6919 matches found
CVE-2020-6333
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated 3DM file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2020-6336
SAP 3D Visual Enterprise Viewer 9 is affected by CVE-2020-6336 via the PCX file parser. The vulnerability is an out-of-bounds write during PCX parsing, allowing remote code execution when a user opens a malicious PCX file. User interaction is required to exploit. No vendor patch details are provi...
CVE-2020-6341
CVE-2020-6341 : SAP 3D Visual Enterprise Viewer 9 contains an EPS file parsing vulnerability. The issue arises from improper validation leading to an out-of-bounds read, enabling arbitrary code execution when a user opens a malicious EPS file (remote code execution; requires user interaction). Af...
CVE-2020-6334
SAP 3D Visual Enterprise Viewer, version - 9, allows a user to open manipulated SKP file received from untrusted sources which results in crashing of the application and becoming temporarily unavailable until the user restarts the application, this is caused due to Improper Input Validation...
CVE-2020-6335
SAP 3D Visual Enterprise Viewer 9 contains a vulnerability in the hpgl plugin that parses HPGL files. The issue arises from improper input validation leading to a write past the end of an allocated buffer (out-of-bounds write), enabling arbitrary code execution in the context of the affected proc...
Improper Input Validation Vulnerability in Multiple Siemens Products
The SPPA-S2000 simulates the automation component S7 of the nuclear DCS system SPPA-T2000.The SPPA-S3000 simulates the automation component of the DCS system SPPA-T3000.The SPPA-T3000 is a distributed control system for use in fossil and large renewable energy power plants. A security vulnerabili...
Security Bulletin: Multiple Security Vulnerabilities Affect IBM WebSphere Application Server in IBM Cloud
Summary There are multiple security vulnerabilities that affect the IBM WebSphere Application Server in the IBM Cloud. WebSphere Application Server traditional is vulnerable to a remote code execution vulnerability. WebSphere Application Server is vulnerable to a remote code execution...
resteasy: Improper validation of response header in MediaTypeHeaderDelegate.java class
A flaw was found in Resteasy, where an improper input validation results in returning an illegal header that integrates into the server's response. This flaw may result in an injection, which leads to unexpected behavior when the HTTP response is constructed...
GHSA-VPGC-7H78-GX8F personnummer/js vulnerable to Improper Input Validation
This vulnerability was reported to the personnummer team in June 2020. The slow response was due to locked ownership of some of the affected packages, which caused delays to update packages prior to disclosure. The vulnerability is determined to be low severity. Impact This vulnerability impacts...
The vulnerability of the Apache web server relates to improper input validation during page generation, allowing attackers to compromise data integrity.
The vulnerability of the Apache web server is related to improper input validation during the generation of web pages when attempts are made to access resources that violate privilege restrictions. Exploiting this vulnerability allows a remote attacker to compromise data integrity...
CVE-2020-24606
A flaw was found in squid. A denial of service attack is possible due to an improper input validation. The highest threat from this vulnerability is to system availability. Mitigation Add the no-digest option to all cachepeer lines in squid.conf...
Microsoft Azure Sphere uid_map UID uniqueness privilege escalation vulnerability
Summary A privilege escalation vulnerability exists in the uidmap functionality of Microsoft Azure Sphere 20.06. A specially crafted uidmap file can cause multiple applications to get the same UID assigned, thus broadening the attack surface. An attacker can modify the uidmap file to trigger this...
Improper Input Validation
Overview Affected versions of this package are vulnerable to Improper Input Validation. An issue was discovered in wolfSSL before 4.5.0. It mishandles the changecipherspec CCS message processing logic for TLS 1.3. If an attacker sends ChangeCipherSpec messages in a crafted way involving more than...
OX App Suite / OX Documents XSS / SSRF / Bypass
Dear subscribers, we're sharing our latest advisory with you and like to thank everyone who contributed in finding and solving those vulnerabilities. Feel free to join our bug bounty programs for OX App Suite, Dovecot and PowerDNS at HackerOne. Yours sincerely, Martin Heiland, Open-Xchange GmbH...
CVE-2020-4548
IBM Content Navigator 3.0.7 and 3.0.8 is vulnerable to improper input validation. A malicious administrator could bypass the user interface and send requests to the IBM Content Navigator server with illegal characters that could be stored in the IBM Content Navigator database. IBM X-Force ID:...
Parallels Desktop prl_hypervisor Improper Input Validation Information Disclosure Vulnerability
This vulnerability allows local attackers to disclose information on affected installations of Parallels Desktop. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the prlhypervisor...
CVE-2020-8208
Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scripting XSS...
Sql injection
Improper input validation in Citrix XenMobile Server 10.12 before RP3, Citrix XenMobile Server 10.11 before RP6, Citrix XenMobile Server 10.10 RP6 and Citrix XenMobile Server before 10.9 RP5 allows SQL Injection...
Cross site scripting
Improper input validation in Citrix XenMobile Server 10.12 before RP1, Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.11 before RP6 and Citrix XenMobile Server before 10.9 RP5 allows Cross-Site Scripting XSS...