Altair HyperView Player 输入验证错误漏洞

Altair HyperView Player is a standalone 3D viewer from Altair Japan. It is used to share CAE models and simulation results. An input validation error vulnerability exists in Altair HyperView Player that originates from improper validation of an array indexing vulnerability that results in memory...

Trend Micro Apex One Access Control Error Vulnerability (CNVD-2022-69152)

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One 2019 on-prem, SaaS version, which stems from an Apex One source validation error that can be exploited by an attacker to elevate privileges...

Facebook Hermes 输入验证错误漏洞

Facebook Hermes is a JavaScript engine from Facebook Inc. in the United States. The engine is targeted at React Native applications to improve the performance of mobile client application apps, but not for server-side infrastructures such as browsers & Node.js. An input validation error...

Cisco ATA 190 Series Protocol Message Input Validation Error Vulnerability

ATA 190, ATA 191, ATA 192 is a Cisco ATA 190 Series analog phone adapter.An input validation error vulnerability exists in the Cisco ATA 190 Series, which stems from a lack of length validation checks when processing Cisco Discovery Protocol messages, and can be exploited by an unauthenticated,...

Siemens SIMATIC HMI Comfort Panels 输入验证错误漏洞

Siemens SIMATIC HMI Comfort Panels is a touch panel device from Siemens Germany. Multiple Siemens products are vulnerable to an input validation error, which stems from the inability of the affected device to properly validate input sent to certain services over TCP. An unauthenticated remote...

Huawei HarmonyOS Face Recognition Module Input Validation Error Vulnerability

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based distributed operating system. Huawei HarmonyOS is vulnerable due to an input validation error in the face recognition module. An attacker could exploit the vulnerability to compromise confidentiality...

Siemens RUGGEDCOM 输入验证错误漏洞

Siemens RUGGEDCOM is a communication device from Siemens, Germany. It provides fast and reliable communications for power, transportation, oil and gas, and other industries. An input validation error vulnerability exists in Siemens RUGGEDCOM, which stems from an inability to properly handle packe...

Cisco ATA 190 LLDP Packet Input Validation Error Vulnerability

The Cisco ATA 190 is an analog phone adapter from Cisco, U.S.A. An input validation error vulnerability exists in the Cisco ATA 190 Series, which stems from a lack of length validation in certain LLDP packet header fields. An unauthenticated, remote attacker could exploit the vulnerability to...

CVE-2022-41749

An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2022-41749

An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

Input validation

An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

Trend Micro Apex One 访问控制错误漏洞

Trend Micro Apex One is an endpoint protection software from Trend Micro. A security vulnerability exists in Trend Micro Apex One 2019 on-prem, SaaS version, which stems from an Apex One source validation error that can be exploited by an attacker to elevate privileges...

CVE-2022-41749

An origin validation error vulnerability in Trend Micro Apex One agents could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability...

CVE-2022-41749

CVE-2022-41749 is an origin validation error affecting Trend Micro Apex One agents, enabling local privilege escalation if an attacker can run low-privilege code. The vulnerability is characterized by a LOCAL attack vector, LOW attack complexity, and requires user- or attacker-side conditions to ...

Fat Free CRM 输入验证错误漏洞

Fat Free CRM is an open source Ruby on Rails based customer relationship management platform. The platform includes modules for team collaboration, customer management, contact lists, customer tracking and more. Fat Free CRM Prior to version 0.20.1 An input validation error vulnerability exists,...

ZoneMinder 输入验证错误漏洞

ZoneMinder is an open source video surveillance software system that supports IP, USB and analog cameras. The system supports IP, USB and analog cameras, etc. ZoneMinder has an input validation error vulnerability, which stems from allowing a user with view system privileges to inject new data in...

saleor 输入验证错误漏洞

Github saleor is a headless GraphQL commerce platform that delivers a super-fast, dynamic, personalized shopping experience. Beautiful online store, anywhere, on any device. saleor suffers from an input validation error vulnerability that stems from a number of GraphQL mutations that do not...

Cisco ATA 190 输入验证错误漏洞

The Cisco ATA 190 is an analog phone adapter from Cisco. The Cisco ATA 190 Series has an input validation error vulnerability that stems from multiple vulnerabilities in the Cisco Discovery Protocol and Link Layer Discovery Protocol LLDP. These vulnerabilities could allow an attacker to execute...

Huawei HarmonyOS 缓冲区错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a microkernel-based, distributed operating system. Huawei HarmonyOS is vulnerable to an input validation error, which stems from the existence of a HISP module that does not validate data passed from the kernel state. An...

Cisco Jabber 安全漏洞

Cisco Jabber is a unified communications client solution from Cisco. An input validation error vulnerability exists in Cisco Jabber Client Software versions prior to 14.1.3, which stems from improper handling of nested XMPP messages in requests sent to Cisco Jabber Client Software, and could be...