Wind River VxWorks Input Validation Error Vulnerability

Wind River VxWorks is an operating system from Wind River, Inc. the industry-leading real-time operating system for building embedded devices and systems. An input validation error vulnerability exists in Wind River VxWorks 7 that stems from the fact that this incorrect memory allocation could...

NVIDIA vGPU Software has a vulnerability related to input validation errors.

NVIDIA vGPU Software is a management software from NVIDIA that is used to provide GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. An input validation...

Nvidia Virtual GPU Manager has a input validation error vulnerability

Nvidia NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from Nvidia. An input validation error vulnerability exists in Virtual GPU Manager that originates from writing to a shared memory location and manipulating the data after validating it, which could result in a denial ...

MediaTek LinkIt SDK input validation error vulnerability

MediaTek LinkIt SDK is a MediaTek LinkIt open source application. An input validation error vulnerability exists in MediaTek LinkIt SDK versions prior to 4.6.1, which stems from an incorrect memory allocation can lead to arbitrary memory allocation, which can result in unexpected behavior such as...

F5 BIG-IP ASM Input validation error vulnerability

F5 BIG-IP ASM is a Web Application Firewall WAF from F5 USA that provides secure remote access, protects email, and simplifies Web access control while enhancing network and application performance. An input validation error vulnerability exists in BIG-IP ASM that stems from insufficient...

Aruba Networks AirWave Management Platform has a vulnerability in input validation.

Aruba Networks AirWave Management Platform is a suite of network management software for multi-vendor management from Aruba Networks. The software provides real-time monitoring, proactive alerting and historical data reporting. A security vulnerability exists in Aruba AirWave Management Platform...

NVIDIA vGPU Software has a vulnerability related to input validation errors.

NVIDIA vGPU Software is a management software from NVIDIA that is used to provide GPU capabilities to virtual machines. The software supports multiple virtual machines to access the host's GPU, providing graphics performance and application compatibility for virtual machines. An input validation...

uClibc-ng has a vulnerability related to input validation errors.

uclibc-ng is an application. Small C library for Linux. An input validation error vulnerability exists in versions prior to uClibc-ng 1.0.37, which stems from being susceptible to integer wrapping by the malloc-simple function. This incorrect memory allocation could lead to arbitrary memory...

Texas Instruments SimpleLink input validation error vulnerability

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products and can be exploited by an attacker to remotely execute code...

Nvidia vGPU Software has a vulnerability related to input validation errors.

NVIDIA vGPU Software is a management software from Nvidia, USA for providing GPU capabilities to virtual machines. An input validation error vulnerability exists in NVIDIA vGPU Software, which stems from an unvalidated input length, and can be exploited by an attacker to tamper with data or denia...

Texas Instruments SimpleLink input validation error vulnerability

Texas Instruments SimpleLink is an ultra-low power wireless microcontroller from Texas Instruments. An integer overflow or wrap-around vulnerability exists in multiple Texas Instruments products and can be exploited by an attacker to remotely execute code...

eCosCentric eCosPro input validation error vulnerability

eCosCentric eCosPro is a software application from eCosCentric, Inc. It combines the feature set, stability and quality of support required for commercial embedded application development with eCos. eCosCentric eCosPro Versions suffers from an Input Validation Error vulnerability that stems from ...

NXP MCUXpresso Software Development Kit: Input validation error vulnerability

The NXP MCUXpresso Software Development Kit is an application system from the Dutch company NXP. It is used to simplify and accelerate the development of applications with ARM's Cortex NXP-M based devices, including general purpose, crossover and Bluetooth microcontrollers. An input validation...

[SECURITY] [DSA 4906-1] chromium security update

------------------------------------------------------------------------- Debian Security Advisory DSA-4906-1 [email protected] https://www.debian.org/security/ Michael Gilbert April 27, 2021 https://www.debian.org/security/faq -...

Apache Superset Input Validation Error Vulnerability

Apache Superset up is the United States Apache company to provide a large distributed environment in the horizontal scaling design applications. An input validation error vulnerability exists in Apache Superset 1.0.1 and earlier versions, which arises from unchecked user input that opens a redire...

Redmine input validation error vulnerability

Redmine is a set of open source Web-based project management and defect tracking tools . The product provides project management , issue tracking and role-based access control and other features . An input validation error vulnerability exists in Redmine versions prior to 4.0.9, 4.1.x series...

IBM Spectrum Scale File Overwrite Vulnerability

IBM Spectrum Scale is a scalable data and file management solution from IBM USA based on IBM GPFS, an enterprise file management system optimized for petabyte-scale storage management. The product supports helping clients reduce storage costs while improving security and management efficiency in...

Huawei IPS Module and Huawei USG9500 have vulnerabilities in input validation.

Huawei IPS Module is an intrusion prevention system IPS module. Huawei USG9500 is a firewall appliance used in large environments. An information disclosure vulnerability exists in several Huawei products, which stems from a block that does not adequately validate input. An attacker with elevated...

LZ4 input validation error vulnerability

LZ4 is a lossless compression algorithm. LZ4 1:1.9.3-1 suffers from an input validation error vulnerability that stems from potential memory corruption due to an integer overflow bug that causes a memmove parameter to become negative...

SuiteCRM Log File Remote Code Execution

This module exploits an input validation error on the log file extension parameter. It does not properly validate upper/lower case characters. Once this occurs, the application log file will be treated as a php file. The log file can then be populated with php code by changing the username of a...