CVE-2023-37241

Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart...

CVE-2023-37241

Input verification vulnerability in the WMS API. Successful exploitation of this vulnerability may cause the device to restart...

CVE-2023-37241

CVE-2023-37241 is an input verification vulnerability in the WMS API. Exploitation could cause the affected device to restart. The available connected sources confirm the issue and its impact but do not provide concrete exploit details, affected versions, or a validated fix/update. No remediation...

PT-2023-24703 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue concerns incomplete input parameter verification in the communication framework module. Successful exploitation may affect availability. There...

PT-2023-25850 · Wms Api · Wms Api

Name of the Vulnerable Software and Affected Versions: WMS API affected versions not specified Description: The issue is related to an input verification vulnerability in the WMS API. Successful exploitation of this issue may cause the device to restart. Recommendations: At the moment, there is n...

PT-2023-15836 · Huawei · Emui +1

Name of the Vulnerable Software and Affected Versions: No specific software or versions are mentioned in the provided descriptions. Description: The issue is related to an input verification vulnerability in the AMS module. Successful exploitation of this vulnerability can cause unauthorized...

CVE-2022-48510: Exposure of Sensitive Information to an Unauthorized Actor

Input verification vulnerability in the AMS module. Successful exploitation of this vulnerability will cause unauthorized operations...

The vulnerability of the Power Monitoring Expert software allows a intruder to gain unauthorized access to protected information.

The vulnerability of the Power Monitoring Exper software-related system is related to insufficient verification of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to protected information...

The vulnerability of the Custom Reports component of the SCADA system’s data server, as well as the monitoring tools of the Custom Reports and IGSS Dashboards, allows a perpetrator to execute arbitrary code.

The vulnerability of the Custom Reports component of the SCADA system’s data server and the Custom Reports and IGSS Dashboard monitoring tools exists due to insufficient verification of input data. Exploiting this vulnerability could allow a perpetrator to execute arbitrary code using a specially...

The vulnerability of the Coredns platform’s analytics and automation services for managing Cisco Nexus data centers allows a hacker to trigger a service failure.

The vulnerability of the coredns platform for analytics and automation of cloud-based Cisco Nexus Dashboard services exists due to insufficient verification of input data. Exploiting this vulnerability could allow a malicious actor to cause service failures by sending continuous DNS requests...

The vulnerability of the System Management Mode (SMM) implementation in AMD microprogramming software allows a attacker to influence the integrity of the protected information.

The vulnerability of the System Management Mode SMM implementation of AMD microprogramming software is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to influence the integrity of protected information...

CVE-2021-26644

SQL-Injection vulnerability caused by the lack of verification of input values for the table name of DB used by the Mangboard bulletin board. A remote attacker can use this vulnerability to execute arbitrary code on the server where the bulletin board is running...

The vulnerability of the kernel of Juniper Networks Junos OS Evolved devices PTX10004, PTX10008, and PTX10016 allows a attacker to cause a service failure.

The vulnerability of the kernel of Juniper Networks Junos OS Evolved devices PTX10004, PTX10008, and PTX10016 exists due to insufficient verification of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Moodle course management system lies in the insufficient verification of data entered by users in the LTI provider’s library, allowing attackers to perform SSRF attacks.

The vulnerability of the Moodle course management system is related to insufficient verification of the data entered by users in the LTI provider’s library. Exploiting this vulnerability could allow a malicious actor to perform SSRF attacks remotely...

Actor can send an arbitrary token when adding liquidity

Lines of code Vulnerability details Impact Anyone can call addLiquidity directly and can input tokenId, params and data. The data inputs are never checked, so the user can send anything in there. Since the erc20 tokens routed are defined in the data parameter, user could send any token. Since the...

ROS-20221121-02

A vulnerability in the FreeRDP remote desktop protocol implementation is related to the fact that there is no range check for the input offset index in the ZGFX decoder. Exploitation of the vulnerability could allow an attacker acting remotely to read the associated data and attempt to decode it...

Pool funds can be used by anyone due to lack of allowance in the custom implementation of transferFrom

Lines of code Vulnerability details Impact Users' Pool assets can be used by anyone to execute a transaction, essentially stealing from them. Proof of Concept Pool contract uses a custom implementation of transferFrom which allows transfer of Pool assets from any address to any address as long as...

CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

Sql injection

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...

CVE-2022-39069

There is a SQL injection vulnerability in ZTE ZAIP-AIE. Due to lack of input verification by the server, an attacker could trigger an attack by building malicious requests. Exploitation of this vulnerability could cause the leakage of the current table content...