Lucene search
+L

7831 matches found

Snyk
Snyk
added 2023/01/26 7:52 p.m.9 views

Improper Input Validation

Overview directxtexdesktop2019 is a DirectXTex texture processing library Affected versions of this package are vulnerable to Improper Input Validation in the ConvertToSinglePlane function in DirectXTexConvert.cpp, when processing an invalid height value from the DDS loader for planar video...

4.4CVSS6.9AI score
SaveExploits0References2
Snyk
Snyk
added 2023/01/26 7:52 p.m.5 views

Improper Input Validation

Overview directxtexuwp is a DirectXTex texture processing library Affected versions of this package are vulnerable to Improper Input Validation in the ConvertToSinglePlane function in DirectXTexConvert.cpp, when processing an invalid height value from the DDS loader for planar video textures such...

4.4CVSS6.9AI score
SaveExploits0References2
Snyk
Snyk
added 2023/01/26 7:52 p.m.6 views

Improper Input Validation

Overview directxtexdesktop2017 is a DirectXTex texture processing library Affected versions of this package are vulnerable to Improper Input Validation in the ConvertToSinglePlane function in DirectXTexConvert.cpp, when processing an invalid height value from the DDS loader for planar video...

4.4CVSS6.9AI score
SaveExploits0References2
CVE
CVE
added 2023/01/26 12:00 a.m.99 views

CVE-2022-45770

CVE-2022-45770 affects AdGuard for Windows (x86) up to version 7.11, via driver adgnetworkwfpdrv.sys. Root cause: improper input validation in the driver, enabling local privilege escalation. Remediation: upgrade to AdGuard Windows 7.11.x patch (e.g., 7.11.40780) or later as per available release...

7.8CVSS7.5AI score0.00611EPSS
SaveExploits0References4Affected Software1
Tenable Nessus
Tenable Nessus
added 2023/01/25 12:00 a.m.30 views

Siemens SCALANCE X-300 Switches Improper Input Validation (CVE-2022-25751)

A vulnerability has been identified in SCALANCE X302-7 EEC 230V, SCALANCE X302-7 EEC 230V, coated, SCALANCE X302-7 EEC 24V, SCALANCE X302-7 EEC 24V, coated, SCALANCE X302-7 EEC 2x 230V, SCALANCE X302-7 EEC 2x 230V, coated, SCALANCE X302-7 EEC 2x 24V, SCALANCE X302-7 EEC 2x 24V, coated, SCALANCE...

7.8CVSS7.2AI score0.01386EPSS
SaveExploits0References3
CVE
CVE
added 2023/01/24 12:03 p.m.66 views

CVE-2023-0284

CVE-2023-0284 affects Checkmk with improper input validation of LDAP user IDs. Affected: Checkmk <= 2.1.0p19, Checkmk

8.1CVSS7.3AI score0.00929EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/01/24 12:00 a.m.45 views

CVE-2022-20493

In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

7.9AI score0.00218EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/23 3:15 p.m.16 views

CVE-2021-43448

ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Improper Input Validation. A lack of input validation can allow an attacker to spoof the names of users who interact with a document, if the document id is known...

5.3CVSS5.2AI score
SaveExploits0References3
Positive Technologies
Positive Technologies
added 2023/01/23 12:00 a.m.17 views

PT-2023-12452 · Unknown · Onlyoffice

Name of the Vulnerable Software and Affected Versions: ONLYOFFICE all versions as of 2021-11-08 Description: The issue is related to Improper Input Validation, which can be exploited if the document id is known, allowing an attacker to spoof user names who interact with a document. Recommendation...

5.3CVSS6.7AI score0.01012EPSS
SaveExploits1References6
Vulnrichment
Vulnrichment
added 2023/01/23 12:00 a.m.8 views

CVE-2021-43448

ONLYOFFICE all versions as of 2021-11-08 is vulnerable to Improper Input Validation. A lack of input validation can allow an attacker to spoof the names of users who interact with a document, if the document id is known...

7AI score0.01012EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
added 2023/01/22 3:30 a.m.33 views

Improper Input Validation in pyload-ng

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...

7.5CVSS7.3AI score0.00823EPSS
SaveExploits1References4Affected Software1
Vulnrichment
Vulnrichment
added 2023/01/22 12:00 a.m.7 views

CVE-2023-0434 Improper Input Validation in pyload/pyload

Improper Input Validation in GitHub repository pyload/pyload prior to 0.5.0b3.dev40...

5.4CVSS7.1AI score0.00823EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
added 2023/01/22 12:00 a.m.11 views

PT-2023-16266

Name of the Vulnerable Software and Affected Versions pyload/pyload versions prior to 0.5.0b3.dev40 Description The issue is related to improper input validation. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where th...

7.5CVSS6.5AI score0.00823EPSS
SaveExploits1References11
CVE
CVE
added 2023/01/22 12:00 a.m.72 views

CVE-2023-0434

CVE-2023-0434 affects the Python-based download manager project pyload/pyload . The issue is described as an improper input validation vulnerability in versions prior to 0.5.0b3.dev40 . Affected component is the core input handling of pyload/pyload, with the underlying root cause being insufficie...

7.5CVSS6.4AI score0.00823EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2023/01/22 12:00 a.m.10 views

pyload 输入验证错误漏洞

pyload is a free and open source download manager written in Python, designed to be extremely lightweight, easily extensible and fully manageable over the web. An input validation error vulnerability exists in pyload versions prior to 0.5.0b3.dev40, which stems from improper input validation...

7.5CVSS6AI score0.00823EPSS
SaveExploits1References3
Prion
Prion
added 2023/01/20 7:15 a.m.26 views

Input validation

A vulnerability in Cisco TelePresence CE and RoomOS Software could allow an authenticated, local attacker to bypass access controls and conduct an SSRF attack through an affected device. This vulnerability is due to improper validation of user-supplied input. An attacker could exploit this...

3.2CVSS4.7AI score0.00161EPSS
SaveExploits0References1Affected Software2
Cvelist
Cvelist
added 2023/01/19 1:35 a.m.46 views

CVE-2023-20020

A vulnerability in the Device Management Servlet application of Cisco BroadWorks Application Delivery Platform and Cisco BroadWorks Xtended Services Platform could allow an unauthenticated, remote attacker to cause a denial of service DoS condition on an affected device. This vulnerability is due...

8.6CVSS8.6AI score0.00861EPSS
SaveExploits0References1
OSV
OSV
added 2023/01/18 7:15 p.m.3 views

CVE-2023-21607

Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

7.8CVSS7.6AI score0.04655EPSS
SaveExploits0References1
NVD
NVD
added 2023/01/18 7:15 p.m.14 views

CVE-2023-21607

Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

7.8CVSS7.7AI score0.04655EPSS
SaveExploits0References1
Prion
Prion
added 2023/01/18 7:15 p.m.24 views

Input validation

Adobe Acrobat Reader versions 22.003.20282 and earlier, 22.003.20281 and earlier and 20.005.30418 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user...

4.4CVSS7.7AI score0.04655EPSS
SaveExploits0References1Affected Software4
Rows per page
Query Builder