7363 matches found
CVE-2023-48634
Adobe After Effects versions 24.0.3 and earlier and 23.6.0 and earlier are affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. Exploitation of this issue requires user interaction in that a victim must open a...
CVE-2023-48634
CVE-2023-48634 affects Adobe After Effects versions 24.0.3 and earlier and 23.6.0 and earlier. The vulnerability is an Improper Input Validation in After Effects’ file handling that could lead to arbitrary code execution in the context of the current user, with exploitation requiring user interac...
PT-2023-32636 · Unknown · Supermailer
Name of the Vulnerable Software and Affected Versions: Newsletter Software SuperMailer version 11.20.0.2204 Description: The issue is related to improper input validation, which can be exploited by sending a malicious configuration file with an SMB extension to a user via a link or email...
CVE-2023-46285
A vulnerability has been identified in Opcenter Execution Foundation All versions V2407, Opcenter Quality All versions V2312, SIMATIC PCS neo All versions V4.1, SINEC NMS All versions V2.0 SP1, Totally Integrated Automation Portal TIA Portal V14 All versions, Totally Integrated Automation Portal...
PT-2023-7656 · Adobe · Experience Manager
Name of the Vulnerable Software and Affected Versions: Adobe Experience Manager versions 6.5.18 and earlier Description: The issue is related to an Improper Input Validation vulnerability, which could allow a low-privileged attacker to achieve a low-integrity impact within the application...
Adobe After Effects < 23.6.2 / 24.0.0 < 24.1.0 Multiple Vulnerabilities (APSB23-75)
The version of Adobe After Effects installed on the remote Windows host is prior to 23.6.2, 24.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-75 advisory. - Adobe After Effects versions 24.0.3 and earlier and 23.6.0 and earlier are affected by an Improper...
Adobe After Effects < 23.6.2 / 24.0.0 < 24.1.0 Multiple Vulnerabilities (APSB23-75) (macOS)
The version of Adobe After Effects installed on the remote macOS host is prior to 23.6.2, 24.1.0. It is, therefore, affected by multiple vulnerabilities as referenced in the APSB23-75 advisory. - Adobe After Effects versions 24.0.3 and earlier and 23.6.0 and earlier are affected by an Improper...
CVE-2023-6185
Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to r...
CVE-2023-6185 Improper input validation enabling arbitrary Gstreamer pipeline injection
Improper Input Validation vulnerability in GStreamer integration of The Document Foundation LibreOffice allows an attacker to execute arbitrary GStreamer plugins. In affected versions the filename of the embedded video is not sufficiently escaped when passed to GStreamer enabling an attacker to r...
Google Pixel Buffer Error Vulnerability
Google Pixel is a smartphone from Google, Inc. in the United States. Google Pixel suffers from a security vulnerability that originates from gpupixelhandlebufferliveness in private/google-modules/gpu/malikbase/platform/pixel/pixelgpuslc.c updateioctl has improper input validation and may result i...
CVE-2023-5058
Improper Input Validation in the processing of user-supplied splash screen during system boot in Phoenix SecureCore™ Technology™ 4 potentially allows denial-of-service attacks or arbitrary code execution...
CVE-2023-5058
Phoenix SecureCore Technology 4 is affected by an improper input validation issue in the processing of user-supplied splash screens during system boot, which could allow denial-of-service or arbitrary code execution. Affected product: Phoenix SecureCore Technology 4 firmware. Root cause: improper...
CVE-2023-42916
A flaw was found in WebKitGTK. Processing malicious web content may cause an out-of-bounds read due to an improper input validation, resulting in sensitive content leaking...
CVE-2023-5188 WAGO Improper Input Validation in IEC61850 Server / Telecontrol
The MMS Interpreter of WagoAppRTU in versions below 1.4.6.0 which is used by the WAGO Telecontrol Configurator is vulnerable to malformed packets. An remote unauthenticated attacker could send specifically crafted packets that lead to a denial-of-service condition until restart of the affected...
CVE-2023-42565
Summary: CVE-2023-42565 affects Samsung Smart Clip prior to SMR Dec-2023 Release 1. The issue is an improper input validation vulnerability that enables local attackers with shell privileges to execute arbitrary code. The primary affected component is Smart Clip, with the root cause stated as inp...
VulnCheck KEV: CVE-2019-12987
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 3 of 6...
VulnCheck KEV: CVE-2019-12986
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 2 of 6...
VulnCheck KEV: CVE-2019-12985
Citrix SD-WAN 10.2.x before 10.2.3 and NetScaler SD-WAN 10.0.x before 10.0.8 have Improper Input Validation issue 1 of 6...
CVE-2023-40097
In hasPermissionForActivity of PackageManagerHelper.java, there is a possible URI grant due to improper input validation. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation...
Out-of-bounds
In MMUUnmapPages of mmucommon.c, there is a possible out of bounds read due to improper input validation. This could lead to local escalation of privilege in the kernel with no additional execution privileges needed. User interaction is not needed for exploitation...