CVE-2022-38668: Use of Uninitialized Resource

HTTP applications servers based on Crow through 1.0+4 may reveal potentially sensitive uninitialized data from stack memory when fulfilling a request for a static file smaller than 16 KB...

CVE-2022-31089 Invalid file request can crashe parse-server

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected versions certain types of invalid files requests are not handled properly and can crash the server. If you are running multiple Parse Server instances in a cluster, the availability...

CVE-2022-31089 Invalid file request can crashe parse-server

Parse Server is an open source backend that can be deployed to any infrastructure that can run Node.js. In affected versions certain types of invalid files requests are not handled properly and can crash the server. If you are running multiple Parse Server instances in a cluster, the availability...

Invalid file request can crash server

Impact Certain types of invalid files requests are not handled properly and can crash the server. If you are running multiple Parse Server instances in a cluster, the availability impact may be low; if you are running Parse Server as a single instance without redundancy, the availability impact m...

GHSA-XW6G-JJVF-WWF9 Invalid file request can crash server

Impact Certain types of invalid files requests are not handled properly and can crash the server. If you are running multiple Parse Server instances in a cluster, the availability impact may be low; if you are running Parse Server as a single instance without redundancy, the availability impact m...

Authorization

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization...

CVE-2021-43938: Exposure of Sensitive Information to an Unauthorized Actor

Elcomplus SmartPTT SCADA Server is vulnerable to an unauthenticated user can request various files from the server without any authentication or authorization...

Elcomplus SmartPPT Information Disclosure Vulnerability

Elcomplus SmartPPT SCADA Server is an integrated voice and data scheduling software from Elcomplus, Inc. Elcomplus SmartPPT SCADA Server 1.4 is vulnerable to an information disclosure vulnerability that could be exploited by an unauthenticated attacker to request various files from the server...

Foxit PDF Reader Buffer Overflow Vulnerability (CNVD-2024-17009)

Foxit PDF Reader is a popular PDF parsing software. Foxit PDF Reader suffers from a buffer overflow vulnerability that can be exploited by a remote attacker to submit a special file request that induces the user to parse it, which can cause the user's program to crash or can be used to execute...

Foxit PDF Reader和Foxit PDF Editor 资源管理错误漏洞

Foxit PDF Reader is a PDF reader. Foxit PDF Reader has a security vulnerability that can be exploited by remote attackers to submit a special file request, which induces the user to parse it and can crash the application or execute arbitrary code in the application context...

CVE-2021-37595

In FreeRDP before 2.4.0 on Windows, wfcliprdrserverfilecontentsrequest in client/Windows/wfcliprdr.c has missing input checks for a FILECONTENTSRANGE File Contents Request PDU...

Microsoft Print 3D PLY Code Execution Vulnerability

Microsoft Print 3D is a 3D modeling tool developed by Microsoft. The Microsoft Print 3D PLY code execution vulnerability is exploited by remote attackers to submit a special file request that induces the user to parse it, which can crash the application or execute arbitrary code in the applicatio...

CVE-2020-36321

Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 Vaadin 14.0.0 through 14.4.2, and 3.0 prior to 5.0 Vaadin 15 prior to 18 allows attacker to request arbitrary files stored outside of intended frontend resources folder...

CVE-2020-36321: Improper Limitation of a Pathname to a Restricted Directory

Improper URL validation in development mode handler in com.vaadin:flow-server versions 2.0.0 through 2.4.1 Vaadin 14.0.0 through 14.4.2, and 3.0 prior to 5.0 Vaadin 15 prior to 18 allows attacker to request arbitrary files stored outside of intended frontend resources folder...

Foxit Reader Out-of-Bounds Write Vulnerability

Foxit Reader is a PDF document reader. Foxit Reader suffers from an out-of-bounds write vulnerability that can be exploited by a remote attacker to submit a special file request, which can be tricked into parsing, crashing the application or executing arbitrary code in the application context...

Foxit Reader Memory Misreference Vulnerability (CNVD-2021-26395)

Foxit Reader is a PDF document reader. A memory misreference vulnerability exists in Foxit Reader, which allows remote attackers to submit a special file request that can be exploited to trick the user into parsing it, which can crash the application or execute arbitrary code in the application...

Foxit Reader 资源管理错误漏洞

Foxit Reader is a PDF document reader. A memory misreference vulnerability exists in Foxit Reader, which allows remote attackers to submit a special file request that can be exploited to trick the user into parsing it, which can crash the application or execute arbitrary code in the application...

libyang lys_extension_instances_free() memory misreference vulnerability

libyang is a data modeling language library. A memory misreference vulnerability exists in libyang lysextensioninstancesfree, which can be exploited by an attacker to submit a special file request and trick the user into parsing it, which can be used in a denial of service attack...

libyang yyparse() memory misreference vulnerability (CNVD-2020-10246)

libyang is a data modeling language library. A memory misreference vulnerability exists in libyang yyparse, which can be exploited by an attacker to submit a special file request and trick the user into parsing it, which can be used to conduct a denial of service attack or execute arbitrary code...

Wecon PIStudio HSC File Parsing Out-of-Bounds Write Code Execution Vulnerability

Wecon PIStudio is an HMI software. An out-of-bounds write code execution vulnerability exists in Wecon PIStudio HSC file parsing, which allows remote attackers to exploit the vulnerability by submitting a special file request and tricking the user into parsing it, which can crash the application ...