1119 matches found
The vulnerability of the Core server component of Oracle WebLogic Server allows a attacker to trigger a service failure.
The vulnerability of the Core server component of Oracle WebLogic Server is related to insufficient validation of input data. Exploiting this vulnerability can allow attackers to cause service failures...
Deserialization of untrusted data
EasyUse MailHunter Ultimate’s cookie deserialization function has an inadequate validation vulnerability. Deserializing a cookie containing malicious payload will trigger this insecure deserialization vulnerability, allowing an unauthenticated remote attacker to execute arbitrary code, manipulate...
PT-2022-22641 · Unknown · Easyuse Mailhunter Ultimate
Name of the Vulnerable Software and Affected Versions: EasyUse MailHunter Ultimate affected versions not specified Description: The issue is related to an inadequate validation vulnerability in EasyUse MailHunter Ultimate's cookie deserialization function. Deserializing a cookie containing a...
Information Disclosure
github.com/runatlantis/atlantis is vulnerable to information disclosure. The vulnerability exists in the ParseAndValidate function in gitlabrequestparservalidator.go because the webhook event is not properly validated with a constant time comparison which allows an attacker to recover the secret...
Oracle Fusion Middleware 输入验证错误漏洞
Oracle Fusion Middleware Oracle Fusion Middleware is a set of business innovation platforms for enterprise and cloud environments from Oracle USA. The platform provides middleware, software collections, and other capabilities. An input validation error vulnerability exists in Oracle Fusion...
CVE-2021-40874
An issue was discovered in LemonLDAP::NG aka lemonldap-ng 2.0.13. When using the RESTServer plug-in to operate a REST password validation service for another LemonLDAP::NG instance, for example and using the Kerberos authentication method combined with another method with the Combination...
jquery-validation 安全漏洞
npm jquery-validation is npm's way of providing plug-in validation for your existing forms while making it easy to customize them to fit your application. A security vulnerability exists in jquery-validation versions prior to 1.19.5, which stems from a ReDoS that can be triggered in the...
wolfSSH 输入验证错误漏洞
wolfSSH is a small, fast, and portable SSH implementation that includes support for SCP and SFTP. A security vulnerability exists in wolfSSH v1.4.7, which stems from an integer overflow in its function wolfSSHSFTPRecvRMDIR...
Security Bulletin: IBM MQ Appliance is affected by an improper validation vulnerability (CVE-2021-38910)
Summary IBM MQ Appliance has resolved an improper validation vulnerability. Vulnerability Details CVEID: CVE-2021-38910 DESCRIPTION: IBM DataPower Gateway V10CD, 10.0.1, and 2108.4.1 could allow a remote attacker to bypass security restrictions, caused by the improper validation of input. By...
Input validation
Improper validation vulnerability in CACertificateInfo prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities...
CVE-2020-29508
Dell BSAFE Crypto-C Micro Edition, versions before 4.1.5, and Dell BSAFE Micro Edition Suite, versions before 4.6, contain an Improper Input Validation Vulnerability...
CVE-2022-33704
Improper validation vulnerability in ucmRetParcelable of KnoxSDK prior to SMR Jul-2022 Release 1 allows attackers to launch certain activities...
CVE-2022-29892
Improper input validation vulnerability in Space of Cybozu Garoon 4.0.0 to 5.5.1 allows a remote authenticated attacker to repeatedly display errors in certain functions and cause a denial-of-service DoS...
nodejs: Certificate Verification Bypass via String Injection
It was found that node.js did not safely read the x509 certificate generalName format properly, resulting in data injection. A certificate could use a specially crafted extension in order to be successfully validated, permitting an attacker to impersonate a trusted host...
nodejs-json-schema: Prototype pollution vulnerability
The json-schema Node.JS library was vulnerable to prototype pollution during the validation of a JSON object. An attacker, able to provide a specially crafted JSON file for validation, could use this flaw to modify the behavior of the node program, to, for example, execute arbitrary code...
HUAWEI CV81-WDM FW 输入验证错误漏洞
Huawei CV81-WDM FW is a laser multifunction printer from Huawei China.The Huawei CV81-WDM FW is vulnerable to an input validation vulnerability that could be exploited by attackers to cause device service anomalies...
Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS : Exempi vulnerabilities (USN-5483-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS / 22.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-5483-1 advisory. It was discovered that Exempi incorrectly handled certain media files. If a user or automated system were tricked into opening a...
Broadcom CA Automic Automation 输入验证错误漏洞
Broadcom CA Automic Automation is an automation product from Broadcom, Inc. It provides a service orchestration and automation platform to automate complex applications, platforms, and technology environments. A security vulnerability exists in Broadcom CA Automic Automation versions 12.2 and 12....