7051 matches found
Siemens SCALANCE W700 Improper Input Validation (CVE-2023-31315)
Improper validation in a model specific register MSR could allow a malicious program with ring0 access to modify SMM configuration while SMI lock is enabled, potentially leading to arbitrary code execution. This plugin only works with Tenable.ot. Please visit...
CLSA-2025-1740051873 tomcat: Fix of CVE-2024-24549
CVE-2024-24549: fix improper input validation vulnerability for HTTP/2 requests...
ROS-20250219-05
A vulnerability in the Core component of Oracle VM VirtualBox is related to a flaw in the authorization mechanism. authorization mechanism. Exploitation of the vulnerability could allow an attacker to gain privileged access to the infrastructure A vulnerability in the Core component of the Oracle...
The vulnerability of the sysctl component in the Linux operating system’s kernel allows a hacker to trigger a service failure.
The vulnerability of the sysctl component in the Linux operating system’s kernel is related to improper validation of input data in the procsysmake inode function. Exploiting this vulnerability can allow an attacker to cause a service failure...
Adobe InDesign Improper Input Validation Vulnerability
Adobe InDesign is a set of layout and editing applications from the American company Audobee Adobe. Adobe InDesign suffers from an improper input validation vulnerability that can be exploited by an attacker to cause a denial of service in the application...
CVE-2025-0815
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious ICMPV6 packets are sent to the device...
CVE-2025-0816
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious IPV6 packets are sent to the device...
CVE-2024-25571
Improper input validation in some IntelR SPS firmware before SPSE506.01.04.059.0 may allow a privileged user to potentially enable denial of service via local access...
CVE-2025-26358
A CWE-15 "External Control of System or Configuration Setting" in ldbMT.so in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to modify system configuration via crafted HTTP requests...
CVE-2024-31860
Improper Input Validation vulnerability in Apache Zeppelin. By adding relative path indicatorsE.g .., attackers can see the contents for any files in the filesystem that the server account can access. This issue affects Apache Zeppelin: from 0.9.0 before 0.11.0. Users are recommended to upgrade t...
CVE-2025-21126
InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service...
CVE-2024-33659
AMI APTIOV contains a vulnerability in BIOS where an attacker may cause an Improper Input Validation by a local attacker. Successful exploitation of these vulnerabilities may lead to overwriting arbitrary memory and execute arbitrary code at SMM level, also impacting Confidentiality, Integrity, a...
CVE-2025-0816
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious IPV6 packets are sent to the device...
CVE-2025-0814
CVE-2025-0814 affects Schneider Electric Enerlin’X Enerlin devices (IEC61850-MMS interface). The vulnerability is CWE-20: Improper Input Validation, enabling Denial-of-Service on the device’s network services when malicious IEC61850-MMS packets are sent; core breaker functionality remains intact....
CVE-2025-0816
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious IPV6 packets are sent to the device...
CVE-2025-0816
CWE-20: Improper Input Validation vulnerability exists that could cause Denial-of-Service of the product when malicious IPV6 packets are sent to the device...
CVE-2024-10083
CWE-20: Improper Input Validation vulnerability exists that could cause denial of service of engineering workstation when specific driver interface is invoked locally by an authenticated user with crafted input...
PT-2025-6803 · Unknown · Enerlin'X Ife Interface
Name of the Vulnerable Software and Affected Versions: Enerlin'X IFE interface LV434001 versions all Description: The issue is related to improper input validation, which could cause a Denial-of-Service when malicious ICMPV6 packets are sent to the device. Recommendations: For all versions, at th...
ROS-20250213-01
A vulnerability in the iavf component of the Linux kernel is related to an incorrect locking in the function iavfinitmodule in drivers/net/ethernet/intel/iavf/iavfmain.c. Exploitation of the vulnerability could allow an attacker to cause a denial of service Vulnerability in...