6067 matches found
Cisco Webex Meetings Input Validation Error Vulnerability
Cisco Webex Meetings is a video conferencing solution from Cisco. A security vulnerability exists in Cisco Webex Meetings and Cisco Webex Meetings Server that results from inadequate protection of sensitive participant information. An attacker could exploit the vulnerability to view sensitive...
Tobesoft Xplatform Input Validation Error Vulnerability
Tobesoft Xplatform is a set of Korean Tobesoft application development platform. The platform supports form and composite component inheritance, CSS autosetting, and multi-document interfaces. TOBESOFT XPLATFORM suffers from an input validation error vulnerability that originates when a command...
Cisco Webex Meetings Input Validation Error Vulnerability
Cisco Webex Meetings is a videoconferencing solution from Cisco. A security vulnerability exists in Cisco Webex Meetings and Cisco Webex Meetings Server, which results from synchronization issues between meetings and media services on vulnerable Webex websites. An attacker could exploit the...
Pallets Werkzeug has a vulnerability in input validation.
Werkzeug is a comprehensive library for WSGI web applications. werkzeug versions prior to 0.11.6 are vulnerable to redirection. An attacker could exploit the vulnerability to redirect users to an arbitrary url via a double slash in the URL...
Cisco Integrated Management Controller Input Validation Vulnerability
The Cisco Integrated Management Controller IMC is a baseboard management controller that provides embedded server management for Cisco UCS C-Series rackmount servers and Cisco S-Series storage servers. A remote code execution vulnerability exists in the API subsystem of the Cisco Integrated...
Puncsky Touchbase.ai Input Validation Error Vulnerability
Puncsky Touchbase.ai is a web platform for interpersonal relationships by Puncsky Individual Developers. Versions of touchbase.ai prior to 2.0 contain an input validation error vulnerability that can be exploited by attackers to compromise a website, and in some cases even lead to XSS attacks...
Intel(R) Server Board Elevation of Privilege Vulnerability
Intel Server Board is a server motherboard from Intel Corporation USA. An elevation of privilege vulnerability exists in IntelR Server Board S2600ST & S2600WF, which stems from an input validation error, and can be exploited by an attacker to potentially enable privilege escalation via local acce...
ILIAS Remote Code Execution Vulnerability
ILIAS is a powerful open source learning management system for developing and implementing web-based e-learning. A remote code execution vulnerability exists in ILIAS 6.4. The vulnerability stems from a parameter validation error on Magpie RSS data. An attacker can exploit this vulnerability to...
Multiple Apple Products Input Validation Error Vulnerability (CNVD-2020-61627)
Apple iOS and others are products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating system. tvOS is a smart TV operating...
Multiple Apple Products Input Validation Error Vulnerability
Apple iOS is a product of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple macOS High Sierra is a specialized operating system developed for Mac computers. tvOS is a smart TV operating system. A security vulnerability exists in a number of Apple products, which stem...
Apple macOS Mojave input validation error vulnerability (CNVD-2020-65930)
Apple macOS Mojave is a specialized operating system developed by Apple for Mac computers. Apple macOS Mojave has a security vulnerability that can be exploited by attackers to bypass sandboxing restrictions...
Wordpress Plugin Easy Registration Forms (ER Forms) Input Verification Error
WordPress is a blogging platform developed in PHP by the WordPress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL.Easy Registration Forms is a Wordpress plugin for implementing form effects. An input validation error vulnerability exists in the...
Pathval Input Validation Error Vulnerability
pathval is an Npm codebase for retrieving and setting objects based on String strings from the Chai.js team. A security vulnerability exists in pathval. No vulnerability details are available at this time...
Input validation error vulnerability in multiple Huawei products (CNVD-2020-68353)
Huawei HiRouter-CD30-10 and others are a wireless router from Huawei China. An input validation error vulnerability exists in multiple Huawei products. An attacker could use this vulnerability to cause service anomalies on affected devices within a local area network LAN...
Western Digital My Cloud Input Validation Error Vulnerability
Western Digital My Cloud is a personal cloud storage device from Western Digital. An input validation error vulnerability exists in Western Digital My Cloud NAS versions prior to 5.04.114, which stems from DsdkProxy.php failing to adequately sanitize and validate user input. No detailed...
Pulse Secure Pulse Connect Secure Input Validation Error Vulnerability (CNVD-2020-60092)
Pulse Secure Pulse Connect Secure a.k.a. PCS, formerly known as Juniper Junos Pulse is a suite of SSL VPN solutions from Pulse Secure in the United States. Pulse Connect Secure versions prior to 9.1R9 have an input validation error vulnerability that can be exploited by an attacker to execute an...
Exim Input Validation Error Vulnerability
Exim is an open source messaging agent MTA running on Unix systems that routes, forwards and delivers mail. An input validation error vulnerability exists in Exim versions 4.87 through 4.91. The vulnerability stems from a network system or product that does not properly validate incoming data. No...
CVE-2020-3864: Origin Validation Error
A logic issue was addressed with improved validation. This issue is fixed in iCloud for Windows 7.17, iTunes 12.10.4 for Windows, iCloud for Windows 10.9.2, tvOS 13.3.1, Safari 13.0.5, iOS 13.3.1 and iPadOS 13.3.1. A DOM object context may not have had a unique security origin...
Cisco Firepower Management Center Input Validation Error Vulnerability (CNVD-2021-05534)
Cisco Firepower Management Center FMC is a new generation of firewall management center software from Cisco. Cisco Firepower Management Center FMC suffers from an Input Validation Error vulnerability that stems from a failure to properly validate certificates. An attacker could exploit this...
CVE-2020-15682: Origin Validation Error
When a link to an external protocol was clicked, a prompt was presented that allowed the user to choose what application to open it in. An attacker could induce that prompt to be associated with an origin they didn't control, resulting in a spoofing attack. This was fixed by changing external...