Input validation

A flaw exists in Trading Technologies Messaging 7.1.28.3 ttmd.exe due to improper validation of user-supplied data when processing a type 8 message sent to default TCP RequestPort 10200. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to terminate...

PT-2020-18206

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect Operations Center versions 7.1.0.000 through 7.1.10 IBM Spectrum Protect Operations Center versions 8.1.0.000 through 8.1.9 Description The issue is caused by improper validation of data prior to export, which may allow an...

Security Bulletin: Denial of Service vulnerability in IBM Spectrum Protect Server (CVE-2020-4559)

Summary The IBM Spectrum Protect Server is vulnerable to a denial of service due to improper validation of user-supplied input. Vulnerability Details CVEID: CVE-2020-4559 DESCRIPTION: IBM Spectrum Protect Server could allow an attacker to cause a denial of service due to improper validation of...

Chrony Denial of Service Vulnerability (CNVD-2020-50554)

Chrony is a general-purpose implementation of the Network Time Protocol NTP that synchronizes the system clock with an NTP server. A denial of service exists in the Chrony product. The vulnerability stems from a network system or product that does not properly validate incoming data, and could be...

CVE-2020-4559

IBM Spectrum Protect 7.1 and 8.1 could allow an attacker to cause a denial of service due ti improper validation of user-supplied input. IBM X-Force ID: 183613...

PT-2020-18131

Name of the Vulnerable Software and Affected Versions IBM Spectrum Protect versions 7.1 through 8.1 Description The issue is due to improper validation of user-supplied input, which could allow an attacker to cause a denial of service. Recommendations For IBM Spectrum Protect versions 7.1 through...

Input validation

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attack...

CVE-2020-3440 Cisco Webex Meetings Desktop App for Windows Arbitrary File Overwrite Vulnerability

A vulnerability in Cisco Webex Meetings Desktop App for Windows could allow an unauthenticated, remote attacker to overwrite arbitrary files on an end-user system. The vulnerability is due to improper validation of URL parameters that are sent from a website to the affected application. An attack...

CVE-2020-17401: Improper Validation of Array Index

This vulnerability allows local attackers to disclose sensitive informations on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

CVE-2020-17398: Improper Validation of Array Index

This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the...

CVE-2020-17394: Improper Validation of Array Index

This vulnerability allows local attackers to disclose sensitive information on affected installations of Parallels Desktop 15.1.4. An attacker must first obtain the ability to execute high-privileged code on the target guest system in order to exploit this vulnerability. The specific flaw exists...

vBulletin Cross-Site Scripting Vulnerability

vBulletin is the United States InternetBrands and vBulletinSolutions, Inc. of a PHP and MySQL-based open source Web forum program . A cross-site scripting vulnerability exists in vBulletin version 5.x. The vulnerability stems from the lack of proper validation of client-side data by the WEB...

CVE-2020-15694

In Nim 1.2.4, the standard library httpClient fails to properly validate the server response. For example, httpClient.get.contentLength does not raise any error if a malicious server provides a negative Content-Length...

Authentication flaw

IBM Event Streams 10.0.0 could allow an authenticated user to perform tasks to a schema due to improper authentication validation. IBM X-Force ID: 186233...

PT-2020-14589

Name of the Vulnerable Software and Affected Versions Nim version 1.2.4 Description The standard library httpClient in Nim fails to properly validate the server response. For instance, httpClient.get.contentLength does not raise an error if a malicious server provides a negative Content-Length...

Siemens Automation License Manager 5.x < 6.0.8 Privilege Escalation (SSA-388646)

Binary data scadasiemensalmssa388646.nbin...

Siemens Automation License Manager Local Elevation of Privilege Vulnerability

Siemens Automation License Manager is a Siemens system for processing remote and local licenses for HMI, SCADA and industrial products. Siemens Automation License Manager local elevation of privilege vulnerability. The vulnerability is due to the application failing to properly validate a user's...

Foxit Studio Photo < 3.6.6.925 Out-of-Bounds Read Vulnerability

According to its self-reported version, the Foxit Studio Photo application installed on the remote Windows host is affected by an out-of-bounds read error in the use of PNG files to improper validation of user-supplied data. An unauthenticated, remote attacker can exploit this, to disclose...

Improper Validation

slpjs does not properly validate transactions. The vulnerability exists as a valid NFT1 child token could be created without burning any of the NFT1 Group token type, as required by the NFT1 specification...

Sql injection

A vulnerability in the web-based management interface of Cisco Data Center Network Manager DCNM could allow an authenticated, remote attacker to conduct SQL injection attacks on an affected system. The vulnerability is due to improper validation of user-submitted parameters. An attacker could...