FreeBSD 输入验证错误漏洞

FreeBSD is a set of Unix-like operating systems from the Freebsd Foundation. FreeBSD suffers from an Input Validation Error vulnerability that stems from insufficient message validation in libradius, which allows a remote Radius client to pass specially crafted input to the system and perform a...

Flask-Security 输入验证错误漏洞

Flask-Security is a software application. Quickly add security features to Flask applications. Flask-Security suffers from an input validation error vulnerability that stems from mishandling user-supplied data, which could allow a remote attacker to redirect a victim to an arbitrary URL...

3S-Smart Software Solutions CODESYS Runtime System Input Validation Error Vulnerability

3S-Smart Software Solutions CODESYS Control runtime system is an application system from 3S-Smart Software Solutions, Germany. It is used for the conversion of any type of smart device into an IEC 61131-3 controller. An input validation error vulnerability exists in 3S-Smart Software Solutions...

Google Chrome Input Validation Error Vulnerability (CNVD-2021-41128)

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An input validation error vulnerability exists in Google Chrome versions prior to 91.0.4472.77, which can be exploited by remote attackers to perform domain spoofin...

UPX 输入验证错误漏洞

UPX is an open source executable file packaging program that supports a variety of file formats from different operating systems. An assertion abort vulnerability exists in MemBuffer::alloc in mem.cpp in UPX version 4.0.0. An attacker can exploit this vulnerability via a specially crafted file to...

Elastic Kibana 输入验证错误漏洞

Elastic Kibana is an application from the Dutch company Elastic. A free and open user interface that enables you to visualize Elasticsearch data and lets you navigate through the Elastic Stack. Elastic Kibana suffers from an input validation error vulnerability that stems from incorrect cleaning ...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. Apple macOS is vulnerable to an input validation error vulnerability that exists due to a symbolic link issue in the Core Services subsystem, which allows a local user to create specially crafted symbolic lin...

Google Chrome 注入漏洞

Chrome is a simple and efficiently designed web browsing tool developed by Google that is characterized by its simplicity and speed. An input validation error vulnerability exists in Google Chrome versions prior to 91.0.4472.77, which can be exploited by remote attackers to perform domain spoofin...

Apple tvOS 输入验证错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. tvOS suffers from an input validation error vulnerability that originates from insufficient user-supplied input validation in the operating system kernel subsystem. A remote attacker could exploit this vulnerability to send a specially...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system from Apple Inc. that was developed specifically for Mac computers. The macOS suffers from an Input Validation Error vulnerability that stems from a boundary error when processing untrustworthy input in Model I/O. A remote attacker could exploit the...

trailing-slash 输入验证错误漏洞

trailing-slash is an application. Add or remove trailing slashes and redirect. A security vulnerability exists in versions of trailing-slash prior to 2.0.1, when accessing vulnerable endpoints, through the use of trailing double slashes in URLs...

Cisco Small Business Input Validation Error Vulnerability

Cisco Small Business is a switch from the American company Cisco Cisco. Cisco Small Business suffers from an Input Validation Error vulnerability that originates from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection for attack...

Cisco Small Business Input Validation Error Vulnerability (CNVD-2021-37125)

Cisco Small Business is a switch from the American company Cisco Cisco. Cisco Small Business suffers from an Input Validation Error vulnerability that originates from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection for attack...

Nagios 代码注入漏洞

Nagios is a set of open source and free network monitoring tools from the American company Nagios. An input validation error vulnerability exists in Nagios Fusion version 4.1.8 and earlier, which can be exploited by an authenticated attacker to execute remote code via table paging...

Cisco Small Business Input Validation Error Vulnerability (CNVD-2021-37126)

Cisco Small Business is a switch from the American company Cisco Cisco. An input validation error vulnerability exists in the Cisco Small Business product, which results from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection fo...

Cisco Small Business Input Validation Error Vulnerability (CNVD-2021-37127)

Cisco Small Business is a switch from the American company Cisco Cisco. Cisco Small Business suffers from an Input Validation Error vulnerability that originates from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection for attack...

Insecure Certificate Validation

wp-cli/wp-cli uses insecure certificate validation. The vulnerability exists due to an improper error handling in HTTPS requests management...

Cisco Small Business 命令注入漏洞

Cisco Small Business is a switch from the American company Cisco Cisco. Cisco Small Business suffers from an Input Validation Error vulnerability that originates from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection for attack...

Cisco Small Business 命令注入漏洞

Cisco Small Business is a switch from the American company Cisco Cisco. An input validation error vulnerability exists in the Cisco Small Business product, which results from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection fo...

Huawei S12700 输入验证错误漏洞

Huawei S12700 is an enterprise switch product from Huawei China.The Huawei S12700 is vulnerable to an input validation error, which stems from insufficient validation of user-supplied input. An attacker could use the vulnerability to send specific messages and perform a denial of service DoS atta...