18249 matches found
CVE-2022-46365: Improper Input Validation
Apache StreamPark 1.0.0 before 2.0.0 When the user successfully logs in, to modify his profile, the username will be passed to the server-layer as a parameter, but not verified whether the user name is the currently logged user and whether the user is legal, This will allow malicious attackers to...
CVE-2023-0683: Improper Input Validation
A valid, authenticated XCC user with read only access may gain elevated privileges through a specifically crafted API call...
WS-2023-0130
unilogies/bumsys before 2.2.0 is vulnerable to Improper Input Validation. It is possible to transfer money with a negative number, which allows an attacker to take money from another account by money transfer...
Improper Input Validation
flatpak is vulnerable to Improper Input Validation. Vulnerability allows copied text from a linux virtual console to be run after flatpak app is closed resulting in improper input validation...
EulerOS Virtualization 2.9.0 : linux-firmware (EulerOS-SA-2023-1661)
According to the versions of the linux-firmware package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Lin...
CVE-2023-30269
CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...
UBUNTU-CVE-2022-25273
Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter...
CVE-2021-41803
A flaw was found in HashiCorp Consul, where it is vulnerable to a denial of service caused by improper input validation for the node or segment names. By sending a specially-crafted request, a remote, authenticated attacker can cause a denial of service. Mitigation Mitigation for this issue is...
CVE-2022-25273
Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter...
CVE-2023-30269
CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...
CVE-2022-25273
Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter...
PT-2023-22619
Name of the Vulnerable Software and Affected Versions CLTPHP versions 6.0 and earlier Description The issue is related to Improper Input Validation. It affects the application/admin/controller/Template.php file. Recommendations For CLTPHP versions 6.0 and earlier, at the moment, there is no...
CVE-2022-25273: Improper Input Validation
Drupal core's form API has a vulnerability where certain contributed or custom modules' forms may be vulnerable to improper input validation. This could allow an attacker to inject disallowed values or overwrite data. Affected forms are uncommon, but in certain cases an attacker could alter...
CVE-2023-30269: Improper Input Validation
CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...
CVE-2023-30269
CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...
CVE-2023-30269
CLTPHP =6.0 is vulnerable to Improper Input Validation via application/admin/controller/Template.php...
CVE-2023-1731 Improper Input Validation in Meinberg LTOS
In Meinbergs LTOS versions prior to V7.06.013, the configuration file upload function would not correctly validate the input, which would allow an remote authenticated attacker with high privileges to execute arbitrary commands...
Improper Input Validation
@openzeppelin/contracts is vulnerable to Improper Input Validation. The vulnerability exists because the GovernorCompatibilityBravo.sol does not properly validate the length of signatures and calldatas parameters in all proposals that are passed through the governance, which allows an attacker to...
CVE-2023-29530: Improper Input Validation
Laminas Diactoros provides PSR HTTP Message implementations. In versions 2.18.0 and prior, 2.19.0, 2.20.0, 2.21.0, 2.22.0, 2.23.0, 2.24.0, and 2.25.0, users who create HTTP requests or responses using laminas/laminas-diactoros, when providing a newline at the start or end of a header key or value...
CVE-2023-22916: Improper Input Validation
The configuration parser of Zyxel ATP series firmware versions 5.10 through 5.35, USG FLEX series firmware versions 5.00 through 5.35, USG FLEX 50W firmware versions 5.10 through 5.35, USG20W-VPN firmware versions 5.10 through 5.35, and VPN series firmware versions 5.00 through 5.35, which fails ...