Dell Alienware Command Center 输入验证错误漏洞

Dell Alienware Command Center is a series of gaming laptops from Dell, U.S.A. An input validation error vulnerability exists in Dell Alienware Command Center version 5.5.37.0 and prior, which stems from incorrect validation of user input. An attacker could use this vulnerability to send malicious...

Dell Rugged Control Center Input Validation Error Vulnerability

Dell Rugged Control Center is an application from Dell USA. It allows a range of settings to be configured on the ruggedized device, such as application settings, keyboard backlight settings, night mode settings, stealth mode settings, window settings, antenna switch settings and GPS settings. An...

SAMSUNG Mobile devices 输入验证错误漏洞

SAMSUNG Mobile devices are a range of Samsung mobile devices from the South Korean company Samsung, including cell phones and tablets. A security vulnerability exists in SAMSUNG Mobile devices versions prior to R1112.2.09, Android S1213.1.03.501, and Android T1314.1.00.422, which stems from...

adblock-lists 输入验证错误漏洞

adblock-lists are block lists used by AdBlock. Brave adblock-lists has a security vulnerability that stems from the presence of open redirects...

Kibana 输入验证错误漏洞

Elastic Kibana is an application from the Dutch company Elastic. A free and open user interface that enables you to visualize Elasticsearch data and lets you navigate through the Elastic Stack. Kibana has a security vulnerability. An attacker exploited the vulnerability to cause the server proces...

IBM API Connect 输入验证错误漏洞

IBM API Connect APIConnect is a suite of integrated solutions for managing the API lifecycle from International Business Machines IBM. The product supports creating, running, managing, and securing APIs, microservices, and more. A security vulnerability exists in IBM API Connect that stems from...

Linux kernel input validation error vulnerability (CNVD-2023-58992)

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An input validation error vulnerability exists in Linux kernel. An attacker could exploit this vulnerability to cause a memory leak and system crash...

CVE-2023-0728

The Wicked Folders plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and including, 2.18.16. This is due to missing or incorrect nonce validation on the ajaxsavefolder function. This makes it possible for unauthenticated attackers to invoke this function via forg...

CVE-2022-37705

A flaw was found in Amanda. The runtar SUID binary executes /usr/bin/tar as root without properly validating its arguments, possibly leading to escalation of privileges from the regular user "amandabackup" to root...

Linux kernel 输入验证错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. An input validation error vulnerability exists in Linux kernel. An attacker could exploit this vulnerability to cause a memory leak and system crash...

MediaTek 芯片输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company called MediaTek. A security vulnerability exists in the MediaTek chips. An attacker has exploited the vulnerability to escalate privileges. The following products are affected: MT5221, MT7603, MT7613, MT7615, MT7622, MT7628,...

Huawei HarmonyOS 输入验证错误漏洞

Huawei HarmonyOS is an operating system from Huawei China. It provides a full-scenario distributed operating system based on a microkernel. Huawei HarmonyOS suffers from a security vulnerability that stems from the geofencing kernel code not determining the length of incoming data, which can be...

The vulnerability of the Dompdf PHP library for generating PDF documents from HTML markup and CSS styles is related to improper validation before syntactic analysis and canonization. This allows a malicious user to delete arbitrary files or execute arbitrary code.

The vulnerability of the PHP library for generating PDF documents from HTML markup and CSS styles, Dompdf, is related to incorrect validation before syntactic analysis and canonization when processing tags with capital letters. Exploiting this vulnerability could allow an attacker to delete...

Dell BIOS 输入验证错误漏洞

Dell BIOS is embedded software on a small memory chip on a computer motherboard from Dell, Inc. A security vulnerability exists in Dell BIOS that stems from an incorrect input validation vulnerability that could be exploited by a malicious, locally authenticated user with administrator privileges...

F5 BIG-IP 输入验证错误漏洞

F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. An open redirection vulnerability exists in the F5 BIG-IP APM virtual server, which can be exploited by an unauthenticated...

Apache Linkis 输入验证错误漏洞

Apache Linkis is a middleware product from the Apache Foundation that establishes an effective connection between upper-tier applications and the underlying data engine. An input validation error vulnerability exists in Apache Linkis 1.3.0 and earlier versions, which can be exploited by an...

Apache Portable Runtime 输入验证错误漏洞

Apache Portable Runtime is the United States Apache Apache Foundation for the upper tier applications to provide the underlying support for multiple operating system platforms across the use of the interface library . An integer overflow vulnerability exists in the Apache Portable Runtime Utility...

Apache Portable Runtime 输入验证错误漏洞

Apache Portable Runtime is the United States Apache Apache Foundation for the upper tier applications to provide the underlying support for multiple operating system platforms across the use of the interface library . An out-of-bounds write vulnerability exists in Apache Portable Runtime, which c...

CVE-2022-20493

In Condition of Condition.java, there is a possible way to grant notification access due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-10...

File Upload Type Validation Error lead to Stored XSS

Description Stored cross-site scripting also known as second-order or persistent XSS arises when an application receives data from an untrusted source and includes that data within its later HTTP responses in an unsafe way. STEPSTOREPRODUCE 1. Login to your application and create a Store called...