CVE-2021-2142

Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware component: Console. The supported version that is affected is 10.3.6.0.0. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle WebLogic Server. Successful...

CVE-2021-2242

Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware component: Outside In Filters. The supported version that is affected is 8.5.5. Easily exploitable vulnerability allows unauthenticated attacker with network access via HTTP to compromise Oracle Outside In...

Sonatype Nexus Repository Manager IQ 路径遍历漏洞

Sonatype Nexus Repository Manager IQ is a Sonatype open source application. The policy management and component intelligence features for IQ Server are integrated with the agent repository in Nexus Repository Manager Pro. A security vulnerability exists in Sonatype Nexus Repository Manager IQ. An...

Arbitrary file reading vulnerability exists in Saida Technology's CloudVision video conferencing terminal

Anhui Saida Technology Co., Ltd. focuses on intelligent cloud video industry, based on the network of communication carriers, using a new generation of information technology to create a "cloud video application engine", focusing on big data application platforms, intelligent terminal product...

The vulnerability of Samba software, related to reading data beyond the specified buffer, allows a hacker to cause an unexpected termination of the application.

The vulnerability of Samba software relates to the reading of data beyond the specified buffer. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause an unexpected termination of the application...

CVE-2021-20023

SonicWall Email Security version 10.0.9.x contains a vulnerability that allows a post-authenticated attacker to read an arbitrary file on the remote host...

Oracle Enterprise Manager Base Platform 安全漏洞

Oracle Enterprise Manager Base Platform is a complete installer that includes OMS, agents, repositories, and management plug-ins. A security vulnerability exists in the UI Framework component of Oracle Enterprise Manager Base Platform version 13.4.0.0. An attacker could use this vulnerability to...

Discord Recon Server 参数注入漏洞

Discord Recon Server is an AI bot from Discord USA. Discord-Recon suffers from a parameter injection vulnerability that can be exploited by an attacker to read internal files from the system and write the files to the system, leading to remote code execution...

Command injection

The gfhintertracknew function in GPAC 1.0.1 allows attackers to read memory via a crafted file in the MP4Box command...

CVE-2021-31261

CVE-2021-31261 affects GPAC 1.0.1; the gf_hinter_track_new path allows memory read via a crafted MP4Box input. The impact is information disclosure (read memory) with local access and, per sources, user interaction may be required. Mitigation: upgrade GPAC to a newer release (Gentoo GLSA 202408-2...

EIPStackGroup OpENer EtherNet/IP Out-of-Bounds Reading Vulnerability

Eipstackgroup Opener is a software for providing EtherNet/IP stacking capabilities for IO adapter devices organized by Eipstackgroup . EIPStackGroup OpENer Ethernet/IP has an out-of-bounds read vulnerability that can be exploited to send specially crafted packets to read arbitrary data...

Exploit for Path Traversal in Jellyfin

CVE-2021-21402: Jellyfin Arbitrary File Reading Vulnerability...

ABBYY FineReader suffers from an out-of-bounds reading vulnerability

ABBYY FineReader is an all-in-one OCR and PDF software application. An out-of-bounds read vulnerability exists in ABBYY FineReader. An attacker can exploit this vulnerability to cause the program to crash...

CVE-2021-3017

The web interface on Intelbras WIN 300 and WRN 342 devices through 2021-01-04 allows remote attackers to discover credentials by reading the defwirelesspassword line in the HTML source code...

PT-2021-17628 · Exif +1 · Exif +1

Name of the Vulnerable Software and Affected Versions: exif versions 0.6.22 and earlier Description: The issue allows attackers to cause a Denial of Service DoS by uploading a malicious JPEG file, causing the application to crash. This occurs when printing out XML formatted EXIF data using the ex...

kernel: heap buffer overflow in the iSCSI subsystem

A flaw was found in the Linux kernel. A heap buffer overflow in the iSCSI subsystem is triggered by setting an iSCSI string attribute to a value larger than one page and then trying to read it. The highest threat from this vulnerability is to data confidentiality and integrity as well as system...

Arbitrary file reading vulnerability in the accounting training platform of Xiamen NetZhong.com Software Co.

Ltd. is a high-tech enterprise specializing in the development, service and sales of teaching software products for teaching accounting. Xiamen NetZhongNET Software Co., Ltd. accounting training teaching platform there is an arbitrary file reading vulnerability, attackers can use the vulnerabilit...

WCMS Directory Traversal Vulnerability (CNVD-2021-28257)

WCMS is a content management system CMS that uses an open web interface to build websites. A directory traversal vulnerability exists in WCMS version 0.3.2. The vulnerability can be exploited to read arbitrary files on the server running the application via the pagename parameter of wex/html.php...

WCMS Directory Traversal Vulnerability

WCMS is a content management system CMS that uses an open web interface to build websites. A directory traversal vulnerability exists in WCMS version 0.3.2. The vulnerability can be exploited to read arbitrary files on the server running the application via the path parameter of wex/cssjs.php...

OESA-2021-1118 openjpeg2 security update

OpenJPEG is an open-source JPEG 2000 codec written in C language. It has been developed in order to promote the use of JPEG 2000, a still-image compression standard from the Joint Photographic Experts Group JPEG. Since April 2015, it is officially recognized by ISO/IEC and ITU-T as a JPEG 2000...