CVE-2023-32469

Dell Precision Tower BIOS contains an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerability to perform arbitrary code execution...

PT-2023-23810 · Dell · Dell Precision Tower Bios

Name of the Vulnerable Software and Affected Versions: Dell Precision Tower BIOS affected versions not specified Description: The issue is related to an Improper Input Validation vulnerability. A locally authenticated malicious user with admin privileges could potentially exploit this vulnerabili...

Oracle Linux 9 : pcs / (LOW) (ELSA-2023-6316)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2023-6316 advisory. 0.11.6-3 - Refreshing any page in pcs-web-ui no longer causes it to display a blank page - Resolves: rhbz2222788 0.11.6-2 - Added BuildRequires: debugedit - for...

Mageia: Security Advisory (MGASA-2023-0319)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Security Bulletin: IBM TRIRIGA Application Platform discloses server-side request forgery (CVE-2020-11988)

Summary CV-2020-11988 Apache XML Graphis Commons is vulerable to server-side request forgery. Vulnerability Details CVEID: CVE-2020-11988 DESCRIPTION: Apache XML Graphics Commons is vulnerable to server-side request forgery, caused by improper input validation by the XMPParser. By using a...

Improper Input Validation

K8s.io/kubernetes is vulnerable to Improper Input Validation. The vulnerability exists due to insufficient input sanitization in the in-tree storage plugin for Windows nodes in mountwindows.go, allowing an attacker to bypass admin privileges on this node...

Updated tomcat packages fix security vulnerabilities

The updated packages fix security vulnerabilities: Incomplete Cleanup vulnerability in Apache Tomcat.When recycling various internal objects in Apache Tomcat from 11.0.0-M1 through 11.0.0-M11, from 10.1.0-M1 through 10.1.13, from 9.0.0-M1 through 9.0.80 and from 8.5.0 through 8.5.93, an error cou...

CVE-2023-23549

Improper Input Validation in Checkmk 2.2.0p15, 2.1.0p37, =2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames...

CVE-2023-23549

CVE-2023-23549 affects Checkmk installations running <2.2.0p15, <2.1.0p37, or

CVE-2023-23549 DoS via long hostnames

Improper Input Validation in Checkmk 2.2.0p15, 2.1.0p37, =2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames...

CVE-2023-23549 DoS via long hostnames

Improper Input Validation in Checkmk 2.2.0p15, 2.1.0p37, =2.0.0p39 allows priviledged attackers to cause partial denial of service of the UI via too long hostnames...

CVE-2023-32641

Improper input validation in firmware for IntelR QAT before version QAT20.L.1.0.40-00004 may allow escalation of privilege and denial of service via adjacent access...

CVE-2023-20596

Improper input validation in the SMM Supervisor may allow an attacker with a compromised SMI handler to gain Ring0 access potentially leading to arbitrary code execution...

CVE-2023-31203

Improper input validation in some OpenVINO Model Server software before version 2022.3 for Intel Distribution of OpenVINO toolkit may allow an unauthenticated user to potentially enable denial of service via network access...

CVE-2023-27519

Improper input validation in firmware for some IntelR OptaneTM SSD products may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2023-32701 Vulnerability in Networking Stack Impacts QNX Software Development Platform (SDP)

Improper Input Validation in the Networking Stack of QNX SDP versions 6.6, 7.0, and 7.1 could allow an attacker to potentially cause Information Disclosure or a Denial-of-Service condition...

CVE-2023-32701

CVE-2023-32701 affects BlackBerry QNX SDP Networking Stack in SDP versions 6.6, 7.0, and 7.1. Root cause: improper input validation in the networking stack. Impact includes information disclosure and Denial-of-Service. Exploitation details are not provided in the documents; local access with low ...

Rockwell Automation SIS Workstation and ISaGRAF Workbench

View CSAF 1. EXECUTIVE SUMMARY CVSS v3 7.8 ATTENTION : Low attack complexity Vendor : Rockwell Automation Equipment : SIS Workstation and ISaGRAF Workbench Vulnerability : Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow unprivileged local...

PT-2023-27007 · Ami · Ami Aptiov

Name of the Vulnerable Software and Affected Versions: AMI AptioV affected versions not specified Description: The issue is related to improper input validation in the BIOS of AMI AptioV, which can be exploited via the local network. A successful exploit may result in a loss of confidentiality,...

PT-2023-14677 · Intel · Intel Unison

Name of the Vulnerable Software and Affected Versions: Intel Unison affected versions not specified Description: The issue is related to improper input validation, which may allow an authenticated user to potentially enable escalation of privilege via local access. Recommendations: At the moment,...