utilitify input validation error vulnerability

utilitify is a utility program for working with collections such as objects, arrays and tuples numbers, strings, etc.. An input validation error vulnerability exists in versions of utilitify prior to 1.0.3. The vulnerability stems from a networked system or product that does not properly validate...

Opera Software Opera Input Validation Error Vulnerability

Opera Software Opera is a web browser from the Norwegian company Opera Software that supports multi-window browsing, customizable user interfaces, and more. An input validation error vulnerability exists in previous versions of Opera Software Opera 53 for Android-based platforms. The vulnerabilit...

minimist Input Validation Error Vulnerability

minimist is a command line parameter parsing tool. An input validation error vulnerability exists in minimist, which can be exploited by an attacker to add or modify properties of Object.prototype using the "constructor" or "proto" payload...

WAGO PFC200 Input Validation Error Vulnerability

The WAGO PFC 200 is a programmable logic controller PLC from the German company WAGO. An input validation error vulnerability exists in the cloud connectivity feature in WAGO PFC 200 using firmware versions 03.02.0214, 03.01.0713, and 03.00.3912. An attacker could exploit this vulnerability to ga...

Cisco AsyncOS Message Filtering DoS

The vulnerability of the message filtering function in Cisco AsyncOS software for Cisco Email Security Appliances and Cisco Content Security Management Appliances exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service interruption...

NVIDIA Virtual GPU Manager vGPU Input Validation Error Vulnerability

NVIDIA Virtual GPU Manager is an NVIDIA virtual GPU management software from NVIDIA. vGPU is one of the virtual FPU components. An input validation error vulnerability exists in the vGPU plug-in in NVIDIA Virtual GPU Manager all versions, which stems from the program failing to properly validate...

SAP Mobile Platform Input Validation Error Vulnerability

SAP Mobile Platform SMP is a set of mobile application development platform from SAP. An input validation error vulnerability exists in SAP Mobile Platform, which can be exploited by an attacker to cause a denial of service...

SAP Landscape Management Input Validation Error Vulnerability (CNVD-2020-18534)

SAP Landscape Management is a centralized SAP product management system from SAP. The system is used to centrally manage and configure SAP software systems running in physical, virtual, and cloud infrastructures. An input validation error vulnerability exists in SAP Landscape Management version...

CloudBees Jenkins Groovy Plugin Input Validation Error Vulnerability

CloudBees Jenkins Hudson Labs is the United States CloudBees company's set of Java-based development of continuous integration tools. The product is mainly used to monitor the continuous software version of the release/testing project and some timed tasks . Groovy Plugin is used in one of the...

openstack-octavia: amphora-agent not requiring client certificate

A certificate-validation error has been found in Octavia's amphora-agent, where an attacker with management-network access could bypass an amphora's client-certificate based authentication. Because the agent's HTTP server gunicorn had 'certreqs' set to 'True' instead of 'ssl.CERTREQUIRED',...

AsyncOS Input Validation Error Vulnerability in Multiple Cisco Products

Cisco Content Security Management Appliance SMA and so on are the products of the American Cisco Cisco company.Cisco Content Security Management Appliance is a set of content security management equipment. The appliance is mainly used to manage all the policies, reports, audit information, etc. o...

SUSE-SU-2019:3060-2 Security update for libpng16

This update for libpng16 fixes the following issues: Security issues fixed: - CVE-2019-7317: Fixed a use-after-free vulnerability, triggered when pngimagefree was called under pngsafeexecute bsc1124211. - CVE-2017-12652: Fixed an Input Validation Error related to the length of chunks bsc1141493...

Cisco FXOS Software Input Validation Error Vulnerability

Cisco FXOS Software is a set of firewall software from Cisco that runs in Cisco security appliances. An input validation error vulnerability exists in the CLI in Cisco FXOS Software, which arises from the program failing to perform sufficient input validation. A local attacker could exploit this...

DNS BIND Managed-Keys DoS

The vulnerability of the managed-keys function in the DNS BIND server is related to a key validation error, especially when an unsupported algorithm is used. Exploiting this vulnerability can allow a remote attacker to cause a service failure...

CVE-2020-8818: Origin Validation Error

An issue was discovered in the CardGate Payments plugin through 2.0.30 for Magento 2. Lack of origin authentication in the IPN callback processing function in Controller/Payment/Callback.php allows an attacker to remotely replace critical plugin settings merchant ID, secret key, etc. and therefor...

CVE-2020-8819: Origin Validation Error

An issue was discovered in the CardGate Payments plugin through 3.1.15 for WooCommerce. Lack of origin authentication in the IPN callback processing function in cardgate/cardgate.php allows an attacker to remotely replace critical plugin settings merchant ID, secret key, etc. and therefore bypass...

Input validation error vulnerability in multiple Huawei products (CNVD-2020-22010)

The Huawei HEGE-570, among others, is a smart screen device from the Chinese company Huawei Huawei. An input validation error vulnerability exists in multiple Huawei products. The vulnerability stems from the failure of the program to perform sufficient validation, and can be exploited by an...

CVE-2019-4640: Origin Validation Error

IBM Security Secret Server 10.7 processes patches, image backups and other updates without sufficiently verifying the origin and integrity of the code which could result in an attacker executing malicious code. IBM X-Force ID: 170046...

Plone Trust Management Issue Vulnerability

Plone is an open source content management system CMS built on the Zope application server. An input validation error vulnerability exists in Plone. The vulnerability stems from a network system or product that does not properly validate incoming data. No detailed vulnerability details are...

Multiple Microsemi Products Input Validation Error Vulnerability

Microsemi Symmetricom SyncServer S100 and others are a network time server from Microsemi, USA. A security vulnerability exists in several Symmetricom products that stems from the program's failure to properly handle authentication of callbacks. An attacker could exploit the vulnerability to...