6638 matches found
Input validation
CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to potentially enumerate users...
CVE-2022-33755
CA Automic Automation 12.2 and 12.3 contain an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to potentially enumerate users...
CVE-2022-33755
CA Automic Automation versions 12.2–12.3 are affected by an insecure input handling vulnerability in the Automic Agent that could allow a remote attacker to enumerate users. The PT-2022-21866 entry notes the issue stems from input handling in the Automic Agent and provides a workaround: restrict ...
DEBIAN-CVE-2022-32546
A vulnerability was found in ImageMagick, causing an outside the range of representable values of type 'unsigned long' at coders/pcl.c, when crafted or untrusted input is processed. This leads to a negative impact to application availability or other problems related to undefined behavior...
PT-2022-21866 · Ca · Ca Automic Automation
Name of the Vulnerable Software and Affected Versions: CA Automic Automation versions 12.2 through 12.3 Description: The issue is related to insecure input handling in the Automic Agent, which could allow a remote attacker to potentially enumerate users. Recommendations: For CA Automic Automation...
Johnson Controls Metasys ADS/ADX/OAS Servers 跨站脚本漏洞
Johnson Controls Metasys ADS/ADX/OAS Servers is an application and data server from Johnson Controls, Inc. A cross-site scripting vulnerability exists in Johnson Controls Metasys ADS/ADX/OAS Servers versions 10 and 11, which arises from improper neutralization of input during web page generation...
Cisco Catalyst 跨站脚本漏洞
Cisco Catalyst is a series of switches from Cisco, Inc. A cross-site scripting vulnerability exists in the Cisco Catalyst 2940 Series, which stems from a failure to properly process user input and generate an error page that could be exploited by an attacker to execute arbitrary scripts on the we...
WordPress plugin Keep Backup Daily 跨站脚本漏洞
WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin Keep Backup Daily version 2.0.2 and prior versions, which stems from insufficient...
nodejs: Prototype pollution via console.table properties
Due to the formatting logic of the "console.table" function it was not safe to allow user controlled input to be passed to the "properties" parameter while simultaneously passing a plain object with at least one property as the first parameter, which could be "proto". The prototype pollution has...
Zoo-Management-System Cross-Site Scripting Vulnerability
Zoo Management System 1.0 is a cross-site scripting vulnerability in Zoo Management System. The source of the vulnerability, admin/manage-ticket.php, has a problem with input value handling, which can be exploited to inject arbitrary html and script code into the website...
CVE-2022-22673
This issue was addressed with improved checks. This issue is fixed in iOS 15.5 and iPadOS 15.5. Processing a large input may lead to a denial of service...
USN-5449-1 libxv vulnerability
It was discovered that libXv incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code...
Zoo Management System 安全漏洞
Zoo Management System 1.0 is a cross-site scripting vulnerability in Zoo Management System. The source of the vulnerability, admin/manage-ticket.php, has a problem with input value handling, which can be exploited to inject arbitrary html and script code into the website...
GHSA-HG6G-JJ7G-X6V2 Improper Neutralization of Input During Web Page Generation in Jenkins
In Jenkins 2.196 and earlier, LTS 2.176.3 and earlier, the f:expandableTextBox form control interpreted its content as HTML when expanded, resulting in a stored XSS vulnerability exploitable by users with permission to define its contents typically Job/Configure...
GHSA-M44R-GV6Q-9J9R papercrop does not properly handle crop input
The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input...
GHSA-Q5RG-WG7H-73M5 LibreNMS Information Disclosure
An issue was discovered in LibreNMS through 1.47. The scripts that handle graphing options html/includes/graphs/common.inc.php and html/includes/graphs/graphs.inc.php do not sufficiently validate or encode several fields of user supplied input. Some parameters are filtered with...
papercrop does not properly handle crop input
The papercrop gem before 0.3.0 for Ruby on Rails does not properly handle crop input...
USN-5437-1 libxfixes vulnerability
Tobias Stoeckmann discovered that libXfixes incorrectly handled certain inputs. An attacker could possibly use this issue to cause a denial of service, or possibly execute arbitrary code...
CVE-2020-36149
Incorrect handling of input data in changeAttribute function in the libmysofa library 0.5 - 1.1 will lead to NULL pointer dereference and segmentation fault error in case of restrictive memory protection or near NULL pointer overwrite in case of no memory restrictions e.g. in embedded environment...