Cisco Small Business 命令注入漏洞

Cisco Small Business is a switch from the American company Cisco Cisco. Cisco Small Business suffers from an Input Validation Error vulnerability that originates from an incorrect validation provided to the user. An attacker could exploit this vulnerability to perform command injection for attack...

Prometheus 输入验证错误漏洞

Prometheus is an open source software written in the Go language for recording real-time metrics from time series databases built using the HTTP pull model. Prometheus suffers from an input validation error vulnerability that can be exploited by an attacker to redirect to any other URL...

Podman Origin Validation Error

Rootless containers run with Podman, receive all traffic with a source IP address of 127.0.0.1 including from remote hosts. This impacts containerized applications that trust localhost 127.0.01 connections by default and do not require authentication. This issue affects Podman versions from 1.8.0...

kernel: Improper input validation in some Intel(R) Graphics Drivers

A flaw was found in the Linux kernel. Improper input validation in some IntelR Graphics Drivers may allow a privileged user to potentially enable a denial of service via local access...

X.Org libX11 输入验证错误漏洞

X.Org libX11 is an X11 X Window System client library from the X.Org X.org Foundation. An input validation error vulnerability exists in libX11 that stems from the lack of proper validation of XLookupColor and other X library functions with respect to the length of their string arguments...

Red Hat Ceph 输入验证错误漏洞

Red Hat Ceph is a Linux petabyte-level distributed file system from Red Hat. The main goal of the system is to be designed as a distributed file system without a single point of failure based on POSIX Portable Operating System Interface, enabling fault tolerance and seamless data replication. Cep...

Juniper Networks Junos OS Input Validation Error Vulnerability (CNVD-2021-37739)

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The OS provides a secure programming interface and the Junos SDK. Junos OS is vulnerable to an input validation error vulnerability, no details of the vulnerability are provided at this ti...

DjVuLibre 输入验证错误漏洞

DjVuLibre is an open source implementation of DjVu computer file format that includes a DjVu file viewer, browser plug-in, DjVu file decoder/encoder and other utilities. An input validation error vulnerability exists in DjVuLibre. An attacker could cause an application to crash and other...

Moodle 输入验证错误漏洞

Moodle is a free, open source e-learning software platform, also known as a course management system, learning management system, or virtual learning environment. Moodle suffers from an input validation error vulnerability that stems from insufficient innocent handling of user-supplied data in th...

Acyba AcyMailing 输入验证错误漏洞

Acyba AcyMailing is a suite of newsletter and marketing automation software from the Acyba team in France. AcyMailing suffers from an input validation error vulnerability that stems from the redirect parameter not being cleared correctly when AcyMailing performs a subscription...

MediaWiki Input Validation Error Vulnerability (CNVD-2021-35230)

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. It can be used to deploy in-house knowledge management and content management systems. An input validation error vulnerability exists in MediaWiki version 1.35.2 and prior versions, which stems...

Design/Logic Flaw

TensorFlow is an end-to-end open source platform for machine learning. The validation in tf.rawops.QuantizeAndDequantizeV2 allows invalid values for axis argument:. The...

Rockwell Automation Connected Components Workbench Input Validation Error Vulnerability

Rockwell Automation CCW is an HMI editor and component-level industrial product for designing and configuring applications and performing microcontroller turns. An input validation error vulnerability exists in Rockwell Automation Connected Components Workbench, which can be exploited by an...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. Google TensorFlow 2.4.2, 2.3.3, 2.2.3, 2.1.4 suffers from an input validation error vulnerability that can be exploited by an attacker to cause a denial of service...

Windows 10 Input Validation Error Vulnerability

Microsoft Windows 10 is a suite of operating systems for use on personal computers from the American company Microsoft. A security vulnerability exists in Windows 10 driver version 6.1316.1209. An attacker can inject arbitrary data frames independent of the network configuration...

OpenBSD Input Validation Error Vulnerability

OpenBSD is a cross-platform, BSD-based UNIX-like operating system from the Canadian OpenBSD Openbsd project team. A security vulnerability exists in OpenBSD version 6.6. An attacker can inject arbitrary network packets independent of the network configuration...

Google TensorFlow输入验证错误漏洞

Google TensorFlow is an end-to-end open source machine learning platform. An integer overflow vulnerability exists in concatentation in Google TensorFlow. No detailed vulnerability details are provided at this time...

NetBSD Input Validation Error Vulnerability

NetBSD is an open source Unix-like operating system from the NetBSD Netbsd Foundation. A security vulnerability exists in NetBSD version 7.1. An attacker could exploit this vulnerability to cause a denial of service to a program...

Samsung Galaxy S3 Input Validation Error Vulnerability

The Samsung Galaxy S3 is a smartphone from the South Korean company Samsung Samsung. A security vulnerability exists in the Samsung Galaxy S3 i9305 version 4.4.4. An attacker can inject arbitrary network packets independent of the network configuration...

Linux kernel input validation error vulnerability (CNVD-2021-34682)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An input validation error vulnerability exists in Linux kernel version 5.8.9. The vulnerability stems from when a device sends segmented frames and uses the WEP, CCMP, or GCMP...