6922 matches found
CVE-2021-36742
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute...
CVE-2021-36742
A improper input validation vulnerability in Trend Micro Apex One, Apex One as a Service, OfficeScan XG and Worry-Free Business Security 10.0 SP1 allows a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute...
CVE-2021-36741
CVE-2021-36741 affects Trend Micro Apex One, Apex One as a Service, OfficeScan XG, and Worry-Free Business Security 10.0 SP1. The root cause is an improper input validation that enables a remote attacker, who must have access to log in to the product management console, to upload arbitrary files ...
Exploit for Improper Input Validation in Cisco Catalyst_Sd-Wan_Manager
Exploit for CVE-2021-1480 SD-WAN PoC materials to exploit t...
Adobe Media Encoder < 15.4 Multiple Vulnerabilities (APSB21-43)
The version of Adobe Media Encoder installed on the remote Windows host is prior to 15.4. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB21-43 advisory. - Adobe Media Encoder version 15.2 and earlier is affected by a memory corruption vulnerability when parsing a...
CVE-2020-7866 Tobesoft XPLATFORM Arbitrary Command Execution Vulnerability
When using XPLATFORM 9.2.2.270 or earlier versions ActiveX component, arbitrary commands can be executed due to improper input validation...
Oracle VM VirtualBox 输入验证错误漏洞
Oracle VM VirtualBox is a virtual machine management software from Oracle Corporation. An input validation error vulnerability exists in Oracle VM VirtualBox, which arises from a failure to properly validate input data...
Input validation
IBM Resilient OnPrem v41.1 of IBM Security SOAR could allow an authenticated user to perform actions that they should not have access to due to improper input validation. IBM X-Force ID: 203085...
EulerOS 2.0 SP5 : squid (EulerOS-SA-2021-2231)
According to the version of the squid package installed, the EulerOS installation on the remote host is affected by the following vulnerability : - An issue was discovered in Squid through 4.13 and 5.x through 5.0.4. Due to improper input validation, it allows a trusted client to perform HTTP...
Input validation
An Improper Input Validation vulnerability in J-Web of Juniper Networks Junos OS allows a locally authenticated attacker to escalate their privileges to root over the target device. junos:18.3R3-S5 junos:18.4R3-S9 junos:19.1R3-S6 junos:19.3R2-S6 junos:19.3R3-S3 junos:19.4R1-S4 junos:19.4R3-S4...
Input validation
In onCreate of ConfirmConnectActivity, there is a possible remote bypass of user consent due to improper input validation. This could lead to remote proximal, NFC escalation of privilege allowing an attacker to deceive a user into allowing a Bluetooth connection with no additional execution...
Design/Logic Flaw
In beginWrite and beginRead of MessageQueueBase.h, there is a possible out of bounds write due to improper input validation. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions:...
Adobe Bridge Improper Input Validation Vulnerability
Adobe Bridge is a free digital asset management application from Adobe. An improper input validation vulnerability exists in Adobe Bridge 11.0.2 and earlier versions. An attacker can exploit the vulnerability to disclose arbitrary memory information in the context of the current user...
Microsoft Office 2013 Service Pack 1 RCE Vulnerability (KB5001983)
This host is missing an important security update according to Microsoft KB5001983 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Excel 2016 RCE Vulnerabilities (KB5001977)
This host is missing an important security update according to Microsoft KB5001977 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
Microsoft Excel 2013 Service Pack 1 RCE Vulnerability (KB5001993)
This host is missing an important security update according to Microsoft KB5001993 Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This...
CVE-2021-25441
CVE-2021-25441 describes an improper input validation vulnerability in Samsung’s AR Emoji Editor. According to the sources, versions prior to 4.4.03.5 on Android Q (10.0) and newer are affected. The flaw permits untrusted applications to access arbitrary files with escalated privileges, indicatin...
CVE-2021-25436
The CVE-2021-25436 issue affects the Tizen FOTA service (before the JUL-2021 Firmware update release). Root cause: improper input validation, enabling arbitrary code execution via the Samsung Accessory Protocol. Public references identify the component and vulnerability class but do not provide c...
Rockwell Automation MicroLogix 1100
1. EXECUTIVE SUMMARY CVSS v3 8.6 ATTENTION: Exploitable remotely/low attack complexity Vendor: Rockwell Automation Equipment: MicroLogix 1100 Vulnerability: Improper Input Validation 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker to create a...
