LabStack LLC echo 输入验证错误漏洞

LabStack echo is a high-performance, minimalist Go web framework open sourced by LabStack LLC. labStack Echo v4.8.0 version has an open redirection vulnerability that can be exploited by attackers to launch server-side request forgery attacks...

Trudesk 输入验证错误漏洞

Chris Brame Trudesk is an open source helpdesk/ticketing solution from Chris Brame, USA. An input validation error vulnerability exists in versions prior to Trudesk 1.2.2 that stems from allowing large characters to be inserted into the full name of the input field of a registration field, which...

Aruba Networks ArubaOS 安全漏洞

Aruba Networks ArubaOS, an operating system for Aruba Mobility-Defined Networks including mobile controllers and mobile access switches from Aruba Networks, is vulnerable to an input validation error. The vulnerability can be exploited to interrupt the normal operation of the affected access poin...

FFmpeg 输入验证错误漏洞

FFmpeg is software developed by individual developers that performs recording, converting, and streaming functions for a wide range of audio and video formats. A buffer overflow vulnerability exists in FFmpeg where the size calculation in buildopengopkeypoints iterates over all entries in the loo...

Apple macOS Monterey 输入验证错误漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. A security vulnerability exists in Apple macOS Monterey version 12.4, which stems from an issue in the handling of environment variables and can be exploited by an attacker to view sensitiv...

Squid 输入验证错误漏洞

Squid is a suite of proxy server and web caching server software. The software provides features such as caching the World Wide Web, filtering traffic, and proxying the Internet. Squid suffers from an out-of-bounds read vulnerability. The vulnerability stems from a boundary error when handling...

Kitty 安全漏洞

kitty is a fast, feature-rich, GPU-based terminal emulator developed by kovidgoyal. A code execution vulnerability exists in versions prior to Kitty 0.26.2 that stems from insufficient validation in the desktop notification escape sequence and can be exploited by an attacker to cause execution of...

Rocket.Chat 输入验证错误漏洞

Rocket.Chat is an open source team chat software. Rocket.Chat suffers from an input validation error vulnerability that stems from a failure to type validate input data in the getUsersOfRoom Meteor server method. An authenticated attacker could use this vulnerability to enumerate existing rooms a...

HCL Technologies HCL Digital Experience 输入验证错误漏洞

HCL Technologies HCL Digital Experience is a suite of digital experience platforms, content delivery solutions from HCL Technologies India. A security vulnerability exists in HCL Technologies HCL Digital Experience, which stems from the inclusion of user input in an error response and can be used...

Huawei CV81-WDM FW 输入验证错误漏洞

The Huawei CV81-WDM FW is a laser multifunction printer from Huawei China. A security vulnerability exists in Huawei CV81-WDM FW version 01.70.49.29.46, which can be exploited by attackers to cause a DoS attack...

CVE-2022-40140

An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2022-40140

An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

Input validation

An origin validation error vulnerability in Trend Micro Apex One and Apex One as a Service could allow a local attacker to cause a denial-of-service on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to...

CVE-2022-40140

CVE-2022-40140 affects Trend Micro Apex One and Apex One as a Service. It is an origin validation error that can allow a local attacker with low-privilege code execution to cause a denial-of-service on affected installations. According to the provided sources, fixes are in August 2022 updates: On...

Integer overflow

Possible integer overflow and memory corruption due to improper validation of buffer size sent to write to console when computing the payload size in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segmentation error in the converter and crashes the Python process when using a...

Adobe Illustrator 输入验证错误漏洞

Adobe Illustrator is a software released by Adobe Systems for graphics. Adobe Illustrator is vulnerable to an input validation error, which can be exploited by attackers to execute arbitrary code in the context of the current user...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is an end-to-end open source platform for machine learning from Google, Inc. An input validation error vulnerability exists in Google TensorFlow, which stems from a segmentation error that occurs if QuantizedAdd is given a tensor of non-zero rank mininput or maxinput. An attacke...

Google TensorFlow 输入验证错误漏洞

Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google, Inc. in the United States. Google TensorFlow suffers from an input validation error vulnerability that stems from a segmentation error that can be used to trigger a denial-of-service attack if...

Brocade Fabric OS 输入验证错误漏洞

Brocade Fabric OS FOS is a set of embedded operating systems used in devices such as switches and routers from Brocade USA. A security vulnerability exists in Brocade Fabric OS. No information about this vulnerability is available at this time, so please stay tuned to CNNVD or the vendor's...