Omron CX-One CX-Programmer CXP File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Omron CX-One. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of CXP...

OTFCC Buffer Overflow Vulnerability (CNVD-2024-08544)

OTFCC is Caryll open source a C library and utility programs. Used to parse and write OpenType font files. A buffer overflow vulnerability exists in OTFCC version 0.10.4, which stems from a lack of proper validation of user-supplied data in the /release-x64/otfccdump+0x6b0478 file, and can be...

PT-2022-15978 · Intel · Intel Data Center Manager Sdk

Name of the Vulnerable Software and Affected Versions: IntelR Data Center Manager versions prior to 4.1 Description: The issue is related to improper input validation, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions pri...

PT-2022-21745 · Intel · Intel Nuc Laptop Kits

Name of the Vulnerable Software and Affected Versions: IntelR NUC Laptop Kits versions prior to BC0076 Description: The issue is related to improper input validation in the firmware, which may allow a privileged user to potentially enable escalation of privilege via local access. Recommendations:...

PT-2022-23048 · Loopback +1 · Loopback +1

Name of the Vulnerable Software and Affected Versions: LoopBack versions prior to 5.5.1 Description: Improper input validation on the contains LoopBack filter may allow for arbitrary SQL injection. When the extended filter property contains is permitted to be interpreted by the Postgres connector...

PT-2022-14581 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to improper input validation in the PacProxyService.java, which could lead to a system service crash and result in a local denial of service. This requires User...

PT-2022-4172 · Microsoft · Windows Webbrowser Control +1

Name of the Vulnerable Software and Affected Versions: Windows WebBrowser Control affected versions not specified Description: The issue exists due to insufficient input validation in the Windows WebBrowser Control component of the Windows operating system. This allows a remote attacker to execut...

PT-2022-14579 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-10 through Android-12L Description: The issue is related to a possible inappropriate file read due to improper input validation in the onSaveRingtone method of DefaultRingtonePreference.java. This could lead to local...

PT-2022-16180 · WordPress · Wsm Downloader

Name of the Vulnerable Software and Affected Versions: WSM Downloader WordPress plugin version 1.4.0 Description: The issue arises from the lack of proper validation of the link parameter, allowing bypass of restrictions on downloading images or files from specific popular websites...

Sql injection

OMICARD EDM’s API function has insufficient validation for user input. An unauthenticated remote attacker can inject arbitrary SQL commands to access, modify, delete database or disrupt service...

WordPress plugin Simple Membership 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers running PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

macOS 10.15.x < Catalina Security Update 2022-005 Catalina (HT213343)

The remote host is running a version of macOS / Mac OS X that is 0.0.x prior to Catalina Security Update 2022-005 Catalina. It is, therefore, affected by multiple vulnerabilities : - vim is vulnerable to Heap-based Buffer Overflow CVE-2021-4136 - vim is vulnerable to Out-of-bounds Read...

PT-2022-3731 · Oracle +8 · Mysql Server +7

Name of the Vulnerable Software and Affected Versions: MySQL Server versions 5.7.38 and prior MySQL Server versions 8.0.29 and prior Description: The issue is related to insufficient input validation in the Server: Options component of the MySQL Server product. It allows a high-privileged attacke...

PT-2022-20573 · Unknown · Lti 1.3 Tool Library

Name of the Vulnerable Software and Affected Versions: LTI 1.3 Tool Library versions prior to 5.0 Description: The issue concerns the Nonce Claim Value not being validated against the nonce value sent in the Authentication Request. This affects the LTI 1.3 Tool Library, a library used for buildin...

Design/Logic Flaw

A vulnerability has been identified in SCALANCE X200-4P IRT All versions V5.5.2, SCALANCE X201-3P IRT All versions V5.5.2, SCALANCE X201-3P IRT PRO All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2IRT All versions V5.5.2, SCALANCE X202-2P IRT All versions V5.5.2, SCALAN...

PT-2022-17981 · Siemens · Scalance Xf204 +20

Name of the Vulnerable Software and Affected Versions: SCALANCE X200-4P IRT versions prior to V5.5.2 SCALANCE X201-3P IRT versions prior to V5.5.2 SCALANCE X201-3P IRT PRO versions prior to V5.5.2 SCALANCE X202-2IRT versions prior to V5.5.2 SCALANCE X202-2P IRT versions prior to V5.5.2 SCALANCE...

Autodesk AutoCAD CATPart File Parsing Use-After-Free Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Autodesk AutoCAD. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of...

PT-2022-11329 · Unknown · Scniro-Validator

Name of the Vulnerable Software and Affected Versions: scniro-validator version 1.0.1 Description: A Regular Expression Denial of Service ReDOS issue was found in the validation of crafted invalid emails. Recommendations: For scniro-validator version 1.0.1, consider updating to a newer version th...

PT-2022-11321 · Unknown · Validate-Data

Name of the Vulnerable Software and Affected Versions: validate-data version 0.1.1 Description: A Regular Expression Denial of Service ReDOS issue was found in the validation of crafted invalid emails. This occurs when the software attempts to validate specially crafted email addresses, leading t...

74cms 跨站脚本漏洞

74cms is a PHP and MySQL-based online recruitment system from China Xunyi Technology Company. 74cms version v3.5.1 contains a cross-site scripting vulnerability, which originates from the path /index/jobfairol/show/ lack of data validation filtering for user-supplied data and output. An attacker...