Siemens RUGGEDCOM和Siemens SCALANCE 输入验证错误漏洞

SCALANCE M-800, MUM-800 and S615 and RUGGEDCOM RM1224 are industrial routers. An input validation error vulnerability exists in multiple Siemens products and can be exploited by attackers to compromise system integrity...

Apache CloudStack 输入验证错误漏洞

Apache CloudStack is a suite of Infrastructure-as-a-Service IaaS cloud computing platforms from the Apache USA Foundation. The platform is primarily used to deploy and manage large networks of virtual machines. An input validation error vulnerability exists in Apache CloudStack versions 4.0.0...

Red Hat Ansible 输入验证错误漏洞

Red Hat Ansible is a computer system configuration manager from Red Hat, an American company. The product can be used to distribute, manage, and program computer systems. An input validation error vulnerability exists in Red Hat Ansible that stems from the use of the hostvars object to reference...

Eclipse OpenJ9 输入验证错误漏洞

Eclipse OpenJ9 is a Java application engine from the Eclipse Foundation. The product is primarily used to run Java applications. An input validation error vulnerability exists in Eclipse OpenJ9 version 0.47 and earlier versions, which stems from the JNI function GetStringUTFLength that may return...

Cisco Enterprise Chat and Email 输入验证错误漏洞

Cisco Enterprise Chat and Email CEC is a suite of enterprise chat and email solutions from Cisco, USA. The product provides email, chat, and web callback capabilities, among other things, for other Cisco solutions. An input validation error vulnerability exists in Cisco Enterprise Chat and Email...

Symfony 输入验证错误漏洞

Symfony is a PHP framework for web and console applications and a set of reusable PHP components from Symfony, Inc. An input validation error vulnerability exists in Symfony that stems from an attacker being able to trick an authenticator that relies on the Request class into redirecting the user...

SuiteCRM 输入验证错误漏洞

SuiteCRM is a customer relationship management system from the SuiteCRM team. SuiteCRM suffers from an input validation error vulnerability that stems from user input being written directly to the file system without validation...

qBittorrent 安全漏洞

qBittorrent is a cross-platform lightweight BitTorrent client from qBittorrent open source. A security vulnerability exists in qBittorrent versions prior to 5.0.1 that stems from a certificate validation error...

CVE-2024-51774

qBittorrent before 5.0.1 proceeds with use of https URLs even after certificate validation errors...

CVE-2024-10653

IDExpert from CHANGING Information Technology does not properly validate a specific parameter in the administrator interface, allowing remote attackers with administrative privileges to inject and execute OS commands on the server...

The vulnerability of the TLS function in microprogramming-based network interface controllers of Cisco Adaptive Security Appliances (ASA) and Cisco Firepower Threat Defense (FTD) allows attackers to induce service failures.

The vulnerability of the TLS function in Cisco Adaptive Security Appliance ASA and Cisco Firepower Threat Defense FTD systems is related to improper validation of certain types of input data. Exploiting this vulnerability can allow a malicious actor to cause service interruptions remotely...

Google Pixel Input Validation Error Vulnerability (CNVD-2024-45893)

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an input validation error vulnerability that stems from improper input validation in smmemcompatgetvmmobj in lib/sm/sharedmem.c, which can be exploited by an attacker to cause memory access...

CVE-2024-10460: Origin Validation Error

The origin of an external protocol handler prompt could have been obscured using a data: URL within an iframe. This vulnerability affects Firefox 132, Firefox ESR 128.4, Thunderbird 128.4, and Thunderbird 132...

CVE-2024-6674: Origin Validation Error

A CORS misconfiguration in parisneo/lollms-webui prior to version 10 allows attackers to steal sensitive information such as logs, browser sessions, and settings containing private API keys from other services. This vulnerability can also enable attackers to perform actions on behalf of a user,...

Mitel MiCollab Input Validation Error Vulnerability

Mitel MiCollab is a mobile application from Mitel Canada that provides voice, video, messaging, audio conferencing and team collaboration for employees. An input validation error vulnerability exists in Mitel MiColla, which can be exploited by an attacker to execute arbitrary commands on the syst...

NVIDIA vGPU Software 输入验证错误漏洞

NVIDIA vGPU Software is a management software from NVIDIA, USA, used to provide GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. The NVIDIA vGPU Softwa...

WordPress plugin Wux Blog Editor 代码问题漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A code issue vulnerability...

Google Pixel 安全漏洞

Google Pixel is a smartphone from the American company Google Google. Google Pixel suffers from an input validation error vulnerability that stems from improper input validation in smmemcompatgetvmmobj in lib/sm/sharedmem.c, which can be exploited by an attacker to cause memory access...

ZITADEL 输入验证错误漏洞

ZITADEL is a modern open source alternative to Auth0, Firebase Auth, AWS Cognito, and Keycloak built for the container and serverless era, open sourced by ZITADEL in Switzerland. ZITADEL suffers from an input validation error vulnerability that stems from a flaw in the URL validation mechanism th...

Apache CloudStack Input Validation Error Vulnerability (CNVD-2024-41660)

Apache CloudStack is a suite of Infrastructure as a Service IaaS cloud computing platforms from the Apache Foundation in the United States. The platform is primarily used to deploy and manage large networks of virtual machines. Apache CloudStack has a security vulnerability that can be exploited ...