7043 matches found
CVE-2023-45745
Improper input validation in some IntelR TDX module software before version 1.5.05.46.698 may allow a privileged user to potentially enable escalation of privilege via local access...
CVE-2023-38417
CVE-2023-38417: Intel PROSet/Wireless WiFi software (pre-23.20) contains improper input validation that could allow an unauthenticated adjacent attacker to cause a denial of service. The CVSSv3.1 rating is 4.3 (Medium), with attack vector adjacent and no user interaction required. Remediation is ...
CVE-2023-47210
Improper input validation for some IntelR PROSet/Wireless WiFi software for linux before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2023-47210
Improper input validation for some IntelR PROSet/Wireless WiFi software for linux before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2023-38654
Improper input validation for some some IntelR PROSet/Wireless WiFi software for Windows before version 23.20 may allow an unauthenticated user to potentially enable denial of service via adjacent access...
CVE-2023-38654
The CVE-2023-38654 entry concerns Intel® PROSet/Wireless WiFi software for Windows prior to version 23.20. Affected component: Intel PROSet/Wireless WiFi software; root cause: improper input validation leading to potential denial-of-service via adjacent access (unauthenticated user). Impact per a...
CVE-2024-24981
The CVE-2024-24981 issue affects Intel Server M50FCP Family UEFI firmware, specifically the PfrSmiUpdateFw driver, where improper input validation may enable privilege escalation via local access. Reported by multiple sources (NVD/Red Hat/CVE listings) with a CVSS v3.1 base score of 7.5 (High), l...
CVE-2024-23487
Improper input validation in UserAuthenticationSmm driver in UEFI firmware for some IntelR Server D50DNP Family products may allow a privileged user to enable escalation of privilege via local access...
CVE-2024-4321
A Local File Inclusion LFI vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to improper input validation when handling file paths during the chat history upload process. An attacker c...
CVE-2024-4321
A Local File Inclusion (LFI) exists in gaizhenbiao/chuanhuchatgpt (version 20240310) due to improper input validation when handling file paths during chat history upload. An attacker can modify the name parameter to specify arbitrary file paths, enabling reading of sensitive server files and leak...
CVE-2024-4321 Local File Inclusion (LFI) in gaizhenbiao/chuanhuchatgpt
A Local File Inclusion LFI vulnerability exists in the gaizhenbiao/chuanhuchatgpt application, specifically within the functionality for uploading chat history. The vulnerability arises due to improper input validation when handling file paths during the chat history upload process. An attacker c...
PT-2024-13131 · Intel · Intel Cbi
Name of the Vulnerable Software and Affected Versions: IntelR CBI software versions prior to 1.1.0 Description: The issue is related to improper input validation, which may allow an authenticated user to potentially enable denial of service via local access. Recommendations: For versions prior to...
CVE-2024-20369
A vulnerability in the web-based management interface of Cisco Crosswork Network Services Orchestrator NSO could allow an unauthenticated, remote attacker to redirect a user to a malicious web page. This vulnerability is due to improper input validation of a parameter in an HTTP request. An...
CVE-2024-20369
CVE-2024-20369 affects Cisco Crosswork Network Services Orchestrator (NSO) Web UI. The issue is improper input validation of a parameter in an HTTP request, enabling an unauthenticated, remote attacker to persuade a user to click a crafted link and be redirected to a malicious website. Documented...
CVE-2024-34098
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...
CVE-2024-34098 ZDI-CAN-XXXX: [Pwn2Own] Acrobat sandbox bypass part 1 of 2
Acrobat Reader versions 20.005.30574, 24.002.20736 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious...
Security Bulletin: IBM QRadar SIEM protocols are vulnerable to information exposure and denial of service (CVE-2023-31582, CVE-2023-51775)
Summary The Jose4j library is vulnerable to a denial of service, caused by improper input validation. It could also allow a remote attacker to obtain sensitive information using cryptographic attacks. Vulnerability Details CVEID:CVE-2023-31582 DESCRIPTION: Jose4J could allow a remote attacker to...
Dell PowerScale OneFS Improper Input Validation Vulnerability
Dell PowerScale OneFS is a proprietary operating system developed by Dell for its PowerScale horizontally scalable NAS network attached storage solution. The Dell PowerScale OneFS has an improper input validation vulnerability that stems from the presence of an incorrect input validation...
Improper Input Validation
Overview Microsoft.PowerBI.JavaScript is a suite of JavaScript web components for integrating Power BI into your app. Affected versions of this package are vulnerable to Improper Input Validation via the client-side data handling process. An attacker can expose sensitive information by intercepti...
