The software’s vulnerability regarding increasing the effective working time of components and equipment, as well as optimizing resource utilization in the SAP 3D Visual Enterprise Viewer, is related to insufficient validation of input data. This vulnerability allows a perpetrator to trigger an emergency shutdown of the application.

The vulnerability of the software for increasing the effective working time of components and equipment, as well as optimizing resource utilization in the SAP 3D Visual Enterprise Viewer, is related to insufficient validation of input data during PDF file processing. Exploiting this vulnerability...

CVE-2022-20799

Multiple vulnerabilities in the web-based management interface of Cisco Small Business RV340 and RV345 Routers could allow an authenticated, remote attacker to inject and execute arbitrary commands on the underlying operating system of an affected device. These vulnerabilities are due to...

The vulnerability of the rfc1867.c component of the PHP programming language interpreter allows a attacker to cause a service failure.

The vulnerability of the rfc1867.c component of the PHP programming language interpreter exists due to insufficient validation of input data. Exploiting this vulnerability may allow a malicious actor to cause service failures remotely...

The vulnerability of the sapi/cgi/cgi_main.c component of the PHP programming language interpreter allows a attacker to cause a service failure.

The vulnerability of the sapi/cgi/cgimain.c component of the PHP programming language interpreter exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures remotely...

The vulnerability of the php_wddx_process_data function in the PHP programming language allows a hacker to trigger a service failure.

The vulnerability of the phpwddxprocessdata function ext/wddx/wddx.c in the PHP programming language exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker to cause service failures by using an invalid ISO 8601 time value...

PT-2022-2910 · Microsoft · Sharepoint Server +1

Name of the Vulnerable Software and Affected Versions: Microsoft SharePoint Foundation, SharePoint Server, and SharePoint Enterprise Server affected versions not specified Description: The issue is related to insufficient input validation in Microsoft SharePoint products, allowing a remote attack...

The vulnerability of the Web Access component of the Primavera Portfolio Management software allows a malicious individual to gain unauthorized access to read, modify, or delete data.

The vulnerability of the Web Access component of Primavera Portfolio Management, a software solution for automating production process management, is related to insufficient verification of input data. Exploiting this vulnerability could allow an attacker, operating remotely, to gain unauthorized...

The vulnerability of the TCP protocol implementation in the Stack Trace TCP/IP protocol allows a perpetrator to cause a service failure.

The vulnerability of the TCP protocol implementation in the Stack Trace TCP/IP protocol is related to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the InnoDB component of the MySQL Database Server allows a attacker to compromise data integrity and cause service failures.

The vulnerability of the InnoDB component of the MySQL Database Server exists due to insufficient validation of input data. Exploiting this vulnerability can allow a malicious actor to compromise data integrity and cause service failures...

The vulnerability in the implementation of the Control Point and Wireless Access Point Provisioning Protocol (CAPWAP) of the Cisco IOS XE operating system allows a attacker to trigger a service failure.

The vulnerability of the CAPWAP management protocol implementation and wireless access point provisioning in Cisco IOS XE operating systems is related to insufficient validation of CAPWAP packets. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...

WordPress 插件跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. A security vulnerability exists in the Wordpress plugin that stems from insufficient input validation in the Share-one-Drive search function of the Wordpress plugin prior to 1.15.3, allowing an unauthenticated user to create a...

The vulnerability of Intel processor BIOS systems, which allows attackers to enhance their privileges

The vulnerability of Intel processor BIOS systems is related to insufficient checking of input data. Exploiting this vulnerability can allow attackers to enhance their privileges...

VulnCheck KEV: CVE-2020-3580

Cisco Adaptive Security Appliance ASA and Firepower Threat Defense FTD contain an insufficient input validation vulnerability for user-supplied input by the web services interface. Successful exploitation could allow an attacker to perform cross-site scripting XSS in the context of the...

WordPress 跨站脚本漏洞

WordPress is a set of blogging platforms developed using the PHP language by the WordPress Wordpress Foundation. The platform supports setting up personal blog sites on servers with PHP and MySQL. A cross-site scripting vulnerability exists in WordPress plugin Indeed Job Importer version 1.0.5 an...

Tibco Ebx 授权问题漏洞

Tibco Ebx is a software from Tibco India that supports integration to manage enterprise data assets. An authorization issue vulnerability exists in TIBCO EBX Web Server, which arises from a problem with the software's validation of user-submitted passwords, which could be exploited to allow an...

Cisco IP Phone 路径遍历漏洞

Cisco IP Phone is a hardware device from the American company Cisco Cisco. IP Phone that provides calling capabilities. A path traversal vulnerability exists in Cisco IP Phone that stems from insufficient input validation. An attacker can exploit this vulnerability by providing crafted input to...

The vulnerability of the table_population.php file, a tool for monitoring Nagios XI Docker Wizard, allows a hacker to compromise the confidentiality, integrity, and accessibility of the protected information.

The vulnerability of the tablepopulation.php file of the Nagios XI Docker Wizard tool is related to insufficient validation of incoming requests. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality, integrity, and accessibility of the protected information...

B.Braun SpaceCom2 数据伪造问题漏洞

The B. Braun SpaceCom2 is a hardware device from B. Braun Germany designed to connect to external devices to record data in a patient data management system, PC, or USB memory stick. A security vulnerability exists in versions prior to B. Braun SpaceCom2 012U000062, which arises from insufficient...

SAP Business One 代码问题漏洞

SAP Business One is a suite of enterprise management software from SAP, a German company. SAP Business One has a code issue vulnerability that stems from insufficient validation when uploading files, which could be exploited to upload any file...

NCH IVM Attendant 跨站脚本漏洞

NCH IVM Attendant is a complete voicemail, call attendant and IVR solution for Windows. a security vulnerability exists in NCH IVM Attendant due to a lack of comprehensive input validation, which can be exploited by an authenticated attacker to inject a JavaScript cross-site scripting payload int...