Arbitrary File Read Vulnerability in NBR6210-E

NBR6210-E is an Internet Behavior Management router from Riptide, which is designed for office full scenarios. The NBR6210-E suffers from an arbitrary file read vulnerability that can be exploited by an attacker to read arbitrary system files...

Advantech WebAccess/SCADA Relative Path Traversal Vulnerability

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A relative path traversal vulnerability...

CVE-2021-32952

An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK Version 2022.4 and prior resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service...

CVE-2021-32948

An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-servic...

CVE-2021-32944

A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a memory corruption or arbitrary code execution, allowing attackers to cause a denial-of-service...

Design/Logic Flaw

An out-of-bounds write issue exists in the DGN file-reading procedure in the Drawings SDK Version 2022.4 and prior resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-service...

CVE-2021-32944

A use-after-free issue exists in the DGN file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a memory corruption or arbitrary code execution, allowing attackers to cause a denial-of-service...

Paul van Oorschot’s Computer Security and the Internet

Paul van Oorschots webpage contains a complete copy of his book: Computer Security and the Internet: Tools and Jewels. Its worth reading...

CVE-2021-32948

CVE-2021-32948 describes an out-of-bounds write in the DWG file-reading procedure of the Open Design Alliance Drawings SDK (prior to 2022.4), caused by insufficient validation of user-supplied data. This can write past the end of an allocated buffer and may lead to denial of service or code execu...

PT-2021-19996 · Unknown · Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Drawings SDK versions 2022.4 and prior Description: An out-of-bounds write issue exists in the DGN file-reading procedure due to the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buff...

PT-2021-19993 · Unknown · Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Drawings SDK versions prior to 2022.4 Description: An out-of-bounds write issue exists in the DWG file-reading procedure due to the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffe...

Arbitrary File Read Vulnerability in DSKMS

DSKMS is a professional content payment system tailored for enterprise customers by Changsha Deshaun Network Technology Co. DSKMS suffers from an arbitrary file read vulnerability that can be exploited by attackers to obtain sensitive information...

Advantech WebAccess/SCADA 路径遍历漏洞

Advantech WebAccess/SCADA is a suite of SCADA software from Advantech based on a browser architecture. The software supports dynamic graphical displays and real-time data control, and provides the ability to remotely control and manage automation equipment. A relative path traversal vulnerability...

CVE-2021-32948

An out-of-bounds write issue exists in the DWG file-reading procedure in the Drawings SDK All versions prior to 2022.4 resulting from the lack of proper validation of user-supplied data. This can result in a write past the end of an allocated buffer and allow attackers to cause a denial-of-servic...

PT-2021-19990 · Unknown · Drawings Sdk

Name of the Vulnerable Software and Affected Versions: Drawings SDK versions prior to 2022.4 Description: A use-after-free issue exists in the DGN file-reading procedure due to the lack of proper validation of user-supplied data. This can result in memory corruption or arbitrary code execution,...

GHSA-JJ4F-P7VV-J4V9 Arbitrary code execution in Apache Druid

Apache Druid allows users to read data from other database systems using JDBC. This functionality is to allow trusted users with the proper permissions to set up lookups or submit ingestion tasks. The MySQL JDBC driver supports certain properties, which, if left unmitigated, can allow an attacker...

Arbitrary File Read Vulnerability in Zhongxin Golden Shield Firewall System

Golden Shield Firewall is a series of firewall products of Zhongxin Golden Shield specialized in anti-DDoS attack and anti-CC attack. There exists an arbitrary file read vulnerability in the firewall system, which can be exploited by attackers to obtain sensitive information...

Arbitrary File Read Vulnerability in Fiberhome Network Behavior Audit System

Established in 1999, Fiberhome Communication Technology Co., Ltd. is currently the only scientific research and industrial entity integrating three strategic technologies in the field of optical communication in China. An arbitrary file read vulnerability exists in Fiberhome Network Behavior Audi...

Huawei HG659 suffers from an arbitrary file read vulnerability

The Huawei HG659 is a home gateway. An arbitrary file read vulnerability exists in the Huawei HG659, which can be exploited by an attacker to obtain sensitive information...

Lvyecms has an arbitrary file read vulnerability

Lvyecms Brigade CMS is a php content management system based on ThinkPHP 3.2.x development. Lvyecms has an arbitrary file read vulnerability. An attacker can exploit the vulnerability to read server files...