FreeRDP Input Validation Error Vulnerability (CNVD-2020-28988)

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP suffers from an input validation error vulnerability that stems from a network system or product not properly validating incoming data, which can be exploited by an attacker to cause an...

VanDyke Software SecureCRT Input Validation Error Vulnerability

VanDyke Software SecureCRT is a suite of SSH, Telnet client and virtual terminal software from VanDyke Software, USA. An input validation error vulnerability exists in VanDyke Software SecureCRT versions prior to 8.7.2, which can be exploited by remote attackers to execute arbitrary code...

Bitdefender Engines Input Validation Error Vulnerability

Bitdefender Engines is an antivirus engine from the Romanian company Bitdefender. An input validation error vulnerability exists in the cevakrnl.rv0 module in Bitdefender Engines versions prior to 7.84063, which can be exploited by an attacker to cause a denial of service...

FreeRDP Input Validation Error Vulnerability

FreeRDP is an open source implementation of the Remote Desktop Protocol RDP from the FreeRDP team. FreeRDP is vulnerable to an input validation error. The vulnerability stems from a network system or product that does not properly validate incoming data. An attacker can exploit the vulnerability ...

Apache Camel Input Validation Error Vulnerability

Apache Camel is the United States Apache Apache Software Foundation of a set of open source based on Enterprise Integration Pattern Enterprise Integration Pattern, referred to as EIP integration framework. The framework provides Enterprise Integration Pattern Java objects POJO implementation , an...

Palo Alto Networks PAN-OS Input Validation Error Vulnerability (CNVD-2020-31585)

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An input validation error vulnerability exists in the GlobalProtect component of Palo Alto Networks PAN-OS. The vulnerability originates from a network system or product that does not...

Microsoft ASP.NET Core Input Validation Error Vulnerability

Microsoft Visual Studio and Microsoft ASP.NET Core are both products of Microsoft Corporation, USA. Microsoft Visual Studio is a family of development tool suites and a largely complete development toolset that includes most of the tools needed throughout the software lifecycle. Microsoft ASP.NET...

Palo Alto Networks PAN-OS Input Validation Error Vulnerability

Palo Alto Networks PAN-OS is an operating system developed by Palo Alto Networks for its firewall appliances. An input validation error vulnerability exists in the configuration daemon in Palo Alto Networks PAN-OS. An attacker could exploit this vulnerability with a specially crafted request to...

Cellebrite Restricted Desktop Escape and Escalation of User Privilege

Vulnerability Details Affected Vendor: Cellebrite Affected Product: UFED Affected Version: 5.0 - 7.5.0.845 Platform: Embedded Windows CWE Classification: CWE-269: Improper Privilege Management, CWE-20: Input Validation Error CVE ID: CVE-2020-12798 2. Vulnerability Description Cellebrite UFED...

Storefront 3.12 - SAML authentication is not working.when using IDP like Forge Rock

Storefront 3.12 - SAML authentication is not working with IDP like Forge Rock. Error Message on Store Front Page Error Message: "There was a Failure with mapped account." Following Error message is thrown in the Event Viewer The security token failed validation...

Cellebrite UFED 7.5.0.845 Desktop Escape / Privilege Escalation Vulnerability

Cellebrite UFED device implements local operating system policies that can be circumvented to obtain a command prompt. From there privilege escalation is possible using public exploits. Versions 5.0 through 7.5.0.845 are affected. Title: Cellebrite Restricted Desktop Escape and Escalation of User...

FreeBSD Input Validation Error Vulnerability

FreeBSD is a set of Unix-like operating systems from the FreeBSD Foundation. An input validation error vulnerability exists in FreeBSD, which arises from a program's failure to adequately validate the length of a packet, and can be exploited by a remote attacker to execute arbitrary code by sendi...

Red Hat Keycloak Input Validation Error Vulnerability (CNVD-2020-41186)

Red Hat Keycloak is a suite of software from Red Hat, Inc. that provides authentication and management capabilities for modern applications and services. An input validation error vulnerability exists in ObjectInputStream in Red Hat Keycloak versions prior to 11.0.0, which stems from the program...

SAP Business Objects Business Intelligence Platform Input Validation Error Vulnerability

SAP Business Objects Business Intelligence Platform is a suite of business intelligence software and enterprise performance solutions from SAP, Germany. The product features report generation, analytics, and data visualization. An input validation error vulnerability exists in SAP Business Object...

SAP Adaptive Server Enterprise Input Validation Error Vulnerability

SAP Adaptive Server Enterprise is a relational database server from SAP. An input validation error vulnerability exists in SAP Adaptive Server Enterprise, which arises when the program does not perform the required validation checks on an authenticated user. An attacker could exploit this...

Zephyr Input Validation Error Vulnerability (CNVD-2020-35003)

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. An input validation error vulnerability exists in the Kscan subsystem in Zephyr 2.1.0 and later fixed in version 2.2.0, which stems from the program failing to perform sufficient parameter validation...

Zephyr Input Validation Error Vulnerability

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. Zephyr suffers from an input validation error vulnerability. An attacker could use this vulnerability to bypass security checks performed by the system call handler, potentially causing a denial of...

Zephyr Input Validation Error Vulnerability (CNVD-2020-29631)

Zephyr is an open source, small, scalable real-time operating system from the Linux Foundation. Zephyr suffers from an input validation error vulnerability that stems from the program not performing parameter validation when making multiple system calls. No details of the vulnerability are...

slp-validate Input Validation Error Vulnerability

slp-validate is a lightweight SLP Simple Ledger Protocol validator with features such as pre-broadcast validation and burn protection. an input validation error vulnerability exists in slp-validate. The vulnerability stems from a network system or product that does not properly validate incoming...

Multiple WAVLINK Products Input Validation Error Vulnerability

WAVLINK WL-WN579G3 and others are a wireless network signal extender from China's RuiYin Technology WAVLINK. A security vulnerability exists in WAVLINK WL-WN579G3 M79X3.V5030.180719 version, WL-WN575A3 RPT75A3.V4300.180801 version and WL-WN530HG4 M30HG4.V5030.191116 version. An attacker can explo...