Intel AMT Input Validation Error Vulnerability (CNVD-2020-34705)

Intel Active Management Technology AMT is a set of hardware-based computer remote active management technology software from Intel Intel. An input validation error vulnerability exists in Intel AMT. An attacker could exploit this vulnerability to cause a denial of service...

Linux kernel input validation error vulnerability (CNVD-2020-36521)

Linux kernel is the kernel used by Linux, the open source operating system released by the Linux Foundation in the United States. An input validation error vulnerability exists in the drivers/tty/vt/keyboard.c file in Linux kernel 5.7.1 and earlier. A local attacker could exploit this vulnerabili...

LibreOffice Input Validation Error Vulnerability (CNVD-2020-35943)

LibreOffice is an open source office software suite from The Document Foundation TDF. The product includes applications such as Writer text documents, Calc spreadsheets and Impress presentations. A security vulnerability exists in LibreOffice versions prior to 6.4.4. An attacker can exploit the...

Cheetah free wifi input validation error vulnerability

Cheetah free wifi is a calculator wireless network sharing software from China Cheetah Mobile Cheetah. An input validation error vulnerability exists in the liebaonat.sys file in Cheetah free wifi version 5.1, which originates from the program not validating the input value of IOCtl 0x830020f8,...

Zephyr Input Validation Error Vulnerability (CNVD-2020-35963)

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. An input validation error vulnerability exists in Zephyr version 2.2.0 and later fixed in version 2.3.0. An attacker can exploit this vulnerability to cause a denial of service with arbitrary CoAP...

Elliptic package input validation error vulnerability

Elliptic package is a JavaScript-based elliptic curve cryptographic library. A security vulnerability exists in Elliptic package version 6.5.2 Node.js. An attacker can exploit the vulnerability to elevate privileges...

ntp input validation error vulnerability

Network Time Protocol NTP, Network Time Protocol is a network protocol that synchronizes the clocks of two computers by exchanging packets. A security vulnerability exists in ntpd in versions prior to ntp 4.2.8p14 and 4.3.100 prior to 4.3.x. A remote attacker could exploit this vulnerability by...

bind: A logic error in code which checks TSIG validity can be used to trigger an assertion failure in tsig.c

An assertion failure was found in BIND, which checks the validity of messages containing TSIG resource records. This flaw allows an attacker that knows or successfully guesses the name of the TSIG key used by the server to use a specially-crafted message, potentially causing a BIND server to reac...

Google Android Media Framework Input Validation Error Vulnerability (CNVD-2020-34461)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. A security vulnerability exists in Media Framework in Android version 10.0. An attacker can exploit this vulnerability t...

Cisco IOS and IOS XE Input Validation Error Vulnerability (CNVD-2020-31975)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation error vulnerability exists in the implementation of the CIP feature in Cisco IOS Software and Cisco IOS XE Software, which stems from the program's failure to adequately handle...

Google Chrome Payments Input Validation Error Vulnerability

Google Chrome is a web browser from Google Inc. Payments is one of the payment components. A security vulnerability exists in Payments in Google Chrome versions prior to 83.0.4103.97 Android. The vulnerability can be exploited by remote attackers to spoof the contents of the Omnibox URL bar with...

Cisco IOS and IOS XE Input Validation Error Vulnerability (CNVD-2020-31827)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation error vulnerability exists in the Tool Command Language Tcl parser in Cisco IOS Software and Cisco IOS XE Software, which stems from a lack of validation of input data. An attacker...

Cisco IOS and IOS XE Input Validation Error Vulnerability (CNVD-2020-32903)

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. The Session Initiation Protocol SIP inventory in Cisco IOS and Cisco IOS XE is vulnerable to an input validation error, which arises from a program that does not adequately check the integrity of...

Cisco Webex Network Recording Player and Cisco Webex Player Input Validation Error Vulnerability (CNVD-2020-31990)

Cisco Webex Network Recording Player is a player for playing video conference recordings from Cisco USA. An input validation error vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player Release prior to 3.0 MR3 Security Patch 2 and prior to 4.0 MR3 for Windows-based...

Google Android Media Framework Input Validation Error Vulnerability (CNVD-2020-34462)

Android is a Linux-based open source operating system from Google and the Open Handset Alliance OHA in the U.S. Media Framework is one of the multimedia development frameworks. A security vulnerability exists in Media Framework in Android version 10.0. An attacker could exploit this vulnerability...

Cisco IOS XE Software Input Validation Error Vulnerability

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. An input validation error vulnerability exists in the Web UI in Cisco IOS XE Software, which arises from the program not properly validating user input. An attacker could exploit t...

Cisco Webex Network Recording Player and Cisco Webex Player Input Validation Error Vulnerability (CNVD-2020-31968)

Cisco Webex Network Recording Player is a player for playing video conference recordings from Cisco USA. An input validation error vulnerability exists in Cisco Webex Network Recording Player and Cisco Webex Player for Windows-based platforms. An attacker can send a malicious ARF or WRF file via ...

Cisco Catalyst 9800 Series Wireless Controllers IOS XE Input Validation Error Vulnerability (CNVD-2020-31958)

Cisco IOS XE is the United States Cisco Cisco company's set of operating system developed for its network equipment. An input validation error vulnerability exists in the IEEE 802.11w Protected Management Frames handling of IOS XE Software in Cisco Catalyst 9800 Series Wireless Controllers. An...

Multiple Cisco Products Input Validation Error Vulnerability (CNVD-2020-32900)

Cisco NX-OS Software and so on are products of Cisco Corporation.Cisco NX-OS Software is a set of data center-grade operating system software used by switches.Cisco IOS is a set of operating systems developed for its network devices.IOS XE is a set of operating systems developed for its network...

Cisco IOS and IOS XE Input Validation Error Vulnerability

Cisco IOS and IOS XE are a set of operating systems developed by Cisco for its network devices. An input validation error vulnerability exists in the implementation of IKEv2 in Cisco IOS Software and Cisco IOS XE Software, which stems from the program's failure to properly handle specially crafte...