NVIDIA GPU Display Driver for Windows and Linux Input Validation Error Vulnerability (CNVD-2025-02606)

NVIDIA GPU Display Driver for Windows is an American Nvidia Nvidia company's driver software for interactive support of the graphics card display module in the Windows system. An input validation error vulnerability exists in the kernel mode layer nvlddmkm.sys handler of the NVIDIA GPU Display...

Apple iTunes 输入验证错误漏洞

Apple iTunes is a suite of media player applications from Apple Inc. that are used to play and manage digital music and video files. Apple iTunes suffers from an input validation error vulnerability that stems from insufficient validation of user-supplied input. A local attacker can exploit this...

ArgoCD 输入验证错误漏洞

ArgoCD is a software application. A declarative GitOps continuous delivery tool for Kubernetes. It continuously monitors running applications and compares the current live state with the desired target state e.g., configuration in a Git repository, automatically synchronizing and deploying...

JGraph draw.io 输入验证错误漏洞

JGraph draw.io is a configurable chart/whiteboard visualization application for JGraph. A security vulnerability exists in JGraph draw.io prior to version 18.0.7 that originates from exposing sensitive information to an unauthorized Actor...

Mitsubishi Electric MELSEC iQ-F series 输入验证错误漏洞

The Mitsubishi Electric MELSEC iQ-F series is a programmable logic controller from Mitsubishi Electric Japan. An input validation error vulnerability exists in multiple versions of the Mitsubishi Electric MELSEC iQ-F series products, which stems from incorrect input validation. An unauthenticated...

NVIDIA GPU Display Driver 输入验证错误漏洞

NVIDIA GPU Display Driver is a driver software from NVIDIA Corporation that is used for interactive support of graphics card display modules in operating systems. A security vulnerability exists in NVIDIA GPU Display Driver that originates from incorrect input validation. An attacker could cause ...

NVIDIA GPU Display Driver 输入验证错误漏洞

NVIDIA GPU Display Driver for Windows is an American Nvidia Nvidia company's driver software for interactive support of the graphics card display module in the Windows system. An input validation error vulnerability exists in the kernel mode layer nvlddmkm.sys handler of the NVIDIA GPU Display...

Spring Framework 输入验证错误漏洞

Spring Framework is the U.S. Spring team of a set of open source Java, JavaEE application framework. The framework helps developers build high-quality applications. An input validation error vulnerability exists in Spring Framework that stems from an integer overflow error...

InHand Networks InRouter302 Input Validation Error Vulnerability

InHand Networks InRouter Series is a series of routers from InHand Networks, Inc. InHand Networks InRouter302 V3.5.4 is vulnerable to an input validation error that can be exploited by attackers to cause remote code execution via specially crafted files...

Apple macOS 输入验证错误漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in Apple macOS versions 12.0 21A344 through 12.3.1 21E258, which stems from an integer overflow issue in libresolv. A remote attacker can pass specially crafted...

macOS Monterey 输入验证错误漏洞

Apple macOS Monterey is the 18th major release of Apple's macOS for the Macintosh desktop operating system. An input validation error vulnerability exists in macOS Monterey versions 12.0 21A344 - 12.3.1 21E258, which stems from insufficient validation of user-supplied input in libresolv. A remote...

Cybozu Garoon 输入验证错误漏洞

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An input validation error vulnerability exists in Cybozu Garoon, which stems from insufficient validation of...

Cybozu Garoon 输入验证错误漏洞

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An input validation error vulnerability exists in Cybozu Garoon, which stems from insufficient validation of...

Apple tvOS 输入验证错误漏洞

Apple tvOS is a smart TV operating system from Apple, Inc. An input validation error vulnerability exists in Apple tvOS versions 15.0 19J346 - 15.4.1 19L452, which stems from an integer overflow in ImageIO. A remote attacker could exploit this vulnerability to execute arbitrary code on the target...

Cybozu Garoon 输入验证错误漏洞

Cybozu Garoon is a portal-type OA office system from Cybozu Japan. The system provides portal, e-mail, bookmarks, scheduling, bulletin board, document management, and other functions. An input validation error vulnerability exists in Cybozu Garoon, which stems from insufficient user-supplied inpu...

InHand Networks InRouter302 Input Validation Error Vulnerability (CNVD-2022-59186)

InHand Networks InRouter Series is a series of routers from InHand Networks, Inc. InHand Networks InRouter302 version V3.5.4 is vulnerable to an input validation error that originates in the libnvram.so nvramimport function userdefineinit function in the userdefinetimeoutnvram variable has...

InHand Networks InRouter302 Input Validation Error Vulnerability (CNVD-2022-59187)

InHand Networks InRouter Series is a series of routers from InHand Networks, Inc. InHand Networks InRouter302 version V3.5.4 is vulnerable to an input validation error in the libnvram.so nvramimport function. userdefineprint function in the userdefinetimeoutnvram variable has an incorrect input...

Janet 输入验证错误漏洞

Janet is a functional and imperative programming language and bytecode interpreter. A security vulnerability exists in Janet version 1.22.0 that stems from incorrectly handling arrays...

MGASA-2022-0183 Updated xmlrpc-c packages fix security vulnerability

xmltokimpl.c in Expat aka libexpat before 2.4.5 lacks certain validation of encoding, such as checks for whether a UTF-8 character is valid in a certain context. CVE-2022-25235...

github.com/gofiber/fiber/v2 vulnerable to Origin Validation Error

The Olivier Poitrey Go CORS handler through 1.3.0 actively converts a wildcard CORS policy into reflecting an arbitrary Origin header value, which is incompatible with the CORS security design, and could lead to CORS misconfiguration security problems...