrary code on the server when a describe query is run. The connected documents confirm the affected product/version and the u...
CVE-2024-45852
The CVE-2024-45852 entry concerns MindsDB Platform (versions 23.3.2.0 and newer) and is caused by Deserialization of untrusted data. This vulnerability can allow a maliciously uploaded model to execute arbitrary code on the server when interacted with. Impact is high (CVE metrics show high confid...
CVE-2024-45851
An arbitrary code execution vulnerability exists in versions 23.10.5.0 up to 24.7.4.1 of the MindsDB platform, when the Microsoft SharePoint integration is installed on the server. For databases created with the SharePoint engine, an ‘INSERT’ query can be used for list item creation. If such a...
MindsDB 安全漏洞
MindsDB is an emerging low-code machine learning platform from MindsDB, Inc. A security vulnerability exists in MindsDB versions 23.11.4.2 through 24.7.4.1, which stems from the presence of an arbitrary code execution vulnerability that is passed to the eval function and executed on the server if...