CVE-2022-29606

An issue was discovered in ONOS 2.5.1. An intent with a large port number shows the CORRUPT state, which is misleading to a network operator. Improper handling of such port numbers causes inconsistency between intent and flow rules in the network...

Cisco Modeling Labs External Authentication Bypass Vulnerability

A vulnerability in the external authentication mechanism of Cisco Modeling Labs could allow an unauthenticated, remote attacker to access the web interface with administrative privileges. This vulnerability is due to the improper handling of certain messages that are returned by the associated...

CVE-2023-29412

CVE-2023-29412 is an OS command injection vulnerability in Schneider Electric’s APC Easy UPS Online Monitoring Software (Windows) that could allow remote code execution via the Java RMI interface. Affected products include APC Easy UPS Online Monitoring Software (versions up to 2.5-GA-01-22261) a...

CVE-2023-29412

CWE-78: Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability exists that could cause remote code execution when manipulating internal methods through Java RMI interface...

CVE-2023-1697

An Improper Handling of Missing Values vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a dcpfe process core and thereby a Denial of Service DoS. Continued receipt of these specific frames will cause a sustained...

CVE-2023-28961 Junos OS: ACX Series: IPv6 firewall filter is not installed in PFE when "from next-header ah" is used

An Improper Handling of Unexpected Data Type vulnerability in IPv6 firewall filter processing of Juniper Networks Junos OS on the ACX Series devices will prevent a firewall filter with the term 'from next-header ah' from being properly installed in the packet forwarding engine PFE. There is no...

CVE-2023-28959

The CVE-2023-28959 entry affects Juniper Networks Junos OS on QFX10002. The issue is an improper check/handling of exceptional conditions in packet processing, triggered by a specially malformed packet sent by an unauthenticated, adjacent attacker on the local broadcast domain. Exploitation wedge...

CVE-2023-1697 Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received

An Improper Handling of Missing Values vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a dcpfe process core and thereby a Denial of Service DoS. Continued receipt of these specific frames will cause a sustained...

Juniper Junos OS Vulnerability (JSA70589)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA70589 advisory. - An Improper Check or Handling of Exceptional Conditions within the storm control feature of Juniper Networks Junos OS allows an attacker sending a high rate of traffic to...

GO-2023-1717 Improper handling of keyspaces in vitess.io/vitess

Users can create a keyspace containing '/'. Future attempts to view keyspaces from some tools including VTAdmin and "vtctldclient GetKeyspaces" receive an error...

Security Bulletin: Improper Error Handling

Summary Improper handling of errors can introduce a variety of security problems for a web site. The mostcommon problem is when detailed internal error messages such as stack traces, database dumps. Vulnerability Details CVEID:CVE-2022-34333 DESCRIPTION: IBM Sterling Order Management does not...

Authentication Bypass

github.com/ansible-semaphore/semaphore is vulnerable to Authentication Bypass. The vulnerability exists due to improper handling of the authentication mechanism in auth.go, which allows an attacker to bypass the access control...

CVE-2022-45155

An Improper Handling of Exceptional Conditions vulnerability in obs-service-gomodules of openSUSE Factory allows attackers that can influence the call to the service to delete files and directories on the system of the victim. This issue affects: SUSE openSUSE Factory obs-service-gomodules versio...

Huawei EulerOS: Security Advisory for python-pillow (EulerOS-SA-2023-1415)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

xwiki vulnerable to Improper Handling of Exceptional Conditions

Impact Users with write rights can insert well-formed content that is not handled well by the parser. For instance, with xwiki/2.1, inserting a deeply nested group blocks .... see the generator below to produce a large payload can lead to the parser throwing a StackOverflowError. As a consequence...

CVE-2021-45477

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...

Input validation

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users.This issue affects Library Automation System: before 19.2...

CVE-2021-45478

CVE-2021-45478 affects Yordam Library Automation System (Bordam Information Technologies) prior to version 19.2. The root cause is improper handling of parameters that enables collection of data supplied by users (high confidentiality impact). Documents consistently describe this vulnerability as...

CVE-2021-45477 IDOR in Yordam Library Automation System

Improper Handling of Parameters vulnerability in Bordam Information Technologies Library Automation System allows Collect Data as Provided by Users. This issue affects Library Automation System: before 19.2...

CVE-2021-4105

CVE-2021-4105 affects BG-TEK COSLAT Firewall (versions 5.24.0.R.20180630 through 5.24.0.R.20210727). The root cause is improper handling of parameters, enabling Remote Code Inclusion. Impact is unauthenticated remote code execution with high risk to confidentiality, integrity, and availability (p...