6067 matches found
SAP NetWeaver Application Server Java Input Validation Error Vulnerability
SAP NetWeaver Application Server Java is a German SAP SAP company provides a Java runtime environment of the application server. The product is mainly used to develop and run Java EE applications. A security vulnerability exists in SAP NetWeaver Application Server Java. No detailed vulnerability...
Juniper Networks Mist Cloud UI Input Validation Error Vulnerability
Juniper Networks Mist Cloud is a Juniper Networks USA platform that simplifies cloud management and helps users prevent vendor and complexity lock-in. It provides cost and utilization reporting, RBAC, management, provisioning, orchestration, monitoring and automation for servers across public and...
CVE-2020-9903: Origin Validation Error
A logic issue was addressed with improved restrictions. This issue is fixed in iOS 13.6 and iPadOS 13.6, Safari 13.1.2. A malicious attacker may cause Safari to suggest a password for the wrong domain...
KB4580330: Windows 10 Version 1803 October 2020 Security Update
The remote Windows host is missing security update 4580330. It is, therefore, affected by multiple vulnerabilities : - A spoofing vulnerability exists when Windows incorrectly validates file signatures. An attacker who successfully exploited this vulnerability could bypass security features and...
Cisco Small Business SPA500 Series IP Phones Input Validation Error Vulnerability
Cisco Small Business SPA500 Series IP Phones is an SPA500 series IP phone from Cisco USA. An input validation error vulnerability exists in Cisco Small Business SPA500 Series IP Phones using firmware version 7.6.2SR5 and earlier. The vulnerability stems from the fact that the device comes with...
Cisco Identity Services Engine Cross-Site Scripting Vulnerability (CNVD-2020-61955)
Cisco Identity Services Engine ISE is an identity-based environment awareness platform ISE Identity Services Engine from Cisco. The platform collects real-time information from the network, users and devices, and develops and enforces policies to regulate the network. A cross-site scripting...
CVE-2020-26527: Origin Validation Error
An issue was discovered in API/api/Version in Damstra Smart Asset 2020.7. Cross-origin resource sharing trusts random origins by accepting the arbitrary 'Origin: example.com' header and responding with 200 OK and a wildcard 'Access-Control-Allow-Origin: ' header...
Pexip Infinity Input Validation Error Vulnerability (CNVD-2020-55174)
Pexip Infinity is a video conferencing cloud collaboration platform from Norway's pexip, a video communications software that organizations can deploy in their IT infrastructure, public or private cloud, or any hybrid combination to enable everyone to have their own personal high-quality video,...
Google TensorFlow Input Validation Error Vulnerability (CNVD-2020-55182)
Google TensorFlow is a suite of end-to-end open source platforms for machine learning from Google USA. An input validation error vulnerability exists in Tensorflow versions prior to 1.15.4, 2.0.3, 2.1.2, 2.2.1, 2.3.1, and 2.3.1, which stems from the program's failure to adequately perform path...
PYSEC-2020-272
In Tensorflow before versions 2.2.1 and 2.3.1, if a user passes a list of strings to dlpack.todlpack there is a memory leak following an expected validation failure. The issue occurs because the status argument during validation failures is not properly checked. Since each of the above methods ca...
VITToken Number Error Vulnerability
VITToken is an Ether-based digital currency. An input validation error vulnerability exists in the 'mintToken' function in VITToken's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...
Mozilla Rust Input Validation Error Vulnerability (CNVD-2021-30571)
Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2. The vulnerability stems from the Chunk implementation, where unit is executed without checking the size of the array. No details of the vulnerability are availab...
SmartHomeCoin Digital Error Vulnerability
SmartHomeCoin is an Ether-based digital currency. An input validation error vulnerability exists in the 'mintToken' function in SmartHomeCoin's smart contract implementation. An attacker could use this vulnerability to set the balance of any user to an arbitrary value...
Mozilla Firefox Input Validation Error Vulnerability (CNVD-2020-55000)
Mozilla Firefox is an open source web browser from the Mozilla Foundation in the United States. An input validation error vulnerability exists in Mozilla Firefox. The vulnerability originates from a network system or product that does not properly validate input data. A remote attacker could...
Mozilla Rust Input Validation Error Vulnerability (CNVD-2021-30574)
Rust is a general-purpose, compiled programming language. An input validation error vulnerability exists in Mozilla Rust version 0.6.2, which can be exploited by an attacker to cause an error in the Chunk implementation when constructing arrays using without checking the array size...
SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53159)
SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker to cause an application crash via a specially crafted HPGL file...
SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53158)
SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker to cause an application crash via a specially crafted HPGL file...
CVE-2020-15773: Origin Validation Error
An issue was discovered in Gradle Enterprise before 2020.2.4. Because of unrestricted cross-origin requests to read-only data in the Export API, an attacker can access data as a user for the duration of the browser session after previously explicitly authenticating with the API...
SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53170)
SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker to cause an application crash via a specially crafted PDF file...
SAP 3D Visual Enterprise Viewer Input Validation Error Vulnerability (CNVD-2020-53174)
SAP 3D Visual Enterprise Viewer is a free 3D visualization viewer for Windows. An input validation error vulnerability exists in SAP 3D Visual Enterprise Viewer 9, which can be exploited by an attacker via a specially crafted SKP file to cause the application to crash...