Cybozu Garoon input validation vulnerability

A security vulnerability exists in Attaching Files in Cybozu Garoon, a portal-based OA office system from Cybozu Japan. An attacker could use this vulnerability to obtain data from the attached files...

Huawei Smartphone: Input verification error vulnerability

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI suffers from an out-of-bounds address access vulnerability, which can be exploited by attackers to cause random kernel address access...

Huawei Smartphone: Input verification error vulnerability

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI is vulnerable to an integer overflow vulnerability, which can be exploited by attackers to cause the execution of certain code...

Huawei Smartphone: Input verification error vulnerability

Huawei Emui is an Android-based mobile operating system. Huawei Magic UI is the operating system for Honor phones. Huawei EMUI/Magic UI has a Bluetooth protocol stack vulnerability that can be exploited by attackers to cause an infinite loop in DoS...

MB connect line mbDIALUP: Input validation error vulnerability

MB connect line mbDIALUP is an application from MB connect line. Developed by MB Connect Line GmbH for use by a Software Informer user. An input validation error vulnerability exists in MB connect line mbDIALUP, which originates in MB connect line mbDIALUP version = 3.9R0.0, and can be exploited ...

Multiple Trend Micro Products Input Validation Error Vulnerability

Trend Micro OfficeScan XG is a distributed anti-virus software, and Trend Micro Apex One is an endpoint security protection software that provides automated threat detection and response. Trend Micro Worry-Free Business Security is an enterprise-class information security protection solution...

util-linux input validation error vulnerability

util-linux is an open source package. An input validation error vulnerability exists in util-linux version 2.37.1, which stems from an integer overflow in util-linux. An attacker can exploit this vulnerability to cause a buffer overflow by using system resources in a manner that results in a larg...

FreeRDP has a vulnerability related to input validation errors

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP by the FreeRDP Freerdp team. FreeRDP suffers from an input validation error vulnerability that stems from clipboard redirection being enabled by default. An attacker could read arbitrary files from a connected client...

Eclipse Mosquitto input validation vulnerability

Eclipse Mosquitto is a set of open source messaging agent software from the Eclipse Foundation.An input validation error vulnerability exists in Eclipse Mosquitto 2.07 and earlier versions, which allows an attacker to crash the server by sending a PUBLISH packet with subject length = 0...

OpenStack input validation error vulnerability

OpenStack is a cloud platform management program developed by the National Aeronautics and Space Administration NASA in collaboration with Rackspace in the United States. Openstack Nova suffers from an input validation error vulnerability that allows remote attackers to exploit the vulnerability ...

JustArchiNET ArchiSteamFarm: Input validation error vulnerability

ArchiSteamFarm is a C application whose main purpose is to idle Steam cards from multiple accounts simultaneously. An input validation error vulnerability exists in JustArchiNET ArchiSteamFarm. No information about this vulnerability is available at this time, so stay tuned to CNNVD or vendor...

tinyexr: Input validation error vulnerability

tinyexr is a small library for loading and saving OpenEXR .exr images. tinyexr version 0.9.5 suffers from a denial-of-service vulnerability. The vulnerability stems from an array indexing error in the tinyexr::DecodeEXRImage component. An attacker could exploit this vulnerability to cause a denia...

Exiv2 input validation error vulnerability

Exiv2 is a cross-platform C++ library and command line utility for managing image metadata. An integer overflow vulnerability exists in CrwMap::encode0x1810 in Exiv2 version 0.27.3. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted image file...

mod_auth_openidc: Input validation error vulnerability

modauthopenidc is a software application. It is an authentication/authorization module for the Apache 2.x HTTP server that is used as an OpenID Connect dependency to authenticate users against the OpenID Connect provider. Previous versions of modauthopenidc were vulnerable to an input validation...

Facebook HHVM input validation vulnerability

Facebook HHVM aka HipHop Virtual Machine is a virtual machine from Facebook that significantly improves the performance of PHP loading dynamic pages. Facebook HHVM is vulnerable to a buffer overflow vulnerability that can be exploited by attackers to perform out-of-bounds writes on the heap,...

Huawei OxfordS-AN00A: Input validation error vulnerability

Huawei OxfordS-AN00A is a smartphone from Huawei China.The Huawei OxfordS-AN00A is vulnerable to an input validation error, which stems from a missing parameter checksum. An attacker could trick users into installing a malicious app, which could modify specific parameters and cause the system to...

Apple macOS Big Sur: Input validation vulnerability

Apple macOS Big Sur is a mobile application app from Apple USA. Apple macOS Big Sur 11.5 suffers from an input validation error vulnerability that stems from insufficient input validation provided to users in Crash Reporter. The vulnerability allows local users to elevate privileges...

Apple macOS Input Verification Vulnerability

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. An input validation error vulnerability exists in Apple macOS, which can be exploited by a remote attacker to trigger an integer overflow and execute arbitrary code on the target system via a specially crafte...

Redis input validation vulnerability

Redis is an open source ANSI C, network-enabled, memory-based, and persistent logging, Key-Value storage database with a multilingual API. The vulnerability can be exploited to attack 32-bit Redis programs running on 32-bit systems by combining the BIT command with the proto-max-bulk-len...

Apple macOS Big Sur input validation error vulnerability

Apple macOS Big Sur is a mobile application app from Apple USA Inc. Apple macOS Big Sur 11.5 suffers from an Input Validation Error vulnerability that stems from insufficient validation of user-supplied input by the Model I/O subsystem. A remote attacker could exploit the vulnerability to trick a...