Adobe Acrobat < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39) (macOS)

The version of Adobe Acrobat installed on the remote macOS host is a version prior to 17.012.30262, 20.005.30381, or 22.002.20191. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.001.20169 and earlier, 20.005.30362 and earlier and 17.012.30249 and earlie...

Adobe Reader < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39)

The version of Adobe Reader installed on the remote Windows host is a version prior to 17.012.30262, 20.005.30381, or 22.002.20191. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.001.20169 and earlier, 20.005.30362 and earlier and 17.012.30249 and earli...

PT-2022-14582 · Google · Android

Name of the Vulnerable Software and Affected Versions: Android versions Android-11 through Android-12L Description: The issue is related to improper input validation in the shouldAllowFgsWhileInUsePermissionLocked function of ActiveServices.java. This could allow starting a foreground service fro...

Adobe Acrobat and Reader Improper Input Validation (APSB22-39: CVE-2022-35666)

A vulnerability exists in Adobe Acrobat and Reader. Successful exploitation of this vulnerability could allow a remote attacker to damage users system...

Adobe Acrobat < 17.012.30262 / 20.005.30381 / 22.002.20191 Multiple Vulnerabilities (APSB22-39)

The version of Adobe Acrobat installed on the remote Windows host is a version prior to 17.012.30262, 20.005.30381, or 22.002.20191. It is, therefore, affected by multiple vulnerabilities. - Adobe Acrobat Reader versions 22.001.20169 and earlier, 20.005.30362 and earlier and 17.012.30249 and...

GitLab 12.10.x - 15.0.4, 15.1.x - 15.1.3, 15.2 Improper Input Validation Vulnerability

GitLab is prone to an improper input validation vulnerability. SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:gitlab:gitlab"; if...

CVE-2022-33719

Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow...

Integer overflow

Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow...

CVE-2022-33719

Improper input validation in baseband prior to SMR Aug-2022 Release 1 allows attackers to cause integer overflow to heap overflow...

Juniper Junos OS Vulnerability (JSA69718)

The version of Junos OS installed on the remote host is affected by a vulnerability as referenced in the JSA69718 advisory. - An Improper Input Validation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a PFE...

PT-2022-3987 · Nvidia +3 · Nvidia Gpu Display Driver +3

Name of the Vulnerable Software and Affected Versions: NVIDIA GPU Display Driver affected versions not specified Description: The issue is related to insecure privilege management in the NVIDIA GPU Display Driver. It may allow an attacker to cause a denial of service or escalate their privileges....

Input validation

IBM CICS TX 11.1 could allow a local user to impersonate another legitimate user due to improper input validation. IBM X-Force ID: 229338...

CVE-2022-34164

IBM CICS TX 11.1 (Standard and Advanced) is affected by CVE-2022-34164 due to improper input validation that could allow a local user to impersonate another legitimate user. IBM bulletins confirm affected versions 11.1 and provide remediation by applying interim fixes (e.g., defects like 127640) ...

DD-WRT httpd unescape memory corruption vulnerability

Summary A memory corruption vulnerability exists in the httpd unescape functionality of DD-WRT Revision 32270 - Revision 48599. A specially-crafted HTTP request can lead to memory corruption. An attacker can send a network request to trigger this vulnerability. Tested Versions DD-WRT Revision 322...

Improper Input Validation

net-snmp is vulnerable to improper input validation. The vulnerability exists when SETing malformed OIDs in master agent and subagent simultaneously because the inputs are not properly validated which allows an attacker to bypass validations...

Improper Input Validation

@openzeppelin/contracts and @openzeppelin/contracts-upgradeable are vulnerable to improper input validation. The vulnerability exists because an incorrect assumption about Solidity 0.8's abi.decode allows ERC165Checker to revert instead of returning false via a specifically crafted input request...

Authentication Bypass

@openzeppelin/contractsvulnerable to improper input validation. The vulnerability exists in the ERC165Checker function in ERC165Checker.sol and ERC165CheckerUpgradeable function in ERC165CheckerUpgradeable.sol due to the incorrect assumption about abi.decode which allows a malicious user to pass ...

[slackware-security] net-snmp

New net-snmp packages are available for Slackware 15.0 and -current to fix security issues. Here are the details from the Slackware 15.0 ChangeLog: patches/packages/net-snmp-5.9.3-i586-1slack15.0.txz: Upgraded. This update fixes security issues: A buffer overflow in the handling of the INDEX of...

CVE-2022-22214

CVE-2022-22214 describes an improper input validation in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS and Junos OS Evolved. An adjacent attacker can trigger a specific transit IPv6 packet over MPLS that causes an FPC to crash and reboot, with continued receipt leading to a sust...

CVE-2022-22214 Junos OS and Junos OS Evolved: In an MPLS scenario upon receipt of a specific IPv6 packet an FPC will crash

An Improper Input Validation vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS and Junos OS Evolved allows an adjacent attacker to cause a PFE crash and thereby a Denial of Service DoS. An FPC will crash and reboot after receiving a specific transit IPv6 packet over...