CVE-2023-34440

CVE-2023-34440 concerns Intel processors where improper input validation in UEFI firmware may let a local, privileged user escalate privileges. The connected documents consistently describe the vulnerability as a UEFI firmware issue affecting some Intel CPUs, with local-access impact and privileg...

CVE-2023-43758

Improper input validation in UEFI firmware for some IntelR processors may allow a privileged user to potentially enable escalation of privilege via local access...

CVE-2024-31153

Improper input validation for some IntelR QuickAssist Technology software before version 2.2.0 may allow an authenticated user to potentially enable denial of service via local access...

CVE-2025-26358

A CWE-15 "External Control of System or Configuration Setting" in ldbMT.so in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to modify system configuration via crafted HTTP requests...

CVE-2025-26358

A CWE-15 "External Control of System or Configuration Setting" in ldbMT.so in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to modify system configuration via crafted HTTP requests...

CVE-2025-26358

CVE-2025-26358 concerns an external control of system configuration via the Q-Free MaxTime software. The vulnerability lies in the ldbMT.so module (

CVE-2025-26358

A CWE-15 "External Control of System or Configuration Setting" in ldbMT.so in Q-Free MaxTime less than or equal to version 2.11.0 allows an authenticated remote attacker to modify system configuration via crafted HTTP requests...

CVE-2024-0112

NVIDIA Jetson AGX Orin™ and NVIDIA IGX Orin software contain a vulnerability where an attacker can cause an improper input validation issue by escalating certain permissions to a limited degree. A successful exploit of this vulnerability might lead to code execution, denial of service, data...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39947)

A vulnerability has been found in Dahua products.After obtaining the ordinary user's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39945)

A vulnerability has been found in Dahua products. After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit...

WordPress plugin Global Gallery 代码注入漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.WordPress plugin is an application plugin. A code injection vulnerability exists in...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39946)

A vulnerability has been found in Dahua products.After obtaining the administrator's username and password, the attacker can send a carefully crafted data packet to the interface with vulnerabilities, causing device initialization. This plugin only works with Tenable.ot. Please visit...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39949)

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

Dahua Security Network Video Recorders Improper Input Validation (CVE-2024-39948)

A vulnerability has been found in Dahua products. Attackers can send carefully crafted data packets to the interface with vulnerabilities, causing the device to crash. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information...

CVE-2024-0112

CVE-2024-0112 affects NVIDIA Jetson AGX Orin and NVIDIA IGX Orin; the issue is an input validation failure that can let an attacker escalate permissions and potentially cause code execution, denial of service, data corruption, information disclosure, or privilege escalation. NVIDIA’s security bul...

CVE-2023-31342

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution...

CVE-2023-31342

Improper input validation in the SMM handler may allow a privileged attacker to overwrite SMRAM, potentially leading to arbitrary code execution...

CVE-2025-21126

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service...

CVE-2025-21126

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service...

CVE-2025-21126 InDesign Desktop | Improper Input Validation (CWE-20)

InDesign Desktop versions ID20.0, ID19.5.1 and earlier are affected by an Improper Input Validation vulnerability that could result in an application denial-of-service condition. An attacker could exploit this vulnerability to cause the application to crash, resulting in a denial of service...