7717 matches found
Rockwell Automation SIS Workstation and ISaGRAF Workbench
View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : SIS Workstation and ISaGRAF Workbench Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow unprivileged local...
PT-2023-18440 · Intel · Intel Unison
Name of the Vulnerable Software and Affected Versions: Intel Unison affected versions not specified Description: The issue is related to improper input validation, which may allow an unauthenticated user to potentially enable denial of service via network access. Recommendations: At the moment,...
PT-2023-26316 · Intel · Intel Unison
Name of the Vulnerable Software and Affected Versions: Intel Unison software affected versions not specified Description: The issue is related to improper input validation, which may allow an authenticated user to potentially enable denial of service via network access. Recommendations: At the...
Adobe InDesign < 18.5.1 / 18.0 < 19.0.0 Multiple Vulnerabilities (APSB23-55) (macOS)
The version of Adobe InDesign installed on the remote macOS host is prior to 18.5.1, 19.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-55 advisory. - Adobe InDesign versions ID18.5 and earlier and ID17.4.2 and earlier are affected by an out-of-bounds read...
Siemens RUGGEDCOM APE1808 Devices
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
Siemens SCALANCE W700
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
PT-2023-27007 · Ami · Ami Aptiov
Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to improper input validation in the BIOS of AMI AptioV, which can be exploited via the local network. A successful exploit may result in a loss of confidentiality,...
SUSE SLES15 Security Update : tomcat (SUSE-SU-2023:4423-1)
The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:4423-1 advisory. - URL Redirection to Untrusted Site 'Open Redirect' vulnerability in FORM authentication feature Apache Tomcat.This issue affects...
SuiteCRM 安全漏洞
SuiteCRM is a customer relationship management system from the SuiteCRM team. SuiteCRM suffers from a server-side request forgery vulnerability that stems from the product's failure to properly validate user input, which can be exploited by an attacker to probe server intranet resources...
PT-2023-14677 · Intel · Intel Unison
Name of the Vulnerable Software and Affected Versions: Intel Unison affected versions not specified Description: The issue is related to improper input validation, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: At the moment,...
PT-2023-23228 · Intel · Openvino Model Server
Name of the Vulnerable Software and Affected Versions: OpenVINO Model Server versions prior to 2022.3 Description: The issue is related to improper input validation in the OpenVINO Model Server software, which may allow an unauthenticated user to potentially enable denial of service via network...
Adobe InDesign < 18.5.1 / 18.0 < 19.0.0 Multiple Vulnerabilities (APSB23-55)
The version of Adobe InDesign installed on the remote Windows host is prior to 18.5.1, 19.0.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-55 advisory. - Adobe InDesign versions ID18.5 and earlier and ID17.4.2 and earlier are affected by an out-of-bounds rea...
Siemens PNI
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories CERT Services | Services |...
Input validation
Lenovo LeCloud App improper input validation allows attackers to access arbitrary components and arbitrary file downloads, which could result in information disclosure...
CVE-2023-5079
CVE-2023-5079 concerns Lenovo LeCloud App. Multiple connected sources confirm an improper input validation vulnerability that allows attackers to access arbitrary components and download arbitrary files, potentially leading to information disclosure. The NVD entry attributes a CVSS v3.1 base scor...
CVE-2023-6012
CVE-2023-6012 affects Lanaccess ONSAFE MonitorHM Web Console, version 3.7.0. The root cause is an improper input validation on the checkbox element, enabling a remote attacker to perform remote code execution and potentially compromise the entire infrastructure. The exploitation details are not p...
Exploit for Improper Input Validation in Atlassian Confluence_Data_Center
Confluence Vulnerability - CVE-2023-22515 :notebook: Int...
hw: intel: Improper input validation in some Intel(R) PROSet/Wireless WiFi
An improper input validation flaw was found in some IntelR PROSet/Wireless WiFi and KillerTM WiFi software that may allow an unauthenticated user to enable a denial of service via adjacent access...
