Microsoft ASP.NET Core 输入验证错误漏洞

Microsoft ASP.NET Core is a framework of cross-platform open source framework from Microsoft. The framework is used to build cloud-based applications such as Web applications, Internet of Things applications, and mobile backends. An input validation error vulnerability exists in Microsoft ASP.NET...

SAP 3D Visual Enterprise Viewer 输入验证错误漏洞

SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. SAP 3D Visual Enterprise Viewer 9 suffers from an input validation error vulnerability that can be exploited by an attacker to cause the application to crash with the help of a specially crafted TIF file...

Datasette 跨站脚本漏洞

Datasette is an open source multifunctional tool used by applications to explore and publish data. A cross-site scripting vulnerability exists in Datasette 0.57 and 0.56.1 that ? trace=1 input validation error. No detailed vulnerability details are provided at this time...

多款Qualcomm产品输入验证错误漏洞

A Qualcomm chip is a chip from Qualcomm Incorporated USA. A way to miniaturize circuits including primarily semiconductor devices, but also passive components, etc., and from time to time fabricated on the surface of semiconductor wafers. An input validation error vulnerability exists in Qualcomm...

Linux Nettle 输入验证错误漏洞

Linux Nettle is an American open source application for Linux. Contains a design that lends itself easily to a low-level cryptographic library in many cases. An input validation error vulnerability exists in Linux Nettle, which stems from the way the RSA decryption function improperly handles...

Google Android输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google Inc. in the United States. Google Android suffers from an input validation error vulnerability that stems from the program's lack of checking the length of user-supplied data. qcm4290, qcs2290, qcs405, qcs410, qcs4290, qcs61...

Accusoft ImageGear Input Validation Error Vulnerability (CNVD-2021-41085)

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. oft ImageGear 19.9 suffers from an input validation error vulnerability that stems from a specially crafted malformed file that could result in a stack-based buffer overflow. No detailed vulnerability...

CHIYU 多款设备输入验证错误漏洞

The Chiyu CHIYU BF-430, etc. are all networking servers that provide communication for access control, time and attendance systems, and other devices from Chiyu Technology Chiyu of Taiwan, China. The security vulnerability in CHIYU Technology's BF-630, BF-450M, BF-430, BF-431, BF631-W, BF830-W,...

SuiteCRM Log File Remote Code Execution Exploit

This Metasploit module exploits an input validation error on the log file extension parameter. It does not properly validate upper/lower case characters. Once this occurs, the application log file will be treated as a php file. The log file can then be populated with php code by changing the...

SuiteCRM Log File Remote Code Execution

This module exploits an input validation error on the log file extension parameter. It does not properly validate upper/lower case characters. Once this occurs, the application log file will be treated as a php file. The log file can then be populated with php code by changing the username of a...

Accusoft ImageGear 输入验证错误漏洞

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. ImageGear 19.9 suffers from a buffer overflow vulnerability that stems from the fact that an attacker can exploit the vulnerability by being able to supply a malicious file to trigger the vulnerability. ...

Accusoft ImageGear 输入验证错误漏洞

Accusoft ImageGear is a software development kit SDK for image processing from Accusoft, USA. oft ImageGear 19.9 suffers from an input validation error vulnerability that stems from a specially crafted malformed file that could result in a stack-based buffer overflow. No detailed vulnerability...

Arch Linux输入验证错误漏洞

Arch Linux is an application system from Arch Open Source. A lightweight and flexible Linux® distribution that tries to keep it simple. Arch Linux suffers from an input validation error vulnerability that can be exploited by an attacker to pass specially designed data to an application, trigger a...

RabbitMQ输入验证错误漏洞

Pivotal Software RabbitMQ is a suite of open source message broker software that implements the Advanced Message Queuing Protocol AMQP from Pivotal Software, USA. RabbitMQ suffers from an input validation error vulnerability that stems from insufficient validation of user-supplied input. A remote...

Apple macOS Big Sur Input Validation Error Vulnerability

Apple macOS Big Sur is a mobile application app from Apple USA. The macOS Big Sur vulnerability is an input validation error vulnerability that arises from a failure to adequately validate user-supplied input within the TCC subsystem, which could allow a malicious application to bypass privacy...

FreeBSD 输入验证错误漏洞

FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. FreeBSD suffers from an Input Validation Error vulnerability that stems from insufficient message validation in libradius, which allows a remote Radius client to pass specially crafted input to the system and perform a...

Flask-Security 输入验证错误漏洞

Flask-Security is a software application. Quickly add security features to Flask applications. Flask-Security suffers from an input validation error vulnerability that stems from mishandling user-supplied data, which could allow a remote attacker to redirect a victim to an arbitrary URL...

3S-Smart Software Solutions CODESYS Runtime System Input Validation Error Vulnerability

3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device into an IEC 61131-3 controller. An input validation error vulnerability exists in 3S-Smart Software Solutions...

UPX 输入验证错误漏洞

UPX is an open source executable file packaging program that supports a variety of file formats from different operating systems. An assertion abort vulnerability exists in MemBuffer::alloc in mem.cpp in UPX version 4.0.0. An attacker can exploit this vulnerability via a specially crafted file to...

Google Chrome Input Validation Error Vulnerability (CNVD-2021-41128)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An input validation error vulnerability exists in Google Chrome versions prior to 91.0.4472.77, which can be exploited by remote attackers to perform domain spoofin...