Input validation

If certain local files are manipulated in a certain manner, the validation to use the cryptographic keys can be circumvented...

CVE-2023-23342

CVE-2023-23342 affects HCL Nomad for Web . Malicious manipulation of local files can bypass the validation of cryptographic keys when accessing local data. CNNVD notes the vulnerability exists in Nomad prior to 1.0.7 . Impact is described as compromising cryptographic validation (confidentiality/...

Improper Input Validation

chromium is vulnerable to Improper Input Validation. The vulnerability exists due to the lack of user input validation in the Extensions of the library, which allows an attacker to convince user to install a malicious extension to access local files via a crafted Chrome Extension...

PHP 8.1.x < 8.1.22 Multiple Vulnerabilities

The version of PHP installed on the remote host is prior to 8.1.22. It is, therefore, affected by multiple vulnerabilities as referenced in the Version 8.1.22 advisory. - In PHP version 8.0. before 8.0.30, 8.1. before 8.1.22, and 8.2. before 8.2.8, when loading phar file, while reading PHAR...

CVE-2021-4323

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to access local files via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2021-4323

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to access local files via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2021-4323

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to access local files via a crafted Chrome Extension. Chromium security severity: Medium...

Input validation

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to access local files via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2021-4323

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to access local files via a crafted Chrome Extension. Chromium security severity: Medium...

CVE-2021-4323

Insufficient validation of untrusted input in Extensions in Google Chrome prior to 90.0.4430.72 allowed an attacker who convinced a user to install a malicious extension to access local files via a crafted Chrome Extension. Chromium security severity: Medium...

Improper Input Validation

odoo is vulnerable to Improper Input Validation. The vulnerability exists due to the sandboxing issue in the library, which allows an authenticated attacker to read and write local files on the server...

CVE-2023-38046

A vulnerability exists in Palo Alto Networks PAN-OS software that enables an authenticated administrator with the privilege to commit a specifically created configuration to read local files and resources from the system...

CVE-2023-38046

CVE-2023-38046 affects Palo Alto Networks PAN-OS: an authenticated administrator with commit privileges can read local files and resources from the system during a specifically crafted configuration commit. The ENISA/EUVD and Palo Alto advisories describe the root cause as an externally controlle...

Palo Alto Networks PAN-OS 安全漏洞

Palo Alto Networks PAN-OS is a next-generation firewall software from Palo Alto Networks, USA. A security vulnerability exists in Palo Alto Networks PAN-OS that originates from an authenticated administrator having the right to submit a specially created configuration to read local files and...

SUSE CVE-2023-34457

MechanicalSoup is a Python library for automating interaction with websites. Starting in version 0.2.0 and prior to version 1.3.0, a malicious web server can read arbitrary files on the client using a inside HTML form. All users of MechanicalSoup's form submission are affected, unless they took...

UBUNTU-CVE-2023-37203

Insufficient validation in the Drag and Drop API in conjunction with social engineering, may have allowed an attacker to trick end-users into creating a shortcut to local system files. This could have been leveraged to execute arbitrary code. This vulnerability affects Firefox 115...

MechanicalSoup 输入验证错误漏洞

MechanicalSoup is a Python library for automating interactions with websites. An input validation error vulnerability exists in MechanicalSoup version 0.2.0 through versions prior to 1.3.0, which originates from a malicious web server that can read arbitrary files on a client using an HTML form...

June 27, 2023—KB5027303 (OS Build 22621.1928) Preview

None None...

Fortinet FortiNAC 命令注入漏洞

Fortinet FortiNAC is a set of network access control solutions from the U.S. company Fita Fortinet. The product is primarily used for network access control and IoT security. Fortinet FortiNAC suffers from a command injection vulnerability that stems from the presence of a command injection...

FortiNAC - argument injection in XML interface on port tcp/5555

An improper neutralization of special elements used in a command 'command injection' vulnerability CWE-77 in FortiNAC tcp/5555 service may allow an unauthenticated attacker to copy local files of the device to other local directories of the device via specially crafted input fields. To access the...