CVE-2021-32572

Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as demonstrated by reading the /etc/passwd file...

CVE-2021-32572

Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as demonstrated by reading the /etc/passwd file...

CVE-2021-32572

Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as demonstrated by reading the /etc/passwd file...

Directory traversal

Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as demonstrated by reading the /etc/passwd file...

CVE-2021-32572

Speco Web Viewer through 2021-05-12 allows Directory Traversal via GET request for a URI with /.. at the beginning, as demonstrated by reading the /etc/passwd file...

CVE-2021-32572

CVE-2021-32572 concerns Speco Web Viewer (Speco Technologies). The issue is a directory traversal vulnerability exploitable via a GET request where the URI begins with /.., demonstrated by reading /etc/passwd. Affected version window is up to 2021-05-12. The provided documents do not specify a ve...

[SECURITY] Fedora 32 Update: djvulibre-3.5.27-25.fc32

DjVu is a web-centric format and software platform for distributing documen ts and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictu res. DjVu content downloads faster, displays and renders faster,...

(0Day) Siemens Solid Edge Viewer 3DXML File Parsing XML External Entity Processing Information Disclosure Vulnerability

This vulnerability allows remote attackers to disclose sensitive information on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within...

(0Day) Siemens Solid Edge Viewer STP File Parsing Stack-based Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(0Day) Siemens Solid Edge Viewer CATPart File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

(0Day) Siemens Solid Edge Viewer JT File Parsing Out-Of-Bounds Read Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Siemens Solid Edge 缓冲区错误漏洞

Siemens Solid Edge is a 3D CAD software from Siemens, Germany. An out-of-bounds write vulnerability exists in Siemens Solid Edge Viewer CATPart parsing, which allows remote attackers to exploit the vulnerability by submitting a special file request, tricking the user into parsing it, and either...

Speco Technologies Speco Web Viewer 路径遍历漏洞

Speco Technologies Speco Web Viewer is a web appliance from Speco Technologies, USA. A channel web server. A security vulnerability exists in Speco Web Viewer 2021-05-12. The vulnerability allows an attacker to perform directory traversal via a GET request starting with a URI...

(0Day) Siemens Solid Edge Viewer PRT File Parsing Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Siemens Solid Edge Viewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Foxit Reader < 10.1.4 Multiple Vulnerabilities

According to its version, the Foxit Reader application installed on the remote Windows host is prior to 10.1.4. It is, therefore affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number...

[SECURITY] Fedora 34 Update: djvulibre-3.5.27-28.fc34

DjVu is a web-centric format and software platform for distributing documen ts and images. DjVu can advantageously replace PDF, PS, TIFF, JPEG, and GIF for distributing scanned documents, digital documents, or high-resolution pictu res. DjVu content downloads faster, displays and renders faster,...

Adobe Acrobat Reader DC out-of-bounds write vulnerability

Adobe Acrobat Reader is a PDF viewer. The software is used to print, sign and annotate PDFs. Adobe Acrobat Reader DC is vulnerable to an out-of-bounds write vulnerability that could be exploited by an attacker to execute arbitrary code in the context of the current user...

The vulnerability in the implementation of the read_header() function of the GNU Tar archive utility allows a hacker to trigger a service failure.

The vulnerability of the readheader function implementation in the GNU Tar archive viewer is related to the output of the operation beyond the buffer boundaries in memory. Exploiting this vulnerability could allow a malicious actor to cause service failure by using a specially created input file...

The vulnerability relates to the implementation of syntactic analysis for CR3-files in the plugin for viewing RAW images. This allows an attacker to execute arbitrary code.

The vulnerability of the CR3-file syntax analysis implementation for viewing RAW images is related to errors in data type conversion. Exploiting this vulnerability could allow an attacker to execute arbitrary code using a specially created malicious web page or a specially created malicious file...

The vulnerability of the plugin for viewing RAW images, related to improper handling of code generation, allows a hacker to execute arbitrary code.

The vulnerability of the plugin for viewing RAW images is related to improper handling of code generation. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created malicious web page or a specially created malicious file...