PUB-A-246750467

In multiple locations, there is a possible way to trigger a persistent reboot loop due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation...

Mitsubishi Electric MELSEC iQ-F Series (Update B)

1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Equipment: MELSEC iQ-F Series Vulnerabilities: Improper Input Validation 2. UPDATE INFORMATION This updated advisory is a follow-up to the original advisory titled ICSA-22-139-01...

CVE-2023-20932

In onCreatePreferences of EditInfoFragment.java, there is a possible way to read contacts belonging to other users due to improper input validation. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for...

Siemens SIPROTEC 5 Devices Improper Input Validation (CVE-2021-41769)

A vulnerability has been identified in SIPROTEC 5 6MD85 devices CPU variant CP300 All versions V8.83, SIPROTEC 5 6MD86 devices CPU variant CP300 All versions V8.83, SIPROTEC 5 6MD89 devices CPU variant CP300 All versions V8.83, SIPROTEC 5 6MU85 devices CPU variant CP300 All versions V8.83, SIPROT...

Improper Input Validation

binutils is vulnerable to Improper Input Validation. The vulnerability exists though the concatfilename function of objdump SEGV, allowing an attacker to exploit this flaw by submitting a maliciously crafted input...

PYSEC-2023-314

Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider.This issue affects Apache Airflow Sqoop Provider versions before 3.1.1...

CVE-2023-25696

CVE-2023-25696 is an issue in the Apache Airflow Hive Provider (pre-5.1.3) described as an Improper Input Validation vulnerability. The NVD entry lists a CRITICAL impact (CVSSv3.1: 9.8) affecting network attack vector with no user interaction, and high confidentiality, integrity, and availability...

CVE-2023-25693

CVE-2023-25693 is an improper input validation vulnerability in the Apache Airflow Sqoop Provider affecting versions before 3.1.1. The root cause, per connected sources, is improper validation in the libjars parameter that can lead to remote code execution on the machine running the MapReduce tas...

CVE-2023-25693 Sqoop Apache Airflow Provider Remote Code Execution Vulnerability

Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider. This issue affects Apache Airflow Sqoop Provider versions before 3.1.1...

CVE-2023-25692

The CVE-2023-25692 issue affects the Apache Airflow Google Provider up to version 8.10.0 (pre-8.10.0). The connected sources describe an Improper Input Validation vulnerability in this provider, with the impact noted as Denial of Service and, per a HackerOne report, potential for Remote Command E...

CVE-2023-25691

CVE-2023-25691 affects Apache Airflow Google Provider versions before 8.10.0 due to Improper Input Validation in the Google Provider. The issue (root cause: input validation error) is assessed with a CRITICAL impact (CVSS 9.8) affecting confidentiality, integrity, and availability. Exploitation d...

PT-2023-20250

Name of the Vulnerable Software and Affected Versions Apache Airflow Sqoop Provider versions prior to 3.1.1 Description The issue is related to an Improper Input Validation vulnerability in the Apache Airflow Sqoop Provider. Recommendations For versions prior to 3.1.1, update to version 3.1.1 or...

K63597327: Python Flask vulnerability CVE-2018-1000656

Security Advisory Description The Pallets Project flask version Before 0.12.3 contains a CWE-20: Improper Input Validation vulnerability in flask that can result in Large amount of memory usage possibly leading to denial of service. This attack appear to be exploitable via Attacker provides JSON...

K12265377: Intel AMT / ISM multiple vulnerabilities

Security Advisory Description CVE-2020-0594 Out-of-bounds read in IPv6 subsystem in IntelR AMT and IntelR ISM versions before 11.8.77, 11.12.77, 11.22.77 and 12.0.64 may allow an unauthenticated user to potentially enable escalation of privilege via network access. CVE-2020-0595 Use after free in...

CVE-2023-22239

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21574

Photoshop version 23.5.3 and earlier, 24.1 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Input validation

FrameMaker 2020 Update 4 and earlier, 2022 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

Improper Input Validation

Overview github.com/gin-gonic/gin is a package that implements a HTTP web framework called gin. Affected versions of this package are vulnerable to Improper Input Validation by allowing an attacker to use a specially crafted request via the X-Forwarded-Prefix header, potentially leading to cache...

CVE-2023-22239 Adobe After Effects Improper Input Validation Remote Code Execution Vulnerability

After Affects versions 23.1 and earlier, 22.6.3 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2023-21574

Adobe Photoshop is affected by an Improper Input Validation vulnerability (CVE-2023-21574) that can lead to arbitrary code execution in the context of the current user. Affected versions are Photoshop 23.5.3 and earlier, and 24.1 and earlier. The issue requires user interaction to exploit (victim...