CVE-2021-25428

Improper validation check vulnerability in PackageManager prior to SMR July-2021 Release 1 allows untrusted applications to get dangerous level permission without user confirmation in limited circumstances...

F5 Networks BIG-IP : Linux kernel vulnerability (K07020416)

The version of F5 Networks BIG-IP installed on the remote host is prior to 15.1.8 / 16.1.0. It is, therefore, affected by a vulnerability as referenced in the K07020416 advisory. The timercreate syscall implementation in kernel/time/posix-timers.c in the Linux kernel before 4.14.8 doesn't properl...

CVE-2021-22374

There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause stability risks...

CVE-2021-22374

There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause stability risks...

Input validation

There is an Improper Validation of Array Index Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause stability risks...

CVE-2021-22374

CVE-2021-22374 involves an improper validation of an array index in Huawei smartphones. Available documents identify the affected product as Huawei smartphones and describe the root cause as index validation failure, with the practical impact noted as potential stability risks upon successful exp...

Machform HTTP Host Header Injection Vulnerability

MachForm is an HTML form builder that lets you create contact forms, surveys, order forms or any other web form without writing code. An HTTP host header injection vulnerability exists in versions prior to Machform 16. The vulnerability stems from improper validation of the host header. An attack...

Remote code execution

A remote code execution vulnerability exists in helpUSremote administration tool due to improper validation of parameter of ShellExecutionExA function used for login...

CVE-2020-7868 Helpu remote code execution vulnerability

A remote code execution vulnerability exists in helpUSremote administration tool due to improper validation of parameter of ShellExecutionExA function used for login...

Autodesk AutoCAD 缓冲区错误漏洞

Autodesk AutoCAD is a suite of professional 3D drawing software from the US-based Autodesk Corporation. A buffer error vulnerability exists in Autodesk AutoCAD that stems from a lack of proper validation of user-supplied data and can be exploited by an attacker to execute code...

Cisco Jabber for Mac < 14.0.1 DoS (cisco-sa-jabber-GuC5mLwG)

According to its self-reported version, Cisco Jabber for Mac is affected by a Denial of Service vulnerability. This vulnerability is due to improper validation of message content. An attacker could exploit this vulnerability by sending crafted XMPP messages to an affected system. A successful...

CVE-2021-32946

An improper check for unusual or exceptional conditions issue exists within the parsing DGN files from Drawings SDK Version 2022.4 and prior resulting from the lack of proper validation of the user-supplied data. This may result in several of out-of-bounds problems and allow attackers to cause a...

Opentext OpenText Brava! 缓冲区错误漏洞

OpenText Brava! Desktop is a browser-based universal document viewer from OpenText Opentext Canada. The product supports viewing, annotating and editing many types of documents. A security vulnerability exists in OpenText Brava! Desktop that stems from the program's lack of proper validation of...

OpenText Brava! 安全漏洞

OpenText Brava! Desktop is a browser-based universal document viewer from OpenText Opentext Canada. The product supports viewing, annotating and editing many types of documents. A security vulnerability exists in OpenText Brava! Desktop that stems from a lack of proper validation of user-supplied...

CVE-2021-22895

Nextcloud Desktop Client before 3.3.1 is vulnerable to improper certificate validation due to lack of SSL certificate verification when using the "Register with a Provider" flow...

Improper Input Validation

Specific cstrings input may not be properly validated in the MongoDB Go Driver when marshalling Go objects into BSON. A malicious user could use a Go object with specific string to potentially inject additional fields into marshalled documents...

Nagios XI Arbitrary File Upload Vulnerability

Nagios XI is a commercial monitoring solution built on Nagios Core, including dashboards, web-based configuration, advanced reporting and rich data visualization. An arbitrary file upload vulnerability exists in Nagios XI 5.7.5 and earlier versions. The vulnerability stems from improper validatio...

WordPress plugin has unspecified vulnerability (CNVD-2021-44299)

WordPress is the Wordpress Foundation's set of blogging platform developed using the PHP language . The platform supports PHP and MySQL servers to set up a personal blog site.WordPress Plugin is a WordPress open source application plugin . Instant Images - One Click Unsplash Uploads A security...

CVE-2021-22333

There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause code to execute, thus obtaining system permissions...

Input validation

There is an Improper Validation of Array Index vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may cause code to execute, thus obtaining system permissions...