Moderate: Red Hat Security Advisory: Red Hat OpenShift Service Mesh Containers for 2.5.7

Red Hat OpenShift Service Mesh Containers for 2.5.7 This update has a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section. Red Hat OpenShift...

Improper Input Validation

Synapse is vulnerable to Improper Input Validation. The vulnerability is due to improper validation of invites received over federation, allowing a malicious server to send crafted invites that disrupt the affected user's ability to perform /sync operations...

PT-2024-9901 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to improper input validation, which could result in a security feature bypass. A low-privileged attacker could leverage this to bypass security measures an...

Adobe Animate 23.x < 23.0.9 / 24.x < 24.0.6 Multiple Vulnerabilities (APSB24-96)

The version of Adobe Animate installed on the remote macOS or Mac OS X host is prior to 23.0.9 or 24.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-96 advisory. - Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow Wrap or...

NI LabVIEW 安全漏洞

NI LabVIEW National Instruments LabVIEW is a graphical program compilation platform from National Instruments NI. A security vulnerability exists in NI LabVIEW that originates from improper input validation of HeapObjMapImpl.cpp, resulting in an out-of-bounds read that could disclose information ...

PT-2024-9900 · Adobe · Experience Manager

Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.21 and earlier Description: The issue is related to an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability t...

Adobe Animate 23.x < 23.0.9 / 24.x < 24.0.6 Multiple Vulnerabilities (APSB24-96)

The version of Adobe Animate installed on the remote Windows host is prior to 23.0.9 or 24.0.6. It is, therefore, affected by multiple vulnerabilities as referenced in the apsb24-96 advisory. - Animate versions 23.0.8, 24.0.5 and earlier are affected by an Integer Underflow Wrap or Wraparound...

CVE-2024-12355

A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached...

CVE-2024-12353

A vulnerability, which was classified as problematic, has been found in SourceCodester Phone Contact Manager System 1.0. This issue affects the function UserInterface::MenuDisplayStart of the component User Menu. The manipulation of the argument name leads to improper input validation. Attacking...

CVE-2024-12355 SourceCodester Phone Contact Manager System ContactBook.cpp adding input validation

A vulnerability has been found in SourceCodester Phone Contact Manager System 1.0 and classified as problematic. Affected by this vulnerability is the function ContactBook::adding of the file ContactBook.cpp. The manipulation leads to improper input validation. The attack needs to be approached...

SourceCodester Phone Contact Manager System 安全漏洞

SourceCodester Phone Contact Manager System is an open source phone contact management system from SourceCodester. A security vulnerability exists in version 1.0 of the SourceCodester Phone Contact Manager System, which stems from an incorrect input validation issue contained in the...

ROS-20241209-02

A vulnerability in some IntelR TDX modules is related to improper input validation. Exploitation of the vulnerability could allow a privileged attacker to potentially escalate privileges through local access. Vulnerability related to processor instruction sequencing causes unexpected behavior on...

CVE-2024-48839

Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

CVE-2024-48839 Remote Code Execution, RCE

Improper Input Validation vulnerability allows Remote Code Execution. Affected products: ABB ASPECT - Enterprise v3.08.02; NEXUS Series v3.08.02; MATRIX Series v3.08.02...

CVE-2024-48839

Summary (CVE-2024-48839) : The ABB Cylon Aspect family (ASPECT-Enterprise v3.08.02, NEXUS v3.08.02, MATRIX v3.08.02) contains an improper input validation flaw that enables Remote Code Execution. Exploitation details in connected sources show authenticated command injection via endpoints like bbm...

Security Bulletin: IBM Sterling Secure Proxy is vulnerable to improper input validation

Summary IBM Sterling Secure Proxy is affected by an improper input validation vulnerability that is exploitable by authenticated, privileged users. Vulnerability Details CVEID:CVE-2024-41783 DESCRIPTION: IBM Sterling Secure Proxy could allow a privileged user to inject commands into the underlyin...

CVE-2018-9398

In fmsetstat of mediatek FM radio driver, there is a possible OOB write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2024-7488

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks. This issue affects Online Ordering System: 8.2.1. NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1...

CVE-2024-7488 Business Logic Error in RestApp Inc.'s Online Ordering System

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks. This issue affects Online Ordering System: 8.2.1. NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1...

CVE-2024-7488 Business Logic Error in RestApp Inc.'s Online Ordering System

Integer Overflow or Wraparound, Improper Validation of Specified Quantity in Input vulnerability in RestApp Inc. Online Ordering System allows Integer Attacks. This issue affects Online Ordering System: 8.2.1. NOTE: Vulnerability fixed in version 8.2.2 and does not exist before 8.2.1...