Tenda RX2 Pro setLanCfg API Endpoint Input Validation Error Vulnerability

Tenda RX2 Pro is a high performance WiFi 6 signal amplifier from Tenda China. The Tenda RX2 Pro suffers from an input validation error vulnerability that stems from a lack of input validation in the setLanCfg API endpoint, which can be exploited by an attacker to gain root shell access...

iTop 输入验证错误漏洞

iTop is a simple, web-based IT service management tool from Combodo open source. An input validation error vulnerability exists in iTop version 3.2.0, which stems from the possibility that an attacker could send a URL resulting in a PHP error...

Intel Server M50FCP和Intel Server D50DNP 输入验证错误漏洞

Intel Server M50FCP and Intel Server D50DNP are both servers from Intel Corporation USA. An input validation error vulnerability exists in Intel Server M50FCP and Intel Server D50DNP, which stems from improper input validation in the GenerationSetup module of the UEFI firmware, which could lead t...

Intel PROSet/Wireless WiFi 输入验证错误漏洞

Intel PROSet/Wireless WiFi is a wireless network card driver from Intel Corporation USA. An input validation error vulnerability exists in Intel PROSet/Wireless WiFi versions prior to 23.100, which stems from improper input validation and could lead to a denial of service attack...

Adobe ColdFusion 输入验证错误漏洞

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion suffers from an input validation error vulnerability that stems from a failure to properly validate input data. An attacker could exploit the vulnerability to execute...

SAP Supplier Relationship Management 输入验证错误漏洞

SAP supplier relationship management is a supplier relationship management software developed by SAP Germany. An input validation error vulnerability exists in SAP supplier relationship management, which stems from the use of a deprecated Java applet component that can be exploited by an attacker...

Microsoft Active Directory Certificate Services 输入验证错误漏洞

Microsoft Active Directory Certificate Services is a Windows Server role that issues and manages Public Key Infrastructure PKI certificates used in secure communications and authentication protocols from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Active...

Intel Graphics Drivers 输入验证错误漏洞

Intel Graphics Drivers is an integrated graphics driver from Intel Corporation USA. Intel Graphics Drivers suffers from an input validation error vulnerability that stems from improper input validation, which could lead to a denial of service attack...

Adobe ColdFusion 输入验证错误漏洞

Adobe ColdFusion is a Server software developed by Adobe for creating and deploying Internet applications. Adobe ColdFusion is vulnerable to an input validation error vulnerability that originates from the system failing to properly process a specific input. No detailed vulnerability details are...

Microsoft Hyper-V 输入验证错误漏洞

Microsoft Hyper-V is an application from Microsoft Corporation USA. A system hypervisor virtualization technology that enables desktop virtualization. An input validation error vulnerability exists in Microsoft Hyper-V. An attacker could exploit this vulnerability to cause a denial of service on...

Adobe Bridge 输入验证错误漏洞

Adobe Bridge is a file viewer from the American company Audobee Adobe. Adobe Bridge suffers from an input validation error vulnerability that stems from an integer overflow that can be exploited by an attacker to execute arbitrary code...

Intel Server M50FCP和Intel Server D50DNP 输入验证错误漏洞

Intel Server M50FCP and Intel Server D50DNP are both servers from Intel Corporation USA. An input validation error vulnerability exists in Intel Server M50FCP and Intel Server D50DNP, which stems from mishandling of UEFI firmware errors that could lead to elevation of privilege...

Adobe Photoshop 输入验证错误漏洞

Adobe Photoshop is a set of image processing software from the American company Audobee Adobe. The software is mainly used for processing pictures. Adobe Photoshop suffers from an input validation error vulnerability that originates from an integer overflow, which can be exploited by an attacker ...

Microsoft Windows Common Log File System Driver 输入验证错误漏洞

The Microsoft Windows Common Log File System Driver is a Microsoft Corporation Common Log File System CLFS API that provides a high-performance, common log file subsystem that can be used by dedicated client applications and shared by multiple clients to optimize logging and access. access. An...

Siemens BACnet ATEC 输入验证错误漏洞

Siemens BACnet ATEC Siemens BACnet Advanced Terminal Equipment Controller is a building automation terminal equipment controller from Siemens, Germany. An input validation error vulnerability exists in Siemens BACnet ATEC that stems from improper handling of certain BACnet MSTP messages, which...

Siemens MS/TP Point Pickup Module 输入验证错误漏洞

The Siemens MS/TP Point Pickup Module is a BACnet MS/TP protocol signal acquisition conversion module from Siemens, Germany. An input validation error vulnerability exists in the Siemens MS/TP Point Pickup Module that stems from improper handling of BACnet MSTP messages, which could result in a...

CVE-2025-46737 Origin Validation Error

SEL-5037 Grid Configurator contains an overly permissive Cross Origin Resource Sharing CORS configuration for a data gateway service in the application. This gateway service includes an API which is not properly configured to reject requests from unexpected sources...

CVE-2025-3649 LightPress Lightbox < 2.3.4 - Contributor+ Stored XSS

The LightPress Lightbox WordPress plugin before 2.3.4 does not check download links point to valid, non-Javascript URLs, allowing users with at least the contributor role to conduct Stored XSS attacks...

SUSE CVE-2022-49879

In the Linux kernel, the following vulnerability has been resolved: ext4: fix BUGON when directory entry has invalid reclen The reclen field in the directory entry has to be a multiple of 4. A corrupted filesystem image can be used to hit a BUG in ext4reclentodisk, called from makeindexeddir...

Cisco IOS XE 输入验证错误漏洞

Cisco IOS XE is an operating system from Cisco, Inc. Used as a single operating system for enterprise wired and wireless access, aggregation, core, and WAN, Cisco IOS XE reduces business and network complexity. Cisco IOS XE suffers from an input validation error vulnerability that stems from...