Lucene search
+L

1213 matches found

Prion
Prion
added 2024/02/16 10:15 a.m.14 views

Design/Logic Flaw

In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem...

7.5AI score0.00528EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2024/02/16 12:0 a.m.14 views

CVE-2023-45860

In Hazelcast Platform through 5.3.4, a security issue exists within the SQL mapping for the CSV File Source connector. This issue arises from inadequate permission checking, which could enable unauthorized clients to access data from files stored on a member's filesystem...

7.2AI score0.00528EPSS
Exploits0References2
OSV
OSV
added 2023/11/24 7:15 p.m.2 views

DEBIAN-CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.5CVSS7.3AI score0.01158EPSS
Exploits1References1
OSV
OSV
added 2023/11/24 12:0 a.m.32 views

CVE-2023-49298

OpenZFS through 2.1.13 and 2.2.x through 2.2.1, in certain scenarios involving applications that try to rely on efficient copying of file data, can replace file contents with zero-valued bytes and thus potentially disable security mechanisms. NOTE: this issue is not always security related, but c...

7.5CVSS6.5AI score0.01158EPSS
Exploits1References14
Positive Technologies
Positive Technologies
added 2023/11/24 12:0 a.m.13 views

PT-2023-31158 · Unknown +3 · Gnu Core Utilities +3

Name of the Vulnerable Software and Affected Versions: OpenZFS versions 2.1.13 and earlier OpenZFS versions 2.2.x through 2.2.1 Description: The issue is related to the replacement of file contents with zero-valued bytes, potentially disabling security mechanisms in certain scenarios involving...

7.5CVSS6.7AI score0.02084EPSS
Exploits2References36
NVD
NVD
added 2023/11/08 10:15 a.m.22 views

CVE-2023-46772

Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data...

7.5CVSS0.00514EPSS
Exploits0References2
Prion
Prion
added 2023/11/08 10:15 a.m.29 views

Design/Logic Flaw

Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data...

5CVSS7AI score0.00514EPSS
Exploits0References2Affected Software1
CVE
CVE
added 2023/11/08 9:6 a.m.67 views

CVE-2023-46772

CVE-2023-46772 describes a vulnerability in the QMI service module where parameters are out of the value range. The resulting behavior can cause errors when reading file data. Connected sources corroborate the same root cause and describe the impact as reading-file-data errors, with several refer...

7.5CVSS7.4AI score0.00514EPSS
Exploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/11/08 9:6 a.m.10 views

CVE-2023-46772

Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data...

7.7AI score0.00514EPSS
Exploits0References2
Cvelist
Cvelist
added 2023/11/08 9:6 a.m.34 views

CVE-2023-46772

Vulnerability of parameters being out of the value range in the QMI service module. Successful exploitation of this vulnerability may cause errors in reading file data...

7.7AI score0.00514EPSS
Exploits0References2
CNNVD
CNNVD
added 2023/11/08 12:0 a.m.4 views

Huawei EMUI Security Vulnerability

Huawei EMUI is an Android-based mobile operating system developed by China's Huawei Huawei. A security vulnerability exists in Huawei EMUI version 11.0.1, which originates from a parameter in the QMI service module that is out of range, resulting in an error when reading file data...

7.5CVSS6.7AI score0.00514EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2023/11/08 12:0 a.m.5 views

PT-2023-30202 · Unknown · Qmi Service Module

Name of the Vulnerable Software and Affected Versions: QMI service module affected versions not specified Description: The issue is related to parameters being out of the value range in the QMI service module. Successful exploitation may cause errors in reading file data. Recommendations: At the...

7.5CVSS6.8AI score0.00514EPSS
Exploits0References5
BDU FSTEC
BDU FSTEC
added 2023/10/26 12:0 a.m.11 views

The vulnerability of the file.data function in D-Link router microprogramming devices such as DI-7003GV2, DI-7100G, DI-7100GV2, DI-7200G, DI-7200GV2, DI-7300G, and DI-7400G allows a hacker to execute arbitrary code.

The vulnerability of the file.data function in D-Link router microprogramming devices such as DI-7003GV2, DI-7100G, DI-7100GV2, DI-7200G, DI-7200GV2, DI-7300G, and DI-7400G lies in the fact that the operation’s output escapes the buffer in memory. Exploiting this vulnerability allows a remote...

10CVSS8.4AI score0.01647EPSS
Exploits1References2Affected Software7
ATTACKERKB
ATTACKERKB
added 2023/10/16 6:15 a.m.5 views

CVE-2023-45574

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and...

9.8CVSS7.7AI score0.01647EPSS
Exploits1References3
OSV
OSV
added 2023/10/16 6:15 a.m.5 views

CVE-2023-45574

Buffer Overflow vulnerability in D-Link device DI-7003GV2.D1 v.23.08.25D1 and before, DI-7100G+V2.D1 v.23.08.23D1 and before, DI-7100GV2.D1 v.23.08.23D1, DI-7200G+V2.D1 v.23.08.23D1 and before, DI-7200GV2.E1 v.23.08.23E1 and before, DI-7300G+V2.D1 v.23.08.23D1, and DI-7400G+V2.D1 v.23.08.23D1 and...

9.8CVSS6.1AI score0.01647EPSS
Exploits1References2
CNNVD
CNNVD
added 2023/10/16 12:0 a.m.6 views

D-Link DI-7003G Buffer Error Vulnerability

The D-Link DI-7003G is a wireless router from China-based AUO D-Link. A security vulnerability exists in the D-Link DI-7003G, which can be exploited to execute arbitrary code via the fn parameter of the file.data function...

9.8CVSS7.8AI score0.01647EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2023/10/03 12:0 a.m.16 views

PT-2023-32071 · Msdosfs +1 · Msdosfs +1

Name of the Vulnerable Software and Affected Versions: msdosfs affected versions not specified Description: The issue arises when the 'truncate' or 'ftruncate' system calls are used on an msdosfs filesystem under certain circumstances. Instead of populating the additional space in the file with...

6.5CVSS6.3AI score0.00535EPSS
Exploits0References9
NVD
NVD
added 2023/02/22 6:15 p.m.27 views

CVE-2023-0960

A vulnerability was found in SeaCMS 11.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /data/config.ftp.php of the component Picture Management. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

9.8CVSS5.9AI score0.00978EPSS
Exploits1References4
SUSE CVE
SUSE CVE
added 2023/02/15 4:31 a.m.4 views

SUSE CVE-2018-6035

Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension...

8.8CVSS8.5AI score0.01533EPSS
Exploits0References5
SUSE CVE
SUSE CVE
added 2023/02/15 4:31 a.m.4 views

SUSE CVE-2018-6045

Insufficient policy enforcement in DevTools in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to potentially leak user local file data via a crafted Chrome Extension...

6.5CVSS8.5AI score0.01537EPSS
Exploits0References5
Rows per page
Query Builder