39602 matches found
Gallagher T-Series Reader security vulnerability
The Gallagher T-Series Reader is a card reader in an access control system from Gallagher of New Zealand. A security vulnerability exists in the Gallagher T-Series Reader that stems from improper resource release and could lead to a denial of service attack. The following versions are affected:...
CVE-2025-44003: Missing Release of Resource after Effective Lifetime
Missing Release of Resource after Effective Lifetime CWE-772 in the Gallagher T-Series Reader allows an attacker with physical access to the reader to perform a limited denial of service when 125 kHz Card Technology is enabled. This issue affects T-Series Readers: 9.20 prior to vCR9.20.250213a...
PT-2025-28973 · Gallagher · Gallagher T-Series Reader
Name of the Vulnerable Software and Affected Versions: Gallagher T-Series Reader versions prior to 9.20.250213a Gallagher T-Series Reader versions prior to 9.10.250213a Gallagher T-Series Reader versions prior to 9.00.250619a Gallagher T-Series Reader versions 8.90 and earlier Description: A...
Expected Behavior Violation
Overview llama-index-readers-papers is a llama-index readers papers integration Affected versions of this package are vulnerable to Expected Behavior Violation via the ArxivReader process. An attacker can cause data loss by uploading papers with identical titles but different contents, resulting ...
Directory Traversal
Overview llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to Directory Traversal via the ObsidianReader process. An attacker can access arbitrary files outside the intended directory by creating symbolic links that point to sensitive files,...
Directory Traversal
Overview llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to Directory Traversal via the loaddata method in the ObsidianReader class. An attacker can access sensitive system files by exploiting hardlinks to bypass path restrictions. Details A...
Uncontrolled Recursion
Overview llama-index is an Interface between LLMs and your data Affected versions of this package are vulnerable to Uncontrolled Recursion via the JSONReader process. An attacker can cause the application to crash by submitting deeply nested JSON structures, resulting in a stack overflow and...
Uncontrolled Recursion
Overview llama-index-core is an Interface between LLMs and your data Affected versions of this package are vulnerable to Uncontrolled Recursion via the JSONReader process. An attacker can cause the application to crash by submitting deeply nested JSON structures, resulting in a stack overflow and...
PYSEC-2025-247
A vulnerability in the ArxivReader class of the run-llama/llamaindex repository, versions up to v0.12.22.post1, allows for MD5 hash collisions when generating filenames for downloaded papers. This can lead to data loss as papers with identical titles but different contents may overwrite each othe...
LlamaIndex security vulnerability
LlamaIndex is a data framework for LLM applications from the LlamaIndex open source. A security vulnerability exists in LlamaIndex 0.12.22.post1 and earlier versions, which stems from an MD5 hash conflict when generating filenames in the ArxivReader class, which could lead to data loss...
Vulnerabilities fixed in Adobe Acrobat Reader
Adobe has fixed vulnerabilities in Acrobat Reader Specifically for versions 24.001.30235, 20.005.30763, 25.001.20521 and earlier. The vulnerabilities include a Use After Free, out-of-bounds write, out-of-bounds read and NULL Pointer Dereference. These vulnerabilities can lead to the execution of...
CVE-2025-47823
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have a hardcoded password for a system...
CVE-2025-47822
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have an on-chip debug interface with improper access control...
CVE-2025-47824
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have cleartext storage of code...
CVE-2025-47824
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have cleartext storage of code...
CVE-2025-47822
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have an on-chip debug interface with improper access control...
CVE-2025-47824
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have cleartext storage of code...
CVE-2025-47823
Flock Safety LPR License Plate Reader devices with firmware through 2.2 have a hardcoded password for a system...