Lucene search
K

6 matches found

CNNVD
CNNVD
added 2024/12/09 12:0 a.m.2 views

RAGFlow 安全漏洞

RAGFlow is an open source RAG engine based on deep document understanding from InfiniFlow Open Source. A security vulnerability exists in RAGFlow version 0.13.0, which stems from improper access control of document-hooks.ts and allows unauthorized access to user documents...

7.5CVSS6.6AI score0.00358EPSS
Exploits1References2
CNVD
CNVD
added 2021/12/16 12:0 a.m.18 views

JT2Go and Teamcenter Visualization File Parsing Vulnerability (CNVD-2021-100357)

JT2Go, a 3D JT viewing tool, and Teamcenter Visualization software enable companies to enhance their Product Lifecycle Management PLM environments with a comprehensive family of visualization solutions. The software allows business users to access documents, 2D drawings and 3D models in a single...

5.5CVSS3.4AI score0.00197EPSS
Exploits0References1
CNVD
CNVD
added 2021/12/16 12:0 a.m.14 views

JT2Go and Teamcenter Visualization File Parsing Vulnerability (CNVD-2021-100358)

JT2Go, a 3D JT viewing tool, and Teamcenter Visualization software enable companies to enhance their Product Lifecycle Management PLM environments with a comprehensive family of visualization solutions. The software allows business users to access documents, 2D drawings and 3D models in a single...

5.5CVSS3.4AI score0.00226EPSS
Exploits0References1
OSV
OSV
added 2018/05/22 1:29 p.m.1 views

CVE-2018-1583

IBM StoredIQ 7.6 could allow an authenticated attacker to bypass certain security restrictions. By sending a specially-crafted request, an authenticated attacker could exploit this vulnerability to access and manipulate documents on StoredIQ managed data sources. IBM X-Force ID: 143331...

5.4CVSS5.8AI score
Exploits0References2
CVE
CVE
added 2007/09/14 12:0 a.m.52 views

CVE-2007-4888

The CVE-2007-4888 entry concerns XWiki 1.0 B1 and 1.0 B2. The issue is an error handler flaw where the doc variable is associated with the entire document content and metadata regardless of a user’s view rights. This allows remote authenticated users to read arbitrary documents by using a custom ...

3.5CVSS6.2AI score0.00062EPSS
Exploits0References2Affected Software1
securityvulns
securityvulns
added 2002/05/06 12:0 a.m.31 views

dH team & SECURITY.NNOV: A variant of "Word Mail Merge" vulnerability

Русская версия этой advisory приведена ниже. Original version of this advisory: http://www.security.nnov.ru/advisories/mailmerge.asp Title: A variant of "Word Mail Merge" vulnerability Authors: ERRor, 3APA3A Date: May, 03 2002 Affected: Office 97, 2000, XP Vendor: Microsoft Risk: Average to high...

7AI score
Exploits0
Rows per page
Query Builder