IBM Concert Input Validation Error Vulnerability (CNVD-2025-02547)

IBM Concert is a new tool from International Business Machines IBM Inc. that uses generative AI to help manage complex cloud-native applications. An input validation error vulnerability exists in IBM Concert versions 1.0.0, 1.0.1, 1.0.2, 1.0.2.1, and 1.0.3, which stems from incorrect log...

Microsoft Windows PrintWorkflowUserSvc input validation error vulnerability

Microsoft Windows PrintWorkflowUserSvc is a Windows service from Microsoft Corporation USA that provides support for print workflow applications. An input validation error vulnerability exists in Microsoft Windows PrintWorkflowUserSvc. An attacker could exploit the vulnerability to elevate...

Microsoft Windows Virtualization-Based Security Enclave Input Validation Error Vulnerability

Microsoft Windows Virtualization-Based Security Enclave Microsoft Windows VBS Enclave is a software-based trusted execution environment within the host application address space from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows Virtualization-Base...

Microsoft SharePoint input validation vulnerability

Microsoft SharePoint is an enterprise business collaboration platform from Microsoft. The platform is used to consolidate business information and enable sharing of work, collaborating with others, organizing projects and workgroups, and searching for people and information. An input validation...

Microsoft Windows Telephony Server input validation error vulnerability

Microsoft Windows Telephony Server is a component of Microsoft Corporation USA that supports the Telephony Application Programming Interface TAPI, which allows computer programs to communicate with shared telephony services. An input validation error vulnerability exists in Microsoft Windows...

Microsoft Windows Telephony Server input validation error vulnerability

Microsoft Windows Telephony Server is a component of Microsoft Corporation USA that supports the Telephony Application Programming Interface TAPI, which allows computer programs to communicate with shared telephony services. An input validation error vulnerability exists in Microsoft Windows...

Microsoft Windows PrintWorkflowUserSvc input validation error vulnerability

Microsoft Windows PrintWorkflowUserSvc is a Windows service from Microsoft Corporation USA that provides support for print workflow applications. An input validation error vulnerability exists in Microsoft Windows PrintWorkflowUserSvc. An attacker could exploit the vulnerability to elevate...

Fortinet FortiClientEMS security vulnerability

Fortinet FortiClientEMS is part of Fortinet's Endpoint Management solution from Fortinet, a U.S.-based company, and is designed to help organizations effectively manage endpoint devices in their networks and provide monitoring and control of endpoint security. An input validation error...

Microsoft Windows Input Validation Vulnerability

Microsoft Windows is a suite of operating systems used by Microsoft Corporation USA for personal devices. An input validation error vulnerability exists in the Microsoft Windows Virtual Trusted Platform Module. An attacker could exploit this vulnerability to cause a denial of service on the syste...

RedisBloom input validation vulnerability

RedisBloom is a library from the RedisBloom open source. Adds a set of probabilistic data structures to Redis. RedisBloom suffers from an input validation error vulnerability that stems from the presence of an integer overflow vulnerability that allows an attacker to allocate less than the requir...

Huawei HarmonyOS Input Verification Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that can be exploited by attackers to cause abnormal functionality...

SickChill has a vulnerability regarding input validation.

SickChill is an application in the SickChill open source. SickChill suffers from an input validation error vulnerability that stems from the next parameter in a user-controlled login endpoint that can receive arbitrary content, which can be exploited by an authenticated attacker to redirect the...

Huawei HarmonyOS Input Verification Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that can be exploited by an attacker to compromise availability...

Mozilla Firefox input validation error vulnerability

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An input validation error vulnerability previously existed in Mozilla Firefox version 134, which stemmed from an attacker being able to spoof the address bar when redirected to an invalid protocol sche...

Redis input validation vulnerability

Redis is an open source, ANSI C, network-enabled, memory-based, persistent logging, key-value Key-Value storage database from Redis, Inc. that provides APIs in multiple languages. An input validation error vulnerability exists in Redis version 7.0.0 and later. This vulnerability can be exploited ...

Qualcomm Chipsets: Input validation error vulnerability

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated Qualcomm. An input validation error vulnerability exists in Qualcomm Chipsets that originates from a memory corruption that occurs when calling any IOCTL-calling application that executes all MCDM driver IOCTL calls...

Huawei Myna Input Validation Error Vulnerability

Huawei Myna is a smart speaker from Chinese company Huawei Huawei. Huawei Myna suffers from an Input Validation Error vulnerability that originates from a module that does not adequately integrity check inputs in certain scenarios. An attacker can exploit this vulnerability to affect the normal...

Google Android security vulnerabilities

Google Android is a Linux-based open source operating system from Google. Google Android suffers from an input validation error vulnerability that originates from improper input validation of the prepareresponselocked function in the lwistransaction.c file, which can be exploited by an attacker t...

Huawei Myna security vulnerabilities

Huawei Myna is a smart speaker from Chinese company Huawei Huawei. Huawei Myna suffers from an Input Validation Error vulnerability that originates from a module that does not adequately integrity check inputs in certain scenarios. An attacker can exploit this vulnerability to affect the normal...

IBM Cognos Analytics Input Validation Error Vulnerability (CNVD-2025-00307)

IBM Cognos Analytics is a suite of business intelligence software from International Business Machines IBM. The software includes reports, dashboards, and scorecards, and can assist companies in adjusting their decisions by analyzing such things as key factors and key people. An input validation...