1322 matches found
CVE-2024-57241
Dedecms 5.71sp1 and earlier is vulnerable to URL redirect. In the web application, a logic error does not judge the input GET request resulting in URL redirection...
ROS-20250212-09
A vulnerability in the PHP Smarty templating engine is related to incorrect input validation when processing the attribute "extends-tag" attribute. Exploitation of the vulnerability could allow an attacker acting remotely to execute arbitrary PHP code on the target system. arbitrary PHP code on t...
CVE-2024-31153
Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...
CVE-2024-39606
Improper input validation in some IntelR PROSet/Wireless WiFi and Killerâ„¢ WiFi software for Windows before version 23.80 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2024-42410
Improper input validation in some IntelR Graphics Drivers may allow an authenticated user to potentially enable denial of service via local access...
CVE-2025-25203
CtrlPanel is open-source billing software for hosting providers. Prior to version 1.0, a Cross-Site Scripting XSS vulnerability exists in the TicketsController and Moderation/TicketsController due to insufficient input validation on the priority field during ticket creation and unsafe rendering o...
CVE-2023-31342
Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution...
CVE-2025-24499
The CVE-2025-24499 issue affects Siemens SCALANCE devices (WAB762-1, WAM763-1, WAM766-1, WUB762-1, WUM763-1, etc.) prior to V3.0.0. The vulnerability arises from improper input validation when loading configuration files, enabling an authenticated remote attacker to execute arbitrary shell comman...
PT-2025-6625
Name of the Vulnerable Software and Affected Versions IntelR processors affected versions not specified Description The issue is related to improper input validation in the XmlCli feature for UEFI firmware, which may allow a privileged user to potentially enable escalation of privilege via local...
PT-2025-6487
Name of the Vulnerable Software and Affected Versions IntelR Processors affected versions not specified Description The issue is related to improper input validation in UEFI firmware for some IntelR Processors. This may allow a privileged user to potentially enable escalation of privilege via loc...
Azure Linux 3.0 Security Update: httpd (CVE-2023-38709)
The version of httpd installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-38709 advisory. - Faulty input validation in the core of Apache allows malicious or exploitable backend/content generators to...
CVE-2024-7419
The WP ALL Export Pro plugin for WordPress is vulnerable to Remote Code Execution in all versions up to, and including, 1.9.1 via the custom export fields. This is due to the missing input validation and sanitization of user-supplied data. This makes it possible for unauthenticated attackers to...
CVE-2021-26639
This vulnerability is caused by the lack of validation of input values for specific functions if WISA Smart Wing CMS. Remote attackers can use this vulnerability to leak all files in the server without logging in system...
CVE-2022-34147
Improper input validation in BIOS firmware for some IntelR NUC 9 Extreme Laptop Kits, IntelR NUC Performance Kits, IntelR NUC Performance Mini PC, IntelR NUC 8 Compute Element, IntelR NUC Pro Kit, IntelR NUC Pro Board, and IntelR NUC Compute Element may allow a privileged user to potentially enab...
CVE-2022-1948
An issue has been discovered in GitLab affecting all versions starting from 15.0 before 15.0.1. Missing validation of input used in quick actions allowed an attacker to exploit XSS by injecting HTML in contact details...
CVE-2022-33300
Memory corruption in Automotive Android OS due to improper input validation...
CVE-2022-33964
Improper input validation in the IntelR SUR software before version 2.4.8902 may allow an unauthenticated user to potentially enable escalation of privilege via network access...
CVE-2022-33218
Memory corruption in Automotive due to improper input validation...
CVE-2022-24774
CycloneDX BOM Repository Server is a bill of materials BOM repository server for distributing CycloneDX BOMs. CycloneDX BOM Repository Server before version 2.0.1 has an improper input validation vulnerability leading to path traversal. A malicious user may potentially exploit this vulnerability ...