Microsoft OpenSSH 输入验证错误漏洞

Microsoft OpenSSH is a suite of connection tools for secure access to remote computers from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft OpenSSH. An attacker could exploit the vulnerability to elevate privileges. The following products and editions are...

Microsoft DWM Core Library 输入验证错误漏洞

Microsoft DWM Core Library is a core library for Microsoft windows from Microsoft Corporation, USA. An input validation error vulnerability exists in the Microsoft DWM Core Library. An attacker could exploit this vulnerability to gain elevated privileges. The following products and editions are...

Microsoft Windows 输入验证错误漏洞

Microsoft Windows is a suite of operating systems for use on personal devices from Microsoft Corporation USA. An input validation error vulnerability exists in Microsoft Windows. An attacker could exploit this vulnerability to bypass certain features. The following products and editions are...

Fortinet FortiAnalyzer 安全漏洞

Fortinet FortiAnalyzer is a set of centralized network security reporting solutions from the U.S. company Fiat Fortinet. The product is mainly used to collect network log data, and through the reporting suite of security events in the log, network traffic, Web content, etc. to analyze, report,...

Microsoft DWM Core Library 输入验证错误漏洞

The Microsoft Windows DWM Core Library is a core library in the Windows operating system. An elevation of privilege vulnerability exists in Microsoft Windows DWM Core Library, which can be exploited by an attacker to elevate privileges...

Microsoft Windows Kerberos 输入验证错误漏洞

Microsoft Windows Kerberos is a software for authentication in network clusters from Microsoft Corporation USA.Kerberos also serves as a network authentication protocol designed with the goal of providing strong authentication services to client/server applications through a key system. An input...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which stems from a memory corruption that occurs when handling EnableTestMode calls...

OpenHarmony 输入验证错误漏洞

OpenHarmony is a kind of Hongmeng operating system open source project of China OpenAtom OpenAtom Foundation. An input validation error vulnerability exists in OpenHarmony v5.0.2 and earlier versions, which originates from a local attacker being able to execute arbitrary code in a pre-installed...

Qualcomm Chipsets 输入验证错误漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An input validation error vulnerability exists in Qualcomm Chipsets, which stems from a possible memory corruption when handling device IO control calls...

Plain Craft Launcher 输入验证错误漏洞

Plain Craft Launcher is an open source software by Hex Dragon. Plain Craft Launcher suffers from an input validation error vulnerability that stems from a malicious homepage that may use IE to access web pages in the background...

FreeBSD : Mozilla -- redirection to insecure site (f02e3c59-116c-11f0-8b2c-b42e991fc52e)

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the f02e3c59-116c-11f0-8b2c-b42e991fc52e advisory. [email protected] reports: When using Alt-Svc, ALPN did not properly validate certificates when the...

BIT-JOOMLA-2021-26036 [20210702] - Core - DoS through usergroup table manipulation

An issue was discovered in Joomla! 2.5.0 through 3.9.27. Missing validation of input could lead to a broken usergroups table...

Official Tauri Plugins 输入验证错误漏洞

Official Tauri Plugins is an official Tauri plugin from Tauri Open Source. An input validation error vulnerability exists in versions of Official Tauri Plugins prior to 2.2.1, which stems from improper protocol validation and could lead to remote code execution...

Google Chrome 输入验证错误漏洞

Google Chrome is a web browser from Google, an American company. Google Chrome suffers from an input validation error vulnerability, which stems from an improper implementation in Intents, that can be exploited by an attacker to submit a special Web request that can be elevated in privilege by...

Apple iOS和Apple iPadOS 输入验证错误漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS and Apple iPadOS that originates from a remote user and may be able to cause ...

EJBCA 输入验证错误漏洞

EJBCA is an open source Public Key Infrastructure PKI and Certificate Authority CA software from Keyfactor Open Source. An input validation error vulnerability exists in EJBCA version 8.0 that stems from a URL path modification that could result in a redirection to a malicious site...

CVE-2025-1736 Stream HTTP wrapper header check might omit basic auth header

In PHP from 8.1. before 8.1.32, from 8.2. before 8.2.28, from 8.3. before 8.3.19, from 8.4. before 8.4.5, when user-supplied headers are sent, the insufficient validation of the end-of-line characters may prevent certain headers from being sent or lead to certain headers be misinterpreted...

Dell Unity 输入验证错误漏洞

Dell Unity is a mid-range storage array software from Dell EMC for data storage and management. Dell Unity suffers from a URL redirection vulnerability that stems from a URL redirection to an untrusted site, which could lead to a phishing attack. No details of the vulnerability are provided at th...

Origin Validation Error

AgentScope is vulnerable to Origin Validation Error. The vulnerability is due to improper access control due to the server not properly restricting access to trusted origins, allowing any external domain to make API requests, leading to unauthorized data access and potential exploitation...

WordPress plugin ali2woo AliNext 输入验证错误漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. An input validation...