CVE-2024-4359 Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read

The Element Pack Elementor Addons Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows plugin for WordPress is vulnerable to arbitrary file reads in all versions up to, and including, 5.7.2 via the SVG widget and a lack of sufficient file validation in the rendersvg function...

WordPress Element Pack Elementor Addons plugin <= 5.7.2 - Authenticated (Contributor+) Arbitrary File Read vulnerability

Authenticated Contributor+ Arbitrary File Read vulnerability discovered by Webbernaut in WordPress Plugin Element Pack Elementor Addons versions = 5.7.2...

GLSA-202408-14 : Librsvg: Arbitrary File Read

The remote host is affected by the vulnerability described in GLSA-202408-14 Librsvg: Arbitrary File Read A directory traversal problem in the URL decoder of librsvg could be used by local or remote attackers to disclose files on the local filesystem outside of the expected area, as demonstrated ...

PT-2024-30602 · WordPress · Element Pack Elementor Addons

Name of the Vulnerable Software and Affected Versions: The Element Pack Elementor Addons plugin for WordPress versions up to, and including, 5.7.2 Description: The issue allows authenticated attackers with contributor-level access and above to read the contents of arbitrary files on the server,...

Arbitrary File Read

org.jenkins-ci.main, jenkins-core and org.jenkins-ci.main, remoting are vulnerable to Arbitrary File Read. The vulnerability is caused due to a missing validation on the file paths that are invoked on the controller by the agent while retrieving files using API ClassLoaderProxyfetchJar. This allo...

FreeBSD : jenkins -- multiple vulnerabilities (db8fa362-0ccb-4aa8-9220-72b7763e9a4a)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by multiple vulnerabilities as referenced in the db8fa362-0ccb-4aa8-9220-72b7763e9a4a advisory. Jenkins Security Advisory: Arbitrary file read vulnerability through agent connections can lea...

GHSA-H856-FFVV-XVR4 Jenkins Remoting library arbitrary file read vulnerability

Jenkins uses the Remoting library typically agent.jar or remoting.jar for the communication between controller and agents. This library allows agents to load classes and classloader resources from the controller, so that Java objects sent from the controller build steps, etc. can be executed on...

SUSE CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

jenkins -- multiple vulnerabilities

Jenkins Security Advisory: Description Critical SECURITY-3430 / CVE-2024-43044 Arbitrary file read vulnerability through agent connections can lead to RCE Description Medium SECURITY-3349 / CVE-2024-43045 Missing permission check allows accessing other users' "My Views"...

DEBIAN-CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

UBUNTU-CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

CVE-2024-6781

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

CVE-2024-6781 Calibre Arbitrary File Read

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

CVE-2024-6781 Calibre Arbitrary File Read

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

CVE-2024-6781 Calibre Arbitrary File Read

Path traversal in Calibre = 7.14.0 allow unauthenticated attackers to achieve arbitrary file read...

Calibre 安全漏洞

Calibre is an open source and free all-in-one eBook reading management and format conversion tool from the individual developer Kovid Goyal in India. A security vulnerability exists in Calibre version 7.14.0 and prior versions, which stems from a path traversal that allows an unauthenticated...

Flowise Path Injection at /api/v1/openai-assistants-file

Flowise is a drag & drop user interface to build a customized large language model flow. In version 1.4.3 of Flowise, the /api/v1/openai-assistants-file endpoint in index.ts is vulnerable to arbitrary file read due to lack of sanitization of the fileName body parameter. No known patches for this...

GHSA-W7C4-5W4F-JM3G Duplicate Advisory: Reposilite Arbitrary File Read vulnerability

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-82j3-hf72-7x93. This link is maintained to preserve external references. Original description Reposilite is an open source, lightweight and easy-to-use repository manager for Maven based artifacts in JVM...

GHSA-RCVG-RGF7-PPPV Nuxt Devtools has a Path Traversal: '../filedir'

Summary Nuxt Devtools is missing authentication on the getTextAssetContent RPC function which is vulnerable to path traversal. Combined with a lack of Origin checks on the WebSocket handler, an attacker is able to interact with a locally running devtools instance and exfiltrate data abusing this...