5884 matches found
openexr, ilmbase -- security fixes related to reading corrupted input files
Cary Phillips reports: Patch release with various bug/sanitizer/security fixes, primarily related to reading corrupted input files...
IBM Security Verify Information Queue 安全漏洞
IBM Security Verify Information Queue is a cross-product integrator that leverages Kafka technology and a publish/subscribe model to integrate data between IBM security products. IBM Security Verify Information Queue suffers from a user credentials plaintext delivery vulnerability. An attacker...
CVE-2021-20358
IBM Cloud Pak for Automation 20.0.3, 20.0.2-IF002 stores potentially sensitive information in clear text in API connection log files. This information could be obtained by a user with permissions to read log files. IBM X-Force ID: 194965...
RUSTSEC-2021-0034 office is unmaintained, use calamine instead
The office crate is unmaintained. Use calamine for reading excel files. Contact the office author for ownership of the package name...
JetBrains Kotlin 授权问题漏洞
JetBrains Kotlin is a statically typed programming language from the Czech company JetBrains that runs on the Java Virtual Machine. An authorization issue vulnerability exists in JetBrains Kotlin before 1.4.2, which stems from insecure permissions and can be exploited by an attacker to read data...
RainbowFish PacsOne Server 代码问题漏洞
RainbowFish PacsOne Server is an image archiving and communication system server from RainbowFish, which is used to save incoming images. The system is used to save incoming images, and a file reading vulnerability exists in Rainbowfish PacsOne Server that could be exploited by an attacker to cau...
CVE-2020-15097
loklak is an open-source server application which is able to collect messages from various sources, including twitter. The server contains a search index and a peer-to-peer index sharing interface. All messages are stored in an elasticsearch index. In loklak less than or equal to commit 5f48476, ...
Unspecified Vulnerability in Rust (CNVD-2021-13695)
Rust is a general-purpose, compiled programming language from the Mozilla Foundation. A security vulnerability existed in Rust prior to version 0.1.1. The vulnerability stems from a lack of program soundness and may read uninitialized memory. No details of the vulnerability are provided at this...
CVE-2021-3337
The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...
CVE-2021-3337
The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...
CVE-2021-3337
The Hide-Thread-Content plugin through 2021-01-27 for MyBB allows remote attackers to bypass intended content-reading restrictions by clicking on reply or quote in the postbit...
MyBB Hide-Thread-Content plugin security vulnerability
MyBB MyBulletinBoard is a free and web-based forum software developed by MyBB MYBB team using PHP and MySQL. The software is easy to use, supports multiple languages, scalable and so on. A security vulnerability exists in the MyBB Hide-Thread-Content plugin through 2021-01-27, which originates fr...
CloudBees Jenkins TOCTOU Competitive Conditions Vulnerability
Jenkins is an open source continuous integration tool written in Java , mainly used for continuous , automated build/test software projects , monitor the operation of external tasks . A TOCTOU competitive condition vulnerability exists in Jenkins 2.275, LTS 2.263.2. An attacker can exploit this...
Exploit for CVE-2020-27949
This is a PoC exploit for CVE-2020-27949, a vulnerability in macOS's DTrace system that allows an attacker to read memory of other processes without elevated permissions. The exploit creates probes in the victim process using the /dev/fasttrap device, which lacks permission checks, allowing any...
CAJViewer suffers from dll hijacking vulnerability
CAJViewer is a literature reading software that supports TEB, CAJ, NH, KDH and PDF format files from China Journal Network. CAJViewer suffers from a dll hijacking vulnerability, which can be exploited by attackers to load a malicious DLL, execute malicious code, and gain control of the host...
SIYUCMS backend has arbitrary file reading vulnerability
SIYUCMS is a content management system based on ThinkPHP + AdminLTE. An arbitrary file read vulnerability exists in the backend of SIYUCMS. Attackers can use the vulnerability to obtain sensitive information...
CVE-2021-2040
Vulnerability in the Oracle Argus Safety product of Oracle Health Sciences Applications component: Case Form, Local Affiliate Form. The supported version that is affected is 8.2.2. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle...
The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic, relates to reading data beyond the buffer in memory. This allows an attacker to gain unauthorized access to protected information.
The vulnerability of the software platform for conducting marketing campaigns, both online and offline, in Adobe Campaign Classic is related to reading data beyond the buffer in memory. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...
WordPress Simple Board Job plugin path traversal vulnerability
Wordpress Simple Board Job Plugin is a plugin from the WordPress Wordpress Foundation that provides job posting functionality job boards for Wordpress. A security vulnerability exists in WordPress Simple Board Job plugin 2.9.3 and earlier versions, which stems from a path traversal vulnerability ...
