TLS certificate validation error

In mellium.im/xmpp, an attacker capable of spoofing DNS TXT records can redirect a WebSocket connection request to a server under their control without causing TLS certificate verification to fail. This occurs because the wrong host name is selected during this verification...

CVE-2022-0108: Origin Validation Error

Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to leak cross-origin data via a crafted HTML page...

Schneider Electric Modicon M218 Logic Controller 输入验证错误漏洞

Schneider Electric Modicon M218 Logic Controller, a programmable logic controller from Schneider Electric, France, is vulnerable to An input validation error vulnerability can be exploited to send specially crafted packets to the controller via network port 1105/TCP, resulting in a denial of...

CVE-2022-0111: Origin Validation Error

Inappropriate implementation in Navigation in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to incorrectly set origin via a crafted HTML page...

Microweber 输入验证错误漏洞

Microweber is an online store management system that provides drag and drop functionality from the Microweber community in the United States. The system includes modules for adding products, images, and more. An input validation error vulnerability exists in Microweber that stems from an open...

Google Android输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google. Google Android 12 suffers from an input validation error vulnerability that can be exploited by an attacker to trigger a denial-of-service attack on a victim's device...

Magnolia CMS 输入验证错误漏洞

Magnolia CMS is an application from the Swiss company Magnolia. provides a website building framework Magnolia CMS has a security vulnerability that can be exploited by attackers to cause Open Redirect vulnerabilities and Cross Site Request Forgery CSRF to brute force and exfiltrate user...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google. An input validation error vulnerability exists in Google Android, which can be exploited by a local attacker to gain unauthorized access to media files in KnoxPrivacyNoticeReceiver via an implicit intent...

Google Android 输入验证错误漏洞

Google Android is a Linux-based open source operating system from Google, Inc. A security vulnerability exists in Google Android, which stems from a faulty access control vulnerability in the camera before Android R11, Android Q10 and Android P9. that allows untrusted applications to take picture...

Schneider Electric Modicon M340 输入验证错误漏洞

Schneider Electric Modicon Quantum and Schneider Electric Modicon M340 are both products of Schneider Electric, a French company. The Schneider Electric Modicon M340 is a mid-range PLC programmable logic controller for industrial processes and infrastructure. The vulnerability sends a specially...

CVE-2022-0120: Origin Validation Error

Inappropriate implementation in Passwords in Google Chrome prior to 97.0.4692.71 allowed a remote attacker to potentially leak cross-origin data via a malicious website...

Wireshark 输入验证错误漏洞

Wireshark formerly known as Ethereal is a set of network packet analysis software from the Wireshark team. The software's function is to intercept network packets and display detailed data for analysis.Wireshark is vulnerable to input validation errors, which can be exploited by attackers to...

Sonos One Speaker 数字错误漏洞

Sonos One Speaker is a smart speaker from Sonos USA. The Sonos One Speaker suffers from a numeric error vulnerability that stems from a lack of proper validation of user-supplied data, which could result in an integer underflow before writing to memory. An attacker can exploit this vulnerability ...

Google Golang 输入验证错误漏洞

Google Golang is a statically strongly typed, compiled language from Google, Inc. A memory consumption overflow vulnerability exists in Google Golang, which stems from a design or implementation impropriety in the code development process of a web-based system or product. An attacker could exploi...

MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a China-based MediaTek company. The MediaTek chips are vulnerable to an input validation error vulnerability that originates from an incorrect boundary check leading to information disclosure...

Stormshield Network Security 输入验证错误漏洞

Stormshield Network Security is a next-generation UTM Unified Threat Management firewall from Stormshield France. A security vulnerability exists in Stormshield Network Security SNS 3.x that stems from an integer overflow in the High Availability component...

MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a division of China's MediaTek Mediatek. A security vulnerability exists in the MediaTek chips, which is caused by an integer overflow in the ccu driver, which may result in memory corruption...

Intel 82599 Ethernet Series 输入验证错误漏洞

The Intel 82599 Ethernet Series Intel 82599 ES is a chip from Intel Corporation USA. The Intel 82599 Ethernet Series suffers from an input validation error vulnerability that stems from a potential security flaw in the Intel 82599 Ethernet Series controllers and adapters that could allow a denial...

MediaTek 芯片 输入验证错误漏洞

MediaTek chips are a variety of chips from MediaTek, a Chinese company MediaTek. The MediaTek chips are vulnerable to an input validation error vulnerability that originates from an incorrect boundary check leading to information disclosure...

Tobesoft Nexacro 输入验证错误漏洞

Tobesoft Nexacro is a unified framework-based OSMU single-source multi-purpose application development solution from Tobesoft Corporation in South Korea. An input validation error vulnerability exists in Tobesoft nexacro, which can be exploited by an attacker to copy files to the startup folder...