TRtek Distant Education Platform SQL注入漏洞

TRtek Distant Education Platform is an application from TRtek, Inc. A SQL injection vulnerability exists in TRtek Distant Education Platform versions prior to 3.2024.11, which stems from improper input validation and allows for SQL injection and parameter injection...

RHEL 9 : net-snmp (RHSA-2024:7875)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:7875 advisory. The net-snmp packages provide various libraries and tools for the Simple Network Management Protocol SNMP, including an SNMP library, an...

CentOS 7 : kernel (RHSA-2020:4276)

The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2020:4276 advisory. - Improper input validation in BlueZ may allow an unauthenticated user to potentially enable escalation of privilege via adjacent access. CVE-2020-1235...

PT-2024-28497 · Unknown · Linkturbonative

Name of the Vulnerable Software and Affected Versions: linkturbonative affected versions not specified Description: The linkturbonative service has a command injection issue due to improper input validation, which could lead to local escalation of privilege with System execution privileges needed...

SUSE SLES15 / openSUSE 15 Security Update : buildah (SUSE-SU-2024:3545-1)

The remote SUSE Linux SLES15 / SLESSAP15 / openSUSE 15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:3545-1 advisory. - CVE-2024-9407: Fixed Improper Input Validation in bind-propagation Option of Dockerfile RUN --mount Instruction...

CVE-2024-8518

CWE-20: Improper Input Validation vulnerability exists that could cause a crash of the Zelio Soft 2 application when a specially crafted project file is loaded by an application user...

CVE-2024-8518

CVE-2024-8518 affects Schneider Electric Zelio Soft/Ze io Soft 2. An Improper Input Validation vulnerability could cause the Zelio Soft 2 application to crash when loading a specially crafted project file. According to ICS data, affected versions are prior to 5.4.2.2. Remediation: update to versi...

CVE-2024-34672

Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users...

CVE-2024-34672

Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users...

Path Traversal

agnai is vulnerable to Path Traversal. The vulnerability is due to improper input validation in JSON file handling, allowing attackers to read arbitrary JSON files at attacker-chosen locations on the server. This can lead to unauthorized access to sensitive information exposure...

CVE-2024-34672

SamsungVideoPlayer is affected by improper input validation prior to versions 7.3.29.1 (Android 12), 7.3.36.1 (Android 13), and 7.3.41.230 (Android 14). This flaw allows local attackers to access video files of other users. The Red Hat and other sources reflect the same description. Practical imp...

CVE-2024-34672

Improper input validation in SamsungVideoPlayer prior to versions 7.3.29.1 in Android 12, 7.3.36.1 in Android 13, and 7.3.41.230 in Android 14 allows local attackers to access video file of other users...

CVE-2024-43697 Liteos_a has an Improper Input Validation vulnerability

in OpenHarmony v4.1.0 and prior versions allow a local attacker cause DOS through improper input...

CVE-2024-43697

CVE-2024-43697 affects OpenHarmony v4.1.0 and earlier. The issue is an improper input handling vulnerability that can allow a local attacker to cause a Denial of Service, impacting availability. The CVSS narrative from the sources shows local access, low attack complexity, and that no user intera...

SAMSUNG Video Player 安全漏洞

SAMSUNG Video Player is a built-in system video player application optimized for the Samsung Galaxy series from Samsung South Korea. A security vulnerability exists in SAMSUNG Video Player that originates from improper validation of user input. An attacker could exploit the vulnerability to acces...

Security Bulletin: Multiple vulnerabilities in microsoft.netcore.app affect IBM Robotic Process Automation.

Summary Multiple vulnerabilities in IBM microsoft.netcore.app affect IBM Robotic Process Automation. The vulnerabilities exist in BrotliSharpLib which was determined to not be required by IBM Robotic Process Automation. The offending module was removed from the product. Vulnerability Details...

Qualcomm Chipsets 安全漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. A security vulnerability exists in Qualcomm Chipsets that stems from the inclusion of an improper input validation issue in Camera...

Improper Input Validation

github.com/containers/buildah and github.com/containers/podman/v5 are vulnerable to Improper Input Validation. The vulnerability due to improper input validation in the bind-propagation option of the Dockerfile RUN --mount instruction, an attacker with build privileges on the system can exploit...

BandiView_PoC

BandiView Vulnerability Report Vulnerability 1 Vulnerab...

Improper Input Validation

Overview uma-sdk is a Python SDK for UMA universal money address Affected versions of this package are vulnerable to Improper Input Validation via the lnurlp request parsing function due to improper validation of the receiver address component of the URL. This could lead to unexpected behavior or...