Windows IKE DoS

The vulnerability of the Internet Key Exchange IKE protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

Windows Media Foundation Code Execution

The vulnerability of the Windows Media Foundation component in Windows operating systems exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Microsoft Excel Office 365 Code Execution

The vulnerability of Microsoft Excel, Office, and Office 365 packages is related to insufficient validation of input data. Exploiting this vulnerability allows attackers to execute arbitrary code using a specially created file...

DNS Server Windows DoS

The vulnerability of the DNS Server component for Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability can allow a remote attacker to execute a DoS attack...

ArubaOS Command Line Arbitrary Command Execution

The vulnerability of the command-line interface of ArubaOS systems is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary commands...

Denial Of Service (DoS)

kernel is vulnerable to Denial of Service DoS attacks. An out-of-bounds memory access triggers in the I2CSMBUSBLOCKDATA with malicious input data. This flaw allows a local user to crash the system...

Adobe Photoshop Code Execution

The vulnerability of the Adobe Photoshop graphic editor is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

PowerScale OneFS Command Execution Sensitive Information DoS

The vulnerability of the PowerScale OneFS operating system is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows an attacker to execute arbitrary commands, expose protected information, or cause service failures...

Dell BIOS Code Execution

The vulnerability of BIOS microprogramming software in Dell laptops is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

Dell BIOS Code Execution

The vulnerability of BIOS microprogramming software in Dell laptops is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker to execute arbitrary code...

SolarView Compact Arbitrary Command Execution

The vulnerability of the microprogramming software of the SolarView Compact device, which is used for measuring solar energy, data display, and storage, stems from the lack of measures to clean incoming data. Exploiting this vulnerability could allow a remote attacker to execute arbitrary command...

PT-2023-1674

Name of the Vulnerable Software and Affected Versions ArubaOS affected versions not specified Description The issue is related to authenticated command injection vulnerabilities in the command line interface of ArubaOS. These vulnerabilities can be exploited to execute arbitrary commands as a...

Hirschmann EAGLE Web Server Privilege Escalation

The vulnerability of the Hirschmann EAGLE industrial Ethernet switches involves errors in the processing of input data. Exploiting this vulnerability can allow a remote attacker to gain increased privileges...

System Management Unit DoS

The vulnerability of the System Management Unit SMU component of AMD processors exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

K32171392: Apache Log4j2 vulnerability CVE-2021-45046

Security Advisory Description It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map MDC input data when the logging configuration uses a non-default Pattern...

Dell BIOS Code Execution

The vulnerability of the BIOS software on Dell laptops and workstations exists due to insufficient testing of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

Apache Sling JNDI Injection Vulnerability

Apache Sling is the United States Apache Apache Foundation of a Java platform for open source Web framework. Designed to meet the JSR-170 content repository such as Apache Jackrabbit to create content-centric applications. Apache Sling JCR Base versions prior to 3.1.12 JNDI injection vulnerabilit...

3D-printing Object Input Verification Code Execution

The vulnerability of the design and preparation tools for 3D printing is related to insufficient verification of input data. Exploiting this vulnerability allows an attacker to execute arbitrary code using a specially created file...

SUSE CVE-2014-6429

The SnifferDecompress function in wiretap/ngsniffer.c in the DOS Sniffer file parser in Wireshark 1.10.x before 1.10.10 and 1.12.x before 1.12.1 does not properly handle empty input data, which allows remote attackers to cause a denial of service application crash via a crafted file...

Sonatype Nexus Repository Manager Code Execution

The vulnerability of Sonatype Nexus Repository Manager is related to the lack of measures for cleaning input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...