CVE-2021-22467

A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address...

CVE-2021-22452

A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to read at any address...

CVE-2021-22453

A component of the HarmonyOS has a Improper Input Validation vulnerability. Local attackers may exploit this vulnerability to cause nearby process crash...

CVE-2021-22453

CVE-2021-22453 is described across multiple sources as an Improper Input Validation issue in a HarmonyOS component. The Red Hat/EUVD/CNVD variants reiterate a local-exploit scenario where an attacker can trigger crashes in nearby processes by sending crafted input, with Bluetooth protocol data ci...

CVE-2021-22467

The CVE-2021-22467 entry concerns HarmonyOS, describing an improper input validation vulnerability in a system component. This flaw can permit a local attacker to read arbitrary memory addresses, indicating a confidentiality impact without integrity/availability compromise. The root cause, as sta...

CVE-2021-22452

CVE-2021-22452 affects HarmonyOS, specifically the bl2_iomcu_resource_cfg function. The connected sources describe an improper input validation vulnerability that enables a local attacker to read arbitrary memory addresses. The impact is documented as read access to any address; no remote code ex...

NewStart CGSL CORE 5.04 / MAIN 5.04 : squid Vulnerability (NS-SA-2021-0110)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has squid packages installed that are affected by a vulnerability: - An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP Request...

CVE-2021-1117

Windows contains a vulnerability in the kernel mode layer nvlddmkm.sys handler for DxgkDdiEscape, where an attacker through specific configuration and with local unprivileged system access may cause improper input validation, which may lead to denial of service...

CVE-2020-7867

An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of...

CVE-2020-7867

CVE-2020-7867 describes an improper input validation vulnerability in the Helpu solution, affecting the viewer component that receives files from an agent running with administrator privileges. The underly­ing issue allows a local attacker to create arbitrary files and potentially execute code in...

CVE-2020-7867 Helpu arbitrary file creation vulnerability

An improper input validation vulnerability in Helpu solution could allow a local attacker to arbitrary file creation and execution without click file transfer menu. It is possible to file in arbitrary directory for user because the viewer program receive the file from agent with privilege of...

Improper Input Validation

Java SE is vulnerable to improper input validation. an attacker can gain access to sensitive information through the JSSE component in the oracle GraalVM enterprise edition...

Improper Input Validation

Java SE is vulnerable to Improper Input Validation. An attacker can perform service disruption through the Hotspot component in the oracle GraalVM enterprise edition...

Improper Input Validation

Java SE is vulnerable to improper input validation. An attacker can perform service disruption through the JSSE component in the oracle GraalVM enterprise edition...

Improper Input Validation

Java SE is vulnerable to improper input validation. an attacker can manipulate data through the keytool component in oracle GraalVM enterprise edition...

Improper Input Validation

Java SE is vulnerable to improper input validation. an attacker can perform service disruption through the swing component in the oracle GraalVM enterprise edition...

Improper Input Validation

Java SE is vulnerable to improper input validation. an attacker can gain access to sensitive information through the JSSE component in the oracle GraalVM enterprise edition...

CVE-2021-26607 TOBESOFT NEXACRO17 arbitrary command execution vulnerability

An Improper input validation in execDefaultBrowser method of NEXACRO17 allows a remote attacker to execute arbitrary command on affected systems...

CVE-2021-38485

The affected product is vulnerable to improper input validation in the restore file. This enables an attacker to provide malicious config files to replace any file on disk...

CVE-2021-38485

The CVE-2021-38485 entry corresponds to Emerson WirelessHART Gateway. The issue is improper input validation in the restore file, allowing a malicious configuration file to replace arbitrary files on disk. Connected sources specify affected products and versions (e.g., WirelessHART 1410/1410D/142...