CVE-2024-21544

CVE-2024-21544 affects spatie/browsershot <= 5.0.1 due to improper URL validation in setUrl; leading whitespace before file:// can cause Local File Inclusion. CVE-2024-21549 (browsershot

SUSE SLES15 Security Update : buildah (SUSE-SU-2024:4303-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has a package installed that is affected by multiple vulnerabilities as referenced in the SUSE-SU-2024:4303-1 advisory. Security issues fixed: - CVE-2024-9675: cache arbitrary directory mount bsc1231499 - CVE-2024-9407: Improper Input Validation in...

National Instruments LabVIEW < 2024 Q3 Patch 2 Multiple Vulnerabilities

The version of National Instruments LabVIEW installed on the remote host is prior to 2022 Q3 Patch 4, 2023 Q3 Patch 5, or 2024 Q3 Patch 2. It is, therefore, affected by multiple vulnerabilities as referenced in the 2024Q3P2 advisory. - An out of bounds read due to improper input validation in...

CVE-2024-47238

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

CVE-2024-47238

CVE-2024-47238 affects Dell Client Platform BIOS. Vulnerability: Improper Input Validation in an externally developed component. Attack scenario: a high-privilege attacker with local access could potentially execute arbitrary code. Documents indicate the issue involves a local attacker, with high...

CVE-2024-47238

Dell Client Platform BIOS contains an Improper Input Validation vulnerability in an externally developed component. A high privileged attacker with local access could potentially exploit this vulnerability, leading to arbitrary code execution...

PT-2024-35478 · Ibm · Ibm Infosphere Information Server

Name of the Vulnerable Software and Affected Versions: IBM InfoSphere Information Server version 11.7 Description: The issue is related to improper input validation, which could cause the GUI to not load or stop working for an authenticated user. Recommendations: For IBM InfoSphere Information...

Improper Input Validation

Overview spatie/browsershot is a library for converting a webpage to an image or pdf using headless Chrome. Affected versions of this package are vulnerable to Improper Input Validation due to improper URL validation in the setUrl method. An attacker can exploit this vulnerability by using leadin...

Improper Input Validation

Overview spatie/browsershot is a library for converting a webpage to an image or pdf using headless Chrome. Affected versions of this package are vulnerable to Improper Input Validation in the setHtml function, invoked by Browsershot::html, which can be bypassed by omitting the slashes in the fil...

CVE-2024-11737

CWE-20: Improper Input Validation vulnerability exists that could lead to a denial of service and a loss of confidentiality, integrity of the controller when an unauthenticated crafted Modbus packet is sent to the device...

Improper Input Validation

Overview sigstore is an A tool for signing Python package distributions Affected versions of this package are vulnerable to Improper Input Validation due to the integration time verification process. An attacker can induce a Denial of Service by modifying the integration timestamp within a bundle...

CVE-2024-52831

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...

CVE-2024-43755

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...

CVE-2024-52831 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...

CVE-2024-52831

Adobe Experience Manager (AEM) versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability (CWE-20) that could bypass security features. Exploitation requires user interaction and could affect page integrity with low privileges. CVSS v3.1 base score 3.5 (LOW). Adobe has...

CVE-2024-43755

CVE-2024-43755 affects Adobe Experience Manager 6.5.21 and earlier. Described as an Improper Input Validation vulnerability that can bypass security features and impact page integrity; exploitation requires user interaction. Adobe published APSB24-69 with updates to address multiple vulnerabiliti...

CVE-2024-43755 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...

CVE-2024-43755 Adobe Experience Manager | Improper Input Validation (CWE-20)

Adobe Experience Manager versions 6.5.21 and earlier are affected by an Improper Input Validation vulnerability that could result in a security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and affect the integrity of the page. Exploitatio...

CVE-2024-52982

Animate versions 23.0.8, 24.0.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...

CVE-2024-52982

Animate versions 23.0.8, 24.0.5 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a malicious file...