14923 matches found
CVE-2023-6119
An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that usually require a higher privilege level. This is caused by GetSusp not correctly protecting a directory that it creates during execution...
Privilege escalation
An Improper Privilege Management vulnerability in Trellix GetSusp prior to version 5.0.0.27 allows a local, low privilege attacker to gain access to files that usually require a higher privilege level. This is caused by GetSusp not correctly protecting a directory that it creates during execution...
ModelDB Security Vulnerabilities
ModelDB is an open source system for machine learning model version control, metadata, and experiment management from VertaAI. ModelDB has a security vulnerability that stems from a remote file inclusion LFI vulnerability in the artifactpath URL parameter. An attacker can exploit this vulnerabili...
Ray Security breach
Ray is a unified framework for scaling AI and Python applications open-sourced by ray-project. Ray has a security vulnerability that stems from a remote file inclusion LFI vulnerability in the /static/ directory. An attacker can exploit this vulnerability to read any file on the server...
Missing Authorization
An attacker is able to read any file on the server hosting the H2O dashboard without any authentication...
PT-2023-32476 · H2O · H2O
Name of the Vulnerable Software and Affected Versions: H2O affected versions not specified Description: The issue is related to a stored XSS vulnerability that can lead to a Local File Include attack. This allows an attacker to potentially execute malicious scripts or access sensitive files on th...
ASUSTeK COMPUTER RT-AC87U vulnerable to improper access control
Overview RT-AC87U provided by ASUSTeK COMPUTER INC. contains an improper access control vulnerability CWE-284. Chuya Hayakawa of 00One, Inc. reported this vulnerability to JPCERT/CC. JPCERT/CC coordinated with the developer. Impact An attacker may read or write files that are not intended to be...
CVE-2023-47678
An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by connecting to a target device via tftp...
CVE-2023-47678
An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by connecting to a target device via tftp...
CVE-2023-47678
An improper access control vulnerability exists in RT-AC87U all versions. An attacker may read or write files that are not intended to be accessed by connecting to a target device via tftp...
PT-2023-8942 · Gpac +2 · Gpac +2
Name of the Vulnerable Software and Affected Versions: GPAC version 2.3-DEV-rev566-g50c2ab06f-master Description: The issue is related to the gf filterpacket del function in the /gpac/src/filter core/filter.c file of the GPAC multimedia platform. It involves incorrect use of dynamic memory, which...
CVE-2023-46590
A vulnerability has been identified in Siemens OPC UA Modelling Editor SiOME All versions V2.8. Affected products suffer from a XML external entity XXE injection vulnerability. This vulnerability could allow an attacker to interfere with an application's processing of XML data and read arbitrary...
PT-2023-6873 · Comos · Comos
Name of the Vulnerable Software and Affected Versions: COMOS All versions Description: The issue is related to the implementation of the Server Message Block SMB network protocol in COMOS software, which is used for designing, operating, and maintaining technological installations. It is associat...
PT-2023-7365 · Adobe · After Effects
Name of the Vulnerable Software and Affected Versions: Adobe After Effects versions 24.0.2 and earlier Adobe After Effects versions 23.6 and earlier Description: The issue is related to an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could levera...
The vulnerability of NVIDIA Virtual GPU driver relates to the use of files and directories accessible from external parties. This allows attackers to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause service interruptions.
The vulnerability of NVIDIA Virtual GPU driver relates to the use of files and directories accessible from external parties. Exploiting this vulnerability can allow attackers to gain unauthorized access to protected information, enhance their privileges, execute arbitrary code, or cause service...
The vulnerability of the UnRAR decompression tool lies in the improper handling of symbolic links before accessing the file, allowing attackers to gain access to confidential data.
The vulnerability of the UnRAR decompression tool is related to the incorrect handling of symbolic links before accessing the file. Exploiting this vulnerability can allow an attacker who operates remotely to gain access to confidential data...
Input validation
Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...
CVE-2023-6069 Improper Link Resolution Before File Access in froxlor/froxlor
Improper Link Resolution Before File Access in GitHub repository froxlor/froxlor prior to 2.1.0...
CVE-2023-6069
Froxlor (froxlor/froxlor) is affected by CVE-2023-6069 due to an Improper Link Resolution Before File Access in versions prior to 2.1.0. The underlying issue is in how links are resolved before file access, enabling high-impact outcomes per NVD and CNA metrics. Reported CVSS v3.1 base scores indi...