CVE-2021-22760

A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing checks of user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

CVE-2021-22760

A CWE-763: Release of invalid pointer or reference vulnerability exists inIGSS Definition Def.exe V15.0.0.21140 and prior that could result in loss of data or remote code execution due to missing checks of user-supplied input data, when a malicious CGF file is imported to IGSS Definition...

The vulnerability of the constantinople application software of Avrora Center lies in the insufficient checking of input data, allowing attackers to execute arbitrary code.

The vulnerability of the constantinople application software of Avrora Center is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to execute arbitrary code...

The vulnerability of the mDNS forwarding function in Cisco Aironet Access Points’ software allows a attacker to induce a service failure.

The vulnerability of the mDNS forwarding function in Cisco Aironet Access Points’ software relates to insufficient checks on incoming mDNS traffic. Exploiting this vulnerability could allow a malicious actor to cause service interruptions using specially crafted mDNS packets...

Buffer Overflows

bsdiff:sid is vulnerable to buffer overflows. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries...

PT-2021-16547 · Samsung · Samsung Internet

Name of the Vulnerable Software and Affected Versions: Samsung Internet versions prior to 13.2.1.46 Description: The issue is related to an improper input check in Samsung Internet, which allows attackers to launch non-exported activity in Samsung Browser via a malicious deeplink. Recommendations...

CVE-2020-36199

TinyCheck before commits 9fd360d and ea53de8 was vulnerable to command injection due to insufficient checks of input parameters in several places...

CVE-2020-36199

CVE-2020-36199 affects TinyCheck prior to commits 9fd360d and ea53de8. The root cause is insufficient validation of input parameters, enabling potential command injection. CVSS metrics indicate high to critical severity (CVSS2: 7.5 HIGH; CVSS3.1: 9.8 CRITICAL). The provided documents do not speci...

The vulnerability of Windows operating system installers allows a hacker to increase their privileges.

The vulnerability of Windows operating system installers exists due to insufficient checks on input data. Exploiting this vulnerability can allow attackers to increase their privileges...

DEBIAN-CVE-2020-14315

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries...

UBUNTU-CVE-2020-14315

A memory corruption vulnerability is present in bspatch as shipped in Colin Percival’s bsdiff tools version 4.3. Insufficient checks when handling external inputs allows an attacker to bypass the sanity checks in place and write out of a dynamically allocated buffer boundaries...

The vulnerability of the ReadDIBImage function in the GraphicsMagick graphics editor arises from insufficient validation of input data, allowing attackers to trigger a service failure.

The vulnerability of the ReadDIBImage function in the GraphicsMagick graphics editor is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to cause service interruptions using a specially created dib file...

CVE-2019-19094

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...

Sql injection

Lack of input checks for SQL queries in ABB eSOMS versions 3.9 to 6.0.3 might allow an attacker SQL injection attacks against the backend database...

CVE-2019-19094

CVE-2019-19094 affects ABB eSOMS versions 3.9 to 6.0.3 and is caused by lack of input validation for SQL queries in the backend, enabling potential SQL injection. The vulnerability has a high CVSS v3.1 base score of 7.6 (network, low attack complexity, privileges required: low; confidentiality im...

The vulnerability in the web interface of the FortiAuthenticator system allows attackers to execute cross-site scripting (XSS) attacks.

The vulnerability of the FortiAuthenticator identification system’s web interface is related to the lack of measures to sanitize input data. Exploiting this vulnerability could allow a malicious actor, operating remotely, to execute cross-site scripting XSS attacks...

FuzeZip Buffer Overflow Vulnerability (CNVD-2020-02441)

FuzeZip is a compression tool from Koyote-Lab. A buffer overflow vulnerability exists in FuzeZip that stems from the program not properly performing boundary value checks on user-supplied input, causing the program to copy data that is larger than the allocated memory buffer space. An attacker...

The vulnerability of the Hyper-V hardware virtualization system in the Windows operating system allows a hacker to compromise and disclose sensitive information.

The vulnerability of the Hyper-V hardware virtualization technology in the Windows operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow attackers to disclose sensitive information through a specially created application...

A vulnerability exists in the implementation of the mremap() system call in the Linux operating system, which allows an attacker to gain access to the physical page.

The vulnerability in the implementation of the mremap system call in the Linux operating system exists due to insufficient checking of input data. Exploiting this vulnerability can allow an attacker to gain access to the physical page...

The vulnerability of the web interface of Cisco Small Business router microprogramming software models 200, 300, and 500 allows a hacker to redirect users to a malicious website.

The vulnerability of the web interface of Cisco Small Business router microprogramming software models 200, 300, and 500 is related to errors in checking input parameters of HTTP requests. Exploiting this vulnerability can allow a malicious actor to redirect users to a malicious website remotely...