IBM Spectrum Scale Input Validation Error Vulnerability (CNVD-2020-30674)

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

DPDK Input Validation Error Vulnerability

DPDK is a data plane development kit for Linux-based platforms. It supports the execution of packet processing on multiple CPU architectures. An input validation error vulnerability exists in DPDK version 17.05 and later. The vulnerability originates from a network system or product that does not...

FreeRDP Input Validation Error Vulnerability (CNVD-2020-28988)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from an input validation error vulnerability that stems from a network system or product not properly validating incoming data, which can be exploited by an attacker to cause an...

VanDyke Software SecureCRT Input Validation Error Vulnerability

VanDyke Software SecureCRT is a suite of SSH, Telnet client and virtual terminal software from VanDyke Software, USA. An input validation error vulnerability exists in VanDyke Software SecureCRT versions prior to 8.7.2, which can be exploited by remote attackers to execute arbitrary code...

Cellebrite UFED Input Validation Error Vulnerability

Cellebrite UFED is a universal forensic product from Cellebrite Israel. The product is mainly used for data extraction, transmission and analysis of devices. An input validation error vulnerability exists in Cellebrite UFED versions 5.0 through 7.5.0.845, which can be exploited by an attacker to...

Bitdefender Engines Input Validation Error Vulnerability

Bitdefender Engines is an antivirus engine from the Romanian company Bitdefender. An input validation error vulnerability exists in the cevakrnl.rv0 module in Bitdefender Engines versions prior to 7.84063, which can be exploited by an attacker to cause a denial of service...

FreeRDP Input Validation Error Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP is vulnerable to an input validation error. The vulnerability stems from a network system or product that does not properly validate incoming data. An attacker can exploit the vulnerability ...

Apache Camel Input Validation Error Vulnerability

Apache Camel is the United States Apache Apache Software Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern, referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , an...

Cellebrite Restricted Desktop Escape and Escalation of User Privilege

Vulnerability Details Affected Vendor: Cellebrite Affected Product: UFED Affected Version: 5.0 - 7.5.0.845 Platform: Embedded Windows CWE Classification: CWE-269: Improper Privilege Management, CWE-20: Input Validation Error CVE ID: CVE-2020-12798 2. Vulnerability Description Cellebrite UFED...

Palo Alto Networks PAN-OS Input Validation Error Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An input validation error vulnerability exists in the configuration daemon in Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability with a specially crafted request to...

FreeBSD Input Validation Error Vulnerability

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. An input validation error vulnerability exists in FreeBSD, which arises from a program's failure to adequately validate the length of a packet, and can be exploited by a remote attacker to execute arbitrary code by sendi...

Microsoft ASP.NET Core Input Validation Error Vulnerability

Microsoft Visual Studio and Microsoft ASP.NET Core are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft ASP.NET...

Palo Alto Networks PAN-OS Input Validation Error Vulnerability (CNVD-2020-31585)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An input validation error vulnerability exists in the GlobalProtect component of Palo Alto Networks PAN-OS. The vulnerability originates from a network system or product that does not...

Cellebrite UFED 7.5.0.845 Desktop Escape / Privilege Escalation Vulnerability

Cellebrite UFED device implements local operating system policies that can be circumvented to obtain a command prompt. From there privilege escalation is possible using public exploits. Versions 5.0 through 7.5.0.845 are affected. Title: Cellebrite Restricted Desktop Escape and Escalation of User...

SAP Business Objects Business Intelligence Platform Input Validation Error Vulnerability

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. An input validation error vulnerability exists in SAP Business Object...

Red Hat Keycloak Input Validation Error Vulnerability (CNVD-2020-41186)

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An input validation error vulnerability exists in ObjectInputStream in Red Hat Keycloak versions prior to 11.0.0, which stems from the program...

SAP Adaptive Server Enterprise Input Validation Error Vulnerability

SAP Adaptive Server Enterprise is a relational database server from SAP. An input validation error vulnerability exists in SAP Adaptive Server Enterprise, which arises when the program does not perform the required validation checks on an authenticated user. An attacker could exploit this...

Zephyr Input Validation Error Vulnerability

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. Zephyr suffers from an input validation error vulnerability. An attacker could use this vulnerability to bypass security checks performed by the system call handler, potentially causing a denial of...

Zephyr Input Validation Error Vulnerability (CNVD-2020-35003)

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. An input validation error vulnerability exists in the Kscan subsystem in Zephyr 2.1.0 and later fixed in version 2.2.0, which stems from the program failing to perform sufficient parameter validation...

Zephyr Input Validation Error Vulnerability (CNVD-2020-29631)

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. Zephyr suffers from an input validation error vulnerability that stems from the program not performing parameter validation when making multiple system calls. No details of the vulnerability are...