All CVEs — page 370 of 631
The complete archive, 25 per page, newest first. 15775 records. Search instead.
The agent-zero application suffers from a directory traversal vulnerability that allows unauthorized access to any file on the system through the FileBrowser component. This flaw enables attackers to read sensitive files without authentication or authorization.
The flaw allows path traversal in insert_text_file, enabling an attacker to access or modify files outside the intended directory. This matters because it can lead to data leakage or unauthorized file manipulation.
The flaw allows path traversal, enabling an attacker to write files to arbitrary locations, potentially leading to unauthorized data manipulation or execution of malicious code.
A crafted PDF file can cause pypdf to consume excessive memory when retrieving page labels, potentially leading to application unavailability. This vulnerability affects versions prior to 6.19.0.
The pypdf library suffers from a denial-of-service vulnerability where crafted PDF files with many embedded files can cause excessive CPU usage and slow processing times due to repeated reparsing of attachment lists. This affects applications that access embedded file mappings in PDFs.
A denial-of-service vulnerability in pypdf allows attackers to craft malicious PDF files that cause excessive CPU usage and application unavailability when form fields are updated with flattening enabled. This affects applications using pypdf for PDF processing.
A crafted PDF file can trigger inefficient byte-by-byte decompression in pypdf, leading to excessive CPU usage and application unavailability. This vulnerability allows attackers to perform a denial-of-service attack by submitting malicious PDF files.
A memory exhaustion vulnerability in pypdf allows attackers to craft malicious PDFs with oversized font width arrays that cause excessive memory consumption during text extraction operations. This can lead to denial of service through resource exhaustion.
The pypdf library is vulnerable to a memory exhaustion attack through crafted PDF files that contain oversized font mapping tokens in the /ToUnicode table. This allows attackers to cause excessive memory consumption during text extraction operations, potentially leading to denial of service.
The flaw in Kiteworks Email Protection Gateway allows an attacker to associate a certificate with another user's account, compromising the confidentiality and integrity of the account's encrypted mail and potentially enabling unauthorized access.
A stored cross-site scripting (XSS) vulnerability in Kiteworks Core allows unauthenticated attackers to inject malicious JavaScript, potentially gaining full administrative control.
An unauthenticated attacker can upload files with controlled content to the appliance filesystem through an administrative upload handler that lacks proper authentication. This creates a potential path for privilege escalation and system compromise when combined with a separate code execution vulnerability.