CVE-2024-5201

Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request...

CVE-2024-5201 Dimensions RM - Privilege Escalation

Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request...

CVE-2024-5201 Dimensions RM - Privilege Escalation

Privilege Escalation in OpenText Dimensions RM allows an authenticated user to escalate there privilege to the privilege of another user via HTTP Request...

CVE-2024-5201

CVE-2024-5201 describes a privilege escalation in OpenText Dimensions RM where an authenticated user can elevate to another user’s privileges via an HTTP request. The affected product is OpenText Dimensions RM; the underlying root cause and exact exploit path are not detailed in the provided docu...

CVE-2024-5202

OpenText Dimensions RM is affected by CVE-2024-5202, with an Arbitrary File Read vulnerability where authenticated users can read files stored on the server via webservices. The available data identifies the affected product as OpenText Dimensions RM and the vulnerability as an unauthorized read ...

CVE-2024-5202 Dimensions RM - Arbitrary File Read

Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservices...

CVE-2024-5202 Dimensions RM - Arbitrary File Read

Arbitrary File Read in OpenText Dimensions RM allows authenticated users to read files stored on the server via webservices...

OpenText Dimensions RM 安全漏洞

OpenText Dimensions RM is a full-featured requirements management solution from OpenText Canada. A security vulnerability exists in OpenText Dimensions RM that stems from an arbitrary file read issue...

OpenText Dimensions RM 安全漏洞

OpenText Dimensions RM is a full-featured requirements management solution from OpenText Canada. A security vulnerability exists in OpenText Dimensions RM. An authenticated attacker exploiting this vulnerability could escalate their privileges to another user's privileges via an HTTP request...

PT-2024-35094 · Opentext · Opentext Dimensions Rm

Name of the Vulnerable Software and Affected Versions: OpenText Dimensions RM affected versions not specified Description: The issue allows an authenticated user to escalate their privileges to those of another user via an HTTP request. Recommendations: At the moment, there is no information abou...

PT-2024-35096 · Opentext · Opentext Dimensions Rm

Name of the Vulnerable Software and Affected Versions: OpenText Dimensions RM affected versions not specified Description: The issue allows authenticated users to read files stored on the server via webservices, potentially leading to unauthorized access to sensitive information. Recommendations:...

SixLabors.ImageSharp vulnerable to Memory Allocation with Excessive Size Value

Impact A vulnerability discovered in the ImageSharp library, where the processing of specially crafted files can lead to excessive memory usage in image decoders. The vulnerability is triggered when ImageSharp attempts to process image files that are designed to exploit this flaw. This flaw can b...

BIT-PHPBB-2020-8226

A vulnerability exists in phpBB v3.2.10 and v3.3.1 which allowed remote image dimensions check to be used to SSRF...

Cross-site Scripting Vulnerability on Avatar Upload

Introduction This write-up describes a vulnerability found in Label Studio, a popular open source data labeling tool. The vulnerability affects all versions of Label Studio prior to 1.9.2 and was tested on version 1.8.2. Overview Label Studio has a cross-site scripting XSS vulnerability that coul...

Cross site scripting

Label Studio is an a popular open source data labeling tool. Versions prior to 1.9.2 have a cross-site scripting XSS vulnerability that could be exploited when an authenticated user uploads a crafted image file for their avatar that gets rendered as a HTML file on the website. Executing arbitrary...

Online Retail Hack

Selling miniature replicas to unsuspecting shoppers: Online marketplaces sell tiny pink cowboy hats. They also sell miniature pencil sharpeners, palm-size kitchen utensils, scaled-down books and camping chairs so small they evoke the Stonehenge scene in "This Is Spinal Tap." Many of the minuscule...

SUSE CVE-2014-9330

Integer overflow in tifpackbits.c in bmp2tif in libtiff 4.0.3 allows remote attackers to cause a denial of service crash via crafted BMP image, related to dimensions, which triggers an out-of-bounds read...

UBUNTU-CVE-2023-39352

FreeRDP is a free implementation of the Remote Desktop Protocol RDP, released under the Apache license. Affected versions are subject to an invalid offset validation leading to Out Of Bound Write. This can be triggered when the values rect-left and rect-top are exactly equal to surface-width and...

CVE-2023-39125

NTSC-CRT 2.2.1 has an integer overflow and out-of-bounds write in loadBMP in bmprw.c because a file's width, height, and BPP are not validated. NOTE: the vendor's perspective is "this main application was not intended to be a well tested program, it's just something to demonstrate it works and fo...

Improper Access Control

Jenkins Dimensions Plugin is vulnerable to Improper Access Control. The vulnerability exists due to a missing permission check at an http endpoint which allows an attacker to enumerate credentials IDs stored and perform unauthorized actions...