CVE-2022-25890

All versions of the package wifey are vulnerable to Command Injection via the connect function due to improper input sanitization...

CVE-2022-25890

All versions of the package wifey are vulnerable to Command Injection via the connect function due to improper input sanitization...

CVE-2022-33300 Improper input validation in Automotive Android OS

Memory corruption in Automotive Android OS due to improper input validation...

CVE-2022-33300

CVE-2022-33300 affects Automotive Android OS with memory corruption caused by improper input validation. Evidence from connected docs identifies the affected software as Automotive Android OS and notes the root cause as input validation errors leading to memory corruption. Reported impact scores ...

CVE-2022-33218 Improper Input Validation in Automotive

Memory corruption in Automotive due to improper input validation...

CVE-2022-33218 Improper Input Validation in Automotive

Memory corruption in Automotive due to improper input validation...

EulerOS 2.0 SP9 : linux-firmware (EulerOS-SA-2023-1131)

According to the versions of the linux-firmware package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel versi...

EulerOS 2.0 SP9 : linux-firmware (EulerOS-SA-2023-1107)

According to the versions of the linux-firmware package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - Integer overflow in the firmware for some IntelR Graphics Drivers for Windows before version 26.20.100.7212 and before Linux kernel versi...

Security Bulletin: A vulnerability in kafka affects IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2022-34917)

Summary There is a vulnerability in kafka that is used by the IBM Maximo Manage application in IBM Maximo Application Suite. Vulnerability Details CVEID:CVE-2022-34917 DESCRIPTION: Apache Kafka is vulnerable to a denial of service, caused by improper input validation. By sending a specially-craft...

Improper String/Integer Input Validation Leads to the Crashing of Site

Description If you give the string input in the Start/End time field, then the application will stop working. Proof of Concept 1. Go to "Settings-General-Reconnection" 2. Change activated to "on" 3. On every input fields place any string for example put: "test" 4. Click on save and refresh 5. The...

Command injection

Versions of the package window-control before 1.4.5 are vulnerable to Command Injection via the sendKeys function, due to improper input sanitization...

GHSA-3XH5-8HVQ-RC8X Apache DolphinScheduler vulnerable to Improper Input Validation

Apache DolphinScheduler improperly validates script alert plugin parameters and is vulnerable to remote command execution. This issue affects Apache DolphinScheduler version 3.0.1 and prior versions; version 3.1.0 and prior versions. Users should upgrade to version 3.0.2 or 3.1.1...

Cross-site Scripting (XSS)

trafficserver is vulnerable to improper input validation. The library does not properly escape the special characters before it output to the front end, allowing an attacker to inject and execute malicious javascript...

window-control 安全漏洞

window-control is a package from Bruno Robert's personal developer. It is designed to perform tasks similar to robot.js without mouse control, but without compiling external C++ code. A security vulnerability exists in window-control versions prior to 1.4.5, which stems from incorrect input and i...

MediaTek 芯片 缓冲区错误漏洞

MediaTek Chipsets are a variety of chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in MediaTek Chipsets that stems from improper input validation in ccu, which could result in out-of-bounds writes, which could lead to local privilege escalation requiring syste...

PT-2023-13116 · Boa · Boa

Name of the Vulnerable Software and Affected Versions: Boa affected versions not specified Description: The issue is related to improper input validation, which could lead to a command injection. This might result in remote escalation of privilege without requiring additional execution privileges...

ASB-A-242846316

In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...

Arbitrary Code Execution

webkitgtk is vulnerable to Arbitrary Code Execution. Processing maliciously crafted web content may lead to arbitrary code execution due to improper input validation which allows an attacker with network access to pass specially crafted web content files, causing an application to halt, crash, or...

Arbitrary Code Execution

webkitgtk is vulnerable to Arbitrary Code Execution. Processing maliciously crafted web content may lead to code execution due to improper input validation, leading to memory corruption which allows an attacker with network access to pass specially crafted web content files, causing an applicatio...

Huawei EulerOS: Security Advisory for libtiff (EulerOS-SA-2022-2909)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...