CVE-2021-0185

Improper input validation in the firmware for some IntelR Server Board M10JNP Family before version 7.216 may allow a privileged user to potentially enable an escalation of privilege via local access...

Dell Client BIOS Improper Input Validation (DSA-2022-249)

The Dell BIOS on the remote device is missing a security patch and is, therefore, affected by an improper input validation vulnerability. A local, authenticated attacker can exploit this vulnerability by using an SMI to execute arbitrary code in the SMRAM. Please see the included Dell Security...

CVE-2022-39306

Grafana is an open-source platform for monitoring and observability. Versions prior to 9.2.4, or 8.5.15 on the 8.X branch, are subject to Improper Input Validation. Grafana admins can invite other members to the organization they are an admin for. When admins add members to the organization, non...

UBUNTU-CVE-2022-39306

Grafana is an open-source platform for monitoring and observability. Versions prior to 9.2.4, or 8.5.15 on the 8.X branch, are subject to Improper Input Validation. Grafana admins can invite other members to the organization they are an admin for. When admins add members to the organization, non...

CVE-2022-39880

CVE-2022-39880 affects DualOutFocusViewer prior to Samsung SMR Nov-2022 Release 1. Root cause: improper input validation leading to local arbitrary code execution. Impact (per sources): local attacker can execute code with affected privileges; CVSSv3.1 base score 7.8 (HIGH) with LOCAL access, LOW...

CVE-2022-39306

CVE-2022-39306 affects Grafana prior to 9.2.4 (and 8.5.x backport to 8.5.15). The issue is improper input validation during the invitation/sign-up flow that admins use to add members to an organization. An invite link can be used to sign up with arbitrary username/email, enabling an attacker to b...

CVE-2022-20445

In processservicesearchrsp of sdpdiscovery.cc, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...

CVE-2022-20445

CVE-2022-20445 affects Google Android (Android 10–13 per sources) and is tied to an out-of-bounds read in process_service_search_rsp within sdp_discovery.cc caused by improper input validation. Impact is information disclosure without additional execution privileges and no user interaction requir...

MediaTek 芯片 缓冲区错误漏洞

MediaTek chips are various chips from MediaTek, a Chinese company MediaTek. A buffer error vulnerability exists in the MediaTek gpu drm that stems from improper input validation leading to out-of-bounds writes...

CVE-2022-26446

In Modem 4G RRC, there is a possible system crash due to improper input validation. This could lead to remote denial of service, when concatenating improper SIB12 CMAS message, with no additional execution privileges needed. User interaction is not needed for exploitation. Patch ID: MOLY00867883;...

Siemens SICAM Q100

1. EXECUTIVE SUMMARY CVSS v3 9.9 ATTENTION: Exploitable remotely / low attack complexity Vendor: Siemens Equipment: SICAM Q100 Vulnerabilities: Session Fixation, Improper Input Validation 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to take over the...

Security fix for the ALT Linux 10 package glpi version 9.5.10-alt1

Nov. 4, 2022 Pavel Zilke 9.5.10-alt1 - New version 9.5.10 - This release fixes several security issues that has been recently discovered. Update is recommended! - Security fixes: + CVE-2022-39276 : Blind SSRF in RSS feeds and planning + CVE-2022-39372 : Stored XSS in user information +...

CVE-2022-40235

"IBM InfoSphere Information Server 11.7 could allow a user to cause a denial of service by removing the ability to run jobs due to improper input validation. IBM X-Force ID: 235725."...

CVE-2022-3181

An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior. A specifically malformed HTTP request could cause the affected VTScada to crash. Both local area network LAN-only and internet facing systems are affected...

CVE-2022-3181

An Improper Input Validation vulnerability exists in Trihedral VTScada version 12.0.38 and prior. A specifically malformed HTTP request could cause the affected VTScada to crash. Both local area network LAN-only and internet facing systems are affected...

CVE-2022-3181

Trihedral VTScada is affected by CVE-2022-3181 (CVE assignment tied to VTScada 12.0.38 and earlier). The vulnerability stems from improper input validation, where a specially malformed HTTP request could cause the VTScada server to crash, impacting both LAN-only and internet-facing deployments. T...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2689)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to...

EulerOS 2.0 SP10 : libtiff (EulerOS-SA-2022-2657)

According to the versions of the libtiff package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - libtiff's tiffcrop utility has a uint32t underflow that can lead to out of bounds read and write. An attacker who supplies a crafted file to...

PUB-A-239556260

In TBD of TBD, there is a possible way to redirect code execution due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation...

CVE-2022-39017 XSS in all comments fields in M-Files Hubshare

Improper input validation and output encoding in all comments fields, in M-Files Hubshare before 3.3.10.9 allows authenticated attackers to introduce cross-site scripting attacks via specially crafted comments...