CVE-2021-36335

Dell EMC CloudLink 7.1 and all prior versions contain an Improper Input Validation Vulnerability. A remote low privileged attacker, may potentially exploit this vulnerability, leading to execution of arbitrary files on the server...

VulnCheck KEV: CVE-2020-0069

Multiple MediaTek chipsets contain an insufficient input validation vulnerability and have missing SELinux restrictions in the Command Queue drivers ioctl handlers. This causes an out-of-bounds write leading to privilege escalation. This vulnerability was observed chained with CVE-2019-2215 and...

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR arises from insufficient input data validation. This allows attackers to trigger service interruptions.

The vulnerability of the Unidirectional Link Detection function in operating systems such as NX-OS, FXOS, Cisco IOS XE, and Cisco IOS XR is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the VAPI service (vCenter API), a management tool for VMware vCenter Server and VMware Cloud Foundation virtualization platforms, allows a attacker to cause a service failure.

The vulnerability of the VAPI service vCenter API, a management tool for VMware vCenter Server and VMware Cloud Foundation virtualization platforms, exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerabilities of the Citrix ADC application delivery controller (formerly Citrix NetScaler Application Delivery Controller), the Citrix Gateway virtual environment access control system (formerly Citrix NetScaler Gateway), and the Citrix SD-WAN WANOP network management software are related to insufficient validation of input data. This allows a malicious individual to gain unauthorized access to protected information.

The vulnerabilities of the Citrix ADC application delivery controller previously called Citrix NetScaler Application Delivery Controller, the Citrix Gateway access control system previously called Citrix NetScaler Gateway, and the Citrix SD-WAN WANOP network management software are related to...

ROS-2-2171

2.2171 Multiple Exim Server Vulnerabilities 1. Vulnerability description: CVE-2020-28007 A vulnerability in the Exim message forwarding agent, is related to a symbolic link in the Exim log directory. Exploitation of the vulnerability could allow an attacker to create a special symbolic link to a...

The vulnerability of the HTTP/2 module in the Apache Traffic Server, which exists due to insufficient validation of input data, allows attackers to cause service failures.

The vulnerability of the HTTP/2 module in the Apache Traffic Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of Google Chrome’s full-screen mode, related to insufficient validation of input data, allows a hacker to compromise data integrity.

The vulnerability of the full-screen mode of the Google Chrome browser is related to the insufficient implementation of security policies. Exploiting this vulnerability can allow a malicious actor to compromise data integrity remotely...

CVE-2021-29780

IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation. IBM X-Force ID: 203085...

CVE-2021-33659

SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated GIF file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...

The vulnerability of the MtcSetDataItemt function in the embedded web server, due to insufficient validation of input data, allows attackers to escalate their privileges and execute system commands of the operating system.

The vulnerability of the MtcSetDataItemt function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to enhance their privileges and execute system commands of the operating system...

The vulnerability of the webSetEMailAlert function in the embedded web server, due to insufficient validation of input data, allows a malicious user to elevate their privileges and execute system commands of the operating system.

The vulnerability of the webSetEMailAlert function in the embedded web server is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to enhance their privileges and execute system commands of the operating system...

Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning scheme allows a hacker to trigger a service failure.

Vulnerability of the Server component: The Oracle MySQL Server database management system’s partitioning mechanism is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

Vulnerability of the Server component: The Replication function of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server database management system’s replication component is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

The vulnerability of the “forward first” DNS server mode in Bind9, which allows a attacker to cause a service failure.

The “forward first” mode of the Bind9 DNS server has vulnerabilities due to insufficient validation of input data. Exploiting these vulnerabilities can allow a malicious actor to cause service failures...

Vulnerability of the Server component: The Information Schema of the Oracle MySQL Server database management system, which allows attackers to gain unauthorized access to protected information.

Vulnerability of the Server component: The information schema of the Oracle MySQL Server database management system is vulnerable due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to gain unauthorized access to protected information using the MySQL...

The vulnerability in the web interface for managing microprogrammed software on Cisco Small Business 100, 300, 500 Series Wireless Access Points allows a hacker to execute arbitrary commands.

The vulnerability of the web-based management interface for Cisco Small Business 100, 300, 500 Series Wireless Access Points relates to insufficient validation of commands sent to the system. Exploiting this vulnerability allows an attacker to execute arbitrary commands on the target system...

CVE-2021-32402

Intelbras Router RF 301K Firmware 1.1.2 is vulnerable to Cross Site Request Forgery CSRF due to lack of validation and insecure configurations in inputs and modules...

Vulnerability of the Server component: The Optimizer component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the Oracle MySQL Server component of the database management system’s optimizer is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the MySQL network protocol...

The vulnerability of the InnoDB component of the Oracle MySQL Server database management system, which allows a hacker to cause a service failure.

The vulnerability of the InnoDB component in the Oracle MySQL Server database management system is related to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruptions using the network MySQL protocol...