Cisco Industrial Network Director REST API DoS

The vulnerability of the REST API interface implementation of the Cisco Industrial Network Director software is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause service failures...

CVE-2020-24341

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in picotcp.c does not validate the length of incoming TCP packets, which leads to an out-of-bounds read when assembling received packets into a data segment, eventually causing Denial-of-Servic...

CVE-2020-24341

An issue was discovered in picoTCP and picoTCP-NG through 1.7.0. The TCP input data processing function in picotcp.c does not validate the length of incoming TCP packets, which leads to an out-of-bounds read when assembling received packets into a data segment, eventually causing Denial-of-Servic...

PDF Viewer Input Validation Code Execution

The vulnerabilities of PDF viewer programs such as Adobe Reader and Document Cloud, as well as PDF editing programs like Adobe Acrobat Document Cloud and Adobe Acrobat, are related to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to execute...

CVE-2020-25675

In the CropImage and CropImageToTiles routines of MagickCore/transform.c, rounding calculations performed on unconstrained pixel offsets was causing undefined behavior in the form of integer overflow and out-of-range values as reported by UndefinedBehaviorSanitizer. Such issues could cause a...

Server Board S2600ST Family Privilege Escalation

The vulnerability of the microprogramming software in the Server Board S2600ST Family and S2600WF Family exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Intel SGX DCAP DoS

The vulnerability of Intel SGX DCAP microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

Intel Wireless Bluetooth Driver DoS

The vulnerability of the Intel Wireless Bluetooth driver exists due to insufficient testing of input data. Exploiting this vulnerability can allow a remote attacker to cause service failures...

Intel microprocessor Privilege Escalation

The vulnerability of Intel processor microprogramming software exists due to insufficient testing of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

Cisco IOS XE COPS

The vulnerability of the Common Open Policy Service COPS service in the Cisco IOS XE operating system, when exposed by Cisco cBR-8 broadband routers, is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to cause malfunctions in the device...

Cisco IOS XE ’s

The vulnerability of the Web management infrastructure of the Cisco IOS XE operating system is related to errors in processing input data. Exploiting this vulnerability can allow a malicious actor to gain access to protected information or cause service failures...

Moxa EDR-810 Emergency Shutdown

The vulnerability of the varNetworkSettingDhcpSvrRoute function in the Moxa EDR-810 industrial router’s microprogramming system is related to the lack of input data verification when accessing by using the OID identifier index. Exploiting this vulnerability can allow a malicious actor to trigger ...

Intel Thunderbolt Controller Input Validation Unauthorized Access

The vulnerability of Intel Thunderbolt controller interfaces is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information...

Input Data Protection

The vulnerability of microprogrammed software in server boards, server systems, and Intel computing modules is related to the lack of measures for cleaning incoming data. Exploiting this vulnerability can allow a remote attacker to increase their privileges...

PT-2020-4725

Name of the Vulnerable Software and Affected Versions: VMware Horizon Server versions prior to 7.10.3 or 7.13.0 Description: The issue is related to a lack of input data sanitization, which may allow an attacker to inject malicious scripts. Successful exploitation of this issue may enable an...

PT-2020-4595

Name of the Vulnerable Software and Affected Versions Marketo Sales Insight plugin version 1.4355 and earlier Description The issue is related to a blind stored Cross-Site Scripting XSS vulnerability. This could allow an attacker to inject malicious scripts into vulnerable form fields. When a...

CVE-2020-27174

In Amazon AWS Firecracker before 0.21.3, and 0.22.x before 0.22.1, the serial console buffer can grow its memory usage without limit when data is sent to the standard input. This can result in a memory leak on the microVM emulation thread, possibly occupying more memory than intended on the host...

CVE-2020-27173

In vm-superio before 0.1.1, the serial console FIFO can grow to unlimited memory usage when data is sent to the input source i.e., standard input. This behavior cannot be reproduced from the guest side. When no rate limiting is in place, the host can be subject to memory pressure, impacting all...

Cisco IOS XE DoS

The vulnerability of the Cisco IOS XE network devices in the Cisco Catalyst 9000 series operating system is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service interruptions...

ASP.NET Core Cookie Analyzer Bypass

The vulnerability of the ASP.NET Core software platform’s cookie analyzer is related to errors in processing input data. Exploiting this vulnerability allows a remote attacker to bypass security measures...