Arbitrary file read vulnerability exists in ShopXO (CNVD-2021-57330)

ShopXO is an open source enterprise-level open source e-commerce system. ShopXO has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in TerraMaster System Management at Shenzhen Tumi Electronic Technology Co.

TerraMaster is a cloud computing brand of Shenzhen Tumi Electronic Technology Co. An arbitrary file read vulnerability exists in the management of the TerraMaster system of Shenzhen Tumi Electronic Technology Co. Ltd, which can be exploited by an attacker to obtain sensitive information...

Tale blog has a file read vulnerability

Tale blog is a java development blog system. Tale blog has a file read vulnerability that can be exploited by attackers to obtain sensitive information...

Arbitrary file read vulnerability exists in Node-RED (CNVD-2021-54086)

Node-RED is a tool for building Internet of Things IOT applications that focuses on simplifying the "connectivity" of code blocks to perform tasks. Node-RED suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

DEBIAN-CVE-2021-35515

When reading a specially crafted 7Z archive, the construction of the list of codecs that decompress an entry can result in an infinite loop. This could be used to mount a denial of service attack against services that use Compress' sevenz package...

Arbitrary File Read Vulnerability in Node-RED

Node-RED is a programming tool for connecting hardware devices, APIs and online services together in new and interesting ways. It provides a browser-based editor that makes it easy to connect streams together using a palette of various nodes that can be deployed and put into operation with a sing...

The vulnerability of the fetch_interval_quantifier function in the Oniguruma library, related to reading data beyond the allowable buffer size, allows a hacker to trigger a service failure.

The vulnerability of the fetchintervalquantifier function in the Oniguruma library relates to reading data beyond the allowable buffer size. Exploiting this vulnerability could allow a malicious actor to cause service failures...

Adobe Illustrator 资源管理错误漏洞

Adobe Illustrator 2021 is a vector graphics software. Adobe Illustrator 2021 25.2.3 and earlier versions are vulnerable to a post-release reuse vulnerability. An attacker could exploit this vulnerability to read arbitrary file systems...

PT-2021-3850

Name of the Vulnerable Software and Affected Versions Confluence Data Center versions 7.19.23 through 8.9.3 Confluence Server versions 7.19.23 through 8.5.11 Apache Commons Compress affected versions not specified Description The issue is related to the allocation of unlimited memory when reading...

Adobe Illustrator 资源管理错误漏洞

Adobe Illustrator 2021 is a vector drawing software. A security vulnerability exists in Adobe Illustrator 2021 25.2.3 and earlier versions when handling specially crafted files. An attacker can exploit the vulnerability to read arbitrary file systems...

Arbitrary File Read Vulnerability in AKCMS

AKCMS is a lightweight CMS. AKCMS suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Xiancheng cms exists arbitrary file reading vulnerability

Xiancheng cms is a set of PHP mysql architecture with free open source article management system program. Xiancheng cms arbitrary file read vulnerability, attackers can use the vulnerability to obtain sensitive information...

Arbitrary File Read Vulnerability in SPAM SQR Email Security Gateway of Shou Nei An Information Technology (Shanghai) Co.

SPAM SQR Email Security Gateway is a new generation email filtering system that separates spam and threat emails and provides differential behavior management features. SPAM SQR Email Security Gateway of Shou Nei An Information Technology Shanghai Co., Ltd. suffers from an arbitrary file reading...

Arbitrary File Read Vulnerability in Piwigo

Piwigo is an open source photo album program for the web. Piwigo suffers from an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

Jenkins has an arbitrary file read vulnerability

Jenkins is a Jenkins open source application . Jenkins has an arbitrary file read vulnerability that can be exploited by an attacker to obtain sensitive information...

Arbitrary File Read Vulnerability in Dr.Web Enterprise Security Suite

Doctor Web is a provider of anti-virus products and solutions. An arbitrary file read vulnerability exists in Dr. Web Enterprise Security Suite, which can be exploited by attackers to obtain sensitive information...

The vulnerability of the FLAC__bitreader_read_rice_signed_block function in the bitreader.c component of the FLAC audio codec, related to reading data beyond the allowed buffer limits, allows a hacker to cause a service failure.

The vulnerability of the FLACbitreaderreadricesignedblock function in the bitreader.c component of the FLAC audio codec is related to reading data beyond the allowed buffer limits. Exploiting this vulnerability allows a remote attacker to cause service interruptions...

Advisory ROSA-SA-2021-1821

Software: dcraw 9.19 OS: Cobalt 7.9 CVE-ID: CVE-2018-19565 CVE-Crit: HIGH CVE-DESC: Buffer re-reading in cropmaskedpixels in dcraw before 9.28 could have been used by attackers who could provide malicious files to crash the application that binds the dcraw code or leak private information...

Advisory ROSA-SA-2021-1811

Software: c-ares 1.10.0 OS: Cobalt 7.9 CVE-ID: CVE-2016-5180 CVE-Crit: CRITICAL CVE-DESC: Heap-based buffer overflow in the arescreatequery function in c-ares 1.x before 1.12.0 allows remote attackers to cause a denial of service out-of-range entry or possibly execute arbitrary code via a hostnam...

MyuCMS suffers from an arbitrary file read vulnerability (CNVD-2021-49567)

MyuCMS front-end is built with UIkit framework, back-end is built with layui back-end framework and back-end is developed with PHP+MYSQL. MyuCMS has an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...