The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system allows a hacker to execute arbitrary code.

The vulnerability of the WDAC OLE DB driver for SQL Server on the Windows operating system is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the Skype for Consumer instant messaging program, related to insufficient input data validation, allows a hacker to execute arbitrary code.

The vulnerability of the Skype for Consumer instant messaging program is related to insufficient validation of entered data. Exploiting this vulnerability could allow a malicious actor to execute arbitrary code remotely...

PT-2024-13363 · Algosec · Algosec Fireflow

Name of the Vulnerable Software and Affected Versions: Algosec FireFlow versions A32.20 through A32.60 Description: The issue is related to improper input validation in the VisualFlow workflow editor via the Name, Description, and Configuration File fields. This allows an attacker to initiate an...

The vulnerability of the Log Management component of the Oracle Enterprise Manager Base Platform allows a perpetrator to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the Log Management component of the Oracle Enterprise Manager Base Platform relates to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to compromise the confidentiality, integrity, and accessibility of protected information through...

The vulnerability of the Outcome-Result sub-component of the Oracle Customer Interaction History component in the Oracle E-Business Suite system allows a malicious actor to gain access to read, modify, add, or delete data.

The vulnerability of the CRM User Management Framework component of the Oracle Customer Interaction History component within the Oracle E-Business Suite system is related to insufficient validation of input data. Exploiting this vulnerability could allow an attacker to gain access to read, modify...

PT-2024-14261 · Skyworth · Skyworth Router Cm5100

Name of the Vulnerable Software and Affected Versions: Skyworth Router CM5100 version 4.1.1.24 Description: This issue exists due to insufficient validation of user-supplied input for the Time Server 3 parameter at the web interface. A remote attacker could exploit this by supplying specially...

The vulnerability of the GVCP discapper, a traffic analysis tool for computer networks by Wireshark, allows a hacker to cause a service failure.

The vulnerability of the GVCP discapper of the Wireshark network traffic analyzer is related to insufficient verification of input data. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...

The vulnerability of the Apache OFBiz resource planning software lies in its insufficient validation of incoming requests, allowing a hacker to execute an SSRF attack.

The vulnerability of Apache OFBiz’s resource planning software lies in insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to execute an SSRF attack by sending a specially crafted HTTP request remotely...

CVE-2023-48395

Kaifa Technology WebITR is an online attendance system, it has insufficient validation for user input within a special function. A remote attacker with regular user privilege can exploit this vulnerability to inject arbitrary SQL commands to read database...

The vulnerability of the MSHTML platform in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the MSHTML platform in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a remote attacker to execute arbitrary code by sending a specially crafted email...

PT-2023-7878 · Unknown · Itpison Omicard Edm

Name of the Vulnerable Software and Affected Versions: ITPison OMICARD EDM affected versions not specified Description: The SMS-related function in ITPison OMICARD EDM has insufficient validation for user input, allowing an unauthenticated remote attacker to inject arbitrary SQL commands. This ca...

The vulnerability of the Static Routing Configuration Handler component in the Ubiquiti EdgeRouter software allows a attacker to execute arbitrary commands.

The vulnerability of the Static Routing Configuration Handler component in Ubiquiti EdgeRouter software exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary commands remotely...

PT-2023-7876 · WordPress · Mw Wp Form

Name of the Vulnerable Software and Affected Versions: MW WP Form plugin for WordPress versions up to, and including, 5.0.1 Description: The issue is related to insufficient file type validation in the single file upload function, allowing unauthenticated attackers to upload arbitrary files on th...

WordPress Plugin BEAR Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security vulnerability exists in...

WordPress Plugin Social Media Share Buttons & Social Sharing Icons Cross-Site Request Forgery Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. WordPress is a blogging platform developed in the PHP language that supports personal blogs on PHP and MySQL servers.WordPress plugin is an application...

The vulnerability of the CMPappBP component in CODESYS software products allows a hacker to trigger a service failure.

The vulnerability of the CMPappBP component in CODESYS software products is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability in the HTTP request basket service interface allows a attacker to perform an SSRF attack.

The vulnerability of the web service interface for collecting and checking HTTP requests related to Request Baskets is related to insufficient validation of incoming requests when processing the name parameter /api/baskets/name. Exploiting this vulnerability allows a malicious actor to perform an...

The vulnerability of the Microsoft .NET Framework software, related to insufficient validation of input data, allows attackers to escalate their privileges.

The vulnerability of the Microsoft .NET Framework software platform is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to enhance their privileges remotely...

The vulnerability of the httpd component of the microprogramming software for Wi-Fi routers from ASUS, ASUS RT-AX88U, allows a hacker to trigger a service failure.

The vulnerability of the httpd component of the microprogramming-based Wi-Fi router software from ASUS, the RT-AX88U, exists due to insufficient testing of input data. Exploiting this vulnerability could allow a remote attacker to execute a “denial-of-service” attack...

The vulnerability of the Pragmatic General Multicast (PGM) protocol implementation in Windows operating systems allows a hacker to execute arbitrary code.

The vulnerability of the Pragmatic General Multicast protocol implementation in Windows operating systems is related to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...