SerenityOS 输入验证错误漏洞

SerenityOS is a graphical Unix-like operating system for x86 computers. SerenityOS has an input validation error vulnerability that stems from the presence of an integer overflow vulnerability...

Keycloak 输入验证错误漏洞

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. A security vulnerability exists in Keycloak that stems from the presence of an open redirection vulnerability...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android has an information disclosure vulnerability that can be exploited by attackers to obtain sensitive information...

Apache Airflow Sqoop Provider Input Validation Error Vulnerability

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Sqoop Provider...

Huawei BiSheng-WNM 输入验证错误漏洞

The Huawei BiSheng-WNM FW is a Huawei printer from Huawei China. A denial of service vulnerability exists in Huawei BiSheng-WNM FW version 3.0.0.325, which can be exploited by an attacker to cause a service exception on the device and lead to a denial of service condition...

IBM MQ 输入验证错误漏洞

IBM MQ IBM WebSphere MQ is a messaging middleware product from International Business Machines IBM. The product focuses on providing a reliable, validated messaging backbone for service-oriented architectures SOA. An input validation error vulnerability exists in IBM MQ for HPE NonStop version...

Huawei BiSheng-WNM 输入验证错误漏洞

The Huawei BiSheng-WNM FW is a Huawei printer from Huawei China. A denial of service vulnerability exists in Huawei BiSheng-WNM FW version 3.0.0.325, which can be exploited by attackers to cause a denial of service...

PT-2023-2005 · Hitachi · Hitachi Ops Center Analyzer +1

Name of the Vulnerable Software and Affected Versions: Hitachi Infrastructure Analytics Advisor versions 2.0.0-00 through 4.4.0-00 Hitachi Ops Center Analyzer versions 10.0.0-00 through 10.9.0-00 Description: The issue is related to improper certificate validation, which allows a Man in the Middl...

CVE-2022-45139: Origin Validation Error

A CORS Misconfiguration in the web-based management allows a malicious third party webserver to misuse all basic information pages on the webserver. In combination with CVE-2022-45138 this could lead to disclosure of device information like CPU diagnostics. As there is just a limited amount of...

Apache Airflow 输入验证错误漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Google Provider...

Apache Airflow 输入验证错误漏洞

Apache Airflow is the United States Apache Apache Foundation's set of open source platform for creating, managing and monitoring workflow. The platform is scalable and dynamic monitoring and other characteristics. An input validation error vulnerability exists in Apache Airflow Hive Provider...

PTC ThingWorx Edge输入验证错误漏洞

PTC ThingWorx Edge is a complete end-to-end technology platform designed for the Industrial Internet of Things IIoT from PTC Corporation, USA. An input validation error vulnerability exists in ThingWorx Edge C-SDK version 2.2.12.1052 and prior versions, which stems from an integer overflow. An...

Elastic Kibana 输入验证错误漏洞

Elastic Kibana is an application from the Dutch company Elastic. A free and open user interface that enables you to visualize Elasticsearch data and lets you navigate through the Elastic Stack. A security vulnerability exists in Elastic Kibana. An attacker exploited the vulnerability to cause use...

Linux kernel 输入验证错误漏洞

Linux kernel is the kernel used by Linux, the open source operating system of the Linux Foundation in the United States. A security vulnerability exists in the Linux kernel that stems from an integer overflow in afummioregiongetbyoffset in drivers/fpga/dfl-afu-region.c. The vulnerability is cause...

SAP Solution Manager Input Validation Error Vulnerability

SAP Solution Manager is a set of system monitoring, SAP support desktop, self-service, ASAP implementation and other functions of the German SAP company as a system management platform. An input validation error vulnerability exists in SAP Solution Manager version 720, which stems from insufficie...

IBM WebSphere Application Server 输入验证错误漏洞

IBM WebSphere Application Server WAS is an application server product from International Business Machines IBM. The product is a platform for JavaEE and Web services applications and is the foundation of the IBM WebSphere software platform. An input validation error vulnerability exists in IBM...

Mozilla PollBot 输入验证错误漏洞

Mozilla PollBot is a microservice from the Mozilla Foundation. Freeing humans from the onerous task of polling for status during Firefox releases, Mozilla PollBot versions prior to 1.4.6 have an open redirect vulnerability that stems from the system not doing a reasonable job of targeting jumps,...

Intel Integrated Baseboard Management Controller 输入验证错误漏洞

Intel Integrated Baseboard Management Controller is an integrated baseboard management controller from Intel Corporation USA. A security vulnerability exists in Intel Integrated Baseboard Management Controller BMC version egs-0.91-179, bhs-04-45, which originates from incorrect validation of user...

SUSE CVE-2011-2512

The virtioqueuenotify in qemu-kvm 0.14.0 and earlier does not properly validate the virtqueue number, which allows guest users to cause a denial of service guest crash and possibly execute arbitrary code via a negative number in the Queue Notify field of the Virtio Header, which bypasses a signed...

SUSE CVE-2018-6406

The function ParseVP9SuperFrameIndex in common/libwebmutil.cc in libwebm through 2018-01-30 does not validate the childframelength data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service heap-based buffer over-read and later out-of-bounds...