Oracle Database Server 输入验证错误漏洞

Oracle Database Server is a relational database management system from Oracle Corporation USA. The database management system provides data management, distributed processing, and other functions.An unspecified vulnerability exists in the Java VM component of Oracle Database Server versions...

Oracle Java SE 输入验证错误漏洞

Java SE is short for Java Platform Standard Edition, which is used to develop and deploy Java applications on desktops, servers, and embedded devices and in real-time environments.Oracle Java SE Unauthorized Access Vulnerability. An attacker could exploit this vulnerability to allow unauthenticat...

Oracle MySQL Cluster 输入验证错误漏洞

MySQL Cluster is a write-scalable, real-time, ACID-compliant transactional database designed to guarantee 99.999% availability. An input validation error vulnerability exists in Oracle MySQL Cluster, which can be exploited by an attacker to execute code in the context of a service account...

Oracle MySQL Server输入验证错误漏洞

Oracle MySQL Server is a relational database from Oracle Corporation. A denial of service vulnerability exists in Oracle MySQL Server, which can be exploited by an attacker to cause the MySQL server to hang or crash frequently and repeatedly...

udisks 输入验证错误漏洞

Udisks is a daemon for querying and managing storage devices. An input validation error vulnerability exists in Udisks, which arises from mismanagement of system resources e.g., memory, disk space, files, etc. by a networked system or product...

Mozilla Firefox Input Validation Error Vulnerability (CNVD-2021-88948)

Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. A security vulnerability exists in the fastify-static module versions 4.2.4 through 4.4.1, which can be exploited by an attacker to redirect a user to an arbitrary website using a double-slash followed...

Uffizio Gps Tracker 输入验证错误漏洞

Uffizio Gps Tracker is a Gps tracker from Uffizio India. The Uffizio GPS Tracker software suffers from an input validation error vulnerability that stems from the software's lack of effective filtering and validation of URL requests. An attacker could use this vulnerability to construct URLs with...

Red Hat 3scale API Management Platform 输入验证错误漏洞

Red Hat 3scale API Management Platform is an API management infrastructure platform from Red Hat. It enables rapid API sharing, protection, distribution, control, and monetization. Red Hat 3scale API Management Platform has an input validation error vulnerability vulnerability, there is currently...

PlaceOs Authentication Service Input Validation Error Vulnerability

PlaceOs Authentication Service is a PlaceOs authentication service and Api gatekeeper. PlaceOs Authentication Service is vulnerable to an input validation error, which can be exploited by attackers to open redirects...

Juniper Networks CtpView输入验证错误漏洞

Juniper Networks CtpView is a network management system from Juniper Networks, Inc. It is used to enable managers to deploy circuits while monitoring the network. An input validation error vulnerability exists in the CTPView server that stems from the product's failure to implement HSTS detection...

Intel SGX SDK 输入验证错误漏洞

The Intel SGX SDK is a software development kit based on SGX Intel Software Security Extensions technology from Intel U.S.A. An input validation error vulnerability exists in the Intel SGX SDK, which was reported by Intel in the Intel Software Protection Extensions SGX Software Development Kit SD...

vaadin-server 输入验证错误漏洞

vaadin-server is a Vaadin open source application . A platform for rapid development of Web applications on a Java backend . An input validation error vulnerability exists in vaadin-server that stems from a heap error in the service's DataCommunicator class when too much data is submitted...

Juniper Networks Junos OS 输入验证错误漏洞

Juniper Networks Junos OS is a Juniper Networks network operating system for the company's hardware devices. The operating system provides a secure programming interface and the Junos SDK. A security vulnerability exists in Juniper Networks Junos OS that originates from an incorrect input...

GHSA-QF6Q-QFWP-VP44 Origin Validation Error in Magento 2

An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings merchant ID, secret key, etc. and therefor...

Microsoft Exchange Server 输入验证错误漏洞

Microsoft Exchange Server is the United States Microsoft Microsoft company's set of e-mail service program. It provides email access, storage, forwarding, voicemail, email filtering and screening, and other features. An input validation error vulnerability exists in Microsoft Exchange Server. The...

MediaWiki 输入验证错误漏洞

MediaWiki is a suite of free and freely available web-based Wiki engines from the MediaWiki Foundation. The product can be used to deploy internal knowledge management and content management systems. MediaWiki suffers from an input validation error vulnerability that stems from supervisory action...

Aruba Instant Path Traversal Vulnerability

Aruba Instant is a wireless network. Aruba Instant provides the only Wi-Fi solution that is easy to set up.A path traversal vulnerability exists in Aruba Instant, which stems from an input validation error when processing directory traversal sequences in the on-the-fly command line interface. An...

Redis input validation error vulnerability

Hiredis is a C client for Redis databases. Hiredis suffers from a security vulnerability that allows attackers to provide maliciously crafted or corrupted RESP, mult-bulk protocol data that can lead to integer overflows. No detailed vulnerability details are currently available...

CVE-2021-37966: Origin Validation Error

Inappropriate implementation in Compositing in Google Chrome on Android prior to 94.0.4606.54 allowed a remote attacker to spoof the contents of the Omnibox URL bar via a crafted HTML page...

CVE-2021-37967: Origin Validation Error

Inappropriate implementation in Background Fetch API in Google Chrome prior to 94.0.4606.54 allowed a remote attacker who had compromised the renderer process to leak cross-origin data via a crafted HTML page...