7423 matches found
GHSA-CGWF-W82Q-5JRR Apache Commons Compress denial of service vulnerability
Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...
Apache Commons Compress denial of service vulnerability
Improper Input Validation, Uncontrolled Resource Consumption vulnerability in Apache Commons Compress in TAR parsing.This issue affects Apache Commons Compress: from 1.22 before 1.24.0. Users are recommended to upgrade to version 1.24.0, which fixes the issue. A third party can create a malformed...
Improper input validation leads to arbitrary file deletion
Description The /process endpoint of the python API in collector/api.py exposes an endpoint waiting for a POST request with a parameter named filename : py @api.route"/process", methods="POST" def processfile: content = request.json targetfilename = content.get"filename" printf"Processing...
CVE-2023-3710
Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 e.g. P10.19.050006...
CVE-2023-3710 Printer web page invalid command execution
Improper Input Validation vulnerability in Honeywell PM43 on 32 bit, ARM Printer web page modules allows Command Injection.This issue affects PM43 versions prior to P10.19.050004. Update to the latest available firmware version of the respective printers to version MR19.5 e.g. P10.19.050006...
CVE-2023-3710
The CVE-2023-3710 entry affects Honeywell PM43 printers (32‑bit ARM) and is due to Improper Input Validation in the printer web page modules, enabling Command Injection. Affected versions are PM43 before P10.19.050004; mitigation is to update to MR19.5 (e.g., P10.19.050006) or later firmware that...
CVE-2022-24093
Summary: CVE-2022-24093 affects Adobe Commerce and Magento Open Source, with an improper input validation vulnerability that could enable post-authentication arbitrary code execution. Affected versions (per sources): Adobe Commerce 2.4.3-p1 and earlier; 2.3.7-p2 and earlier (and related 2.x lines...
CVE-2022-48474
Control de Ciber, version 1.650, is affected by a Denial of Service via the version function. An unauthenticated remote attacker can craft a malicious request that makes the server check if an unrecognized component is up to date, causing a memory failure and crashing the process. Several sources...
Improper Input Validation
apache-superset is vulnerable to Improper Input Validation. The vulnerability allows an attacker to trick a user into potentially registering a SQLite database connection incorrectly if an attacker employs alternative driver names such as sqlite+pysqlite or utilizes database imports. This...
Improper Input Validation
trafficserver is vulnerable to Improper Input Validation. This vulnerability allows an attacker to cause a denial-of-service DoS attack by sending a specially crafted HTTP request...
Security Bulletin: There is a vulnerability in Apache Kafka used by IBM Maximo Asset Management (CVE-2022-34917)
Summary There is a vulnerability in Apache Kafka used by IBM Maximo Asset Management. Vulnerability Details CVEID:CVE-2022-34917 DESCRIPTION: Apache Kafka is vulnerable to a denial of service, caused by improper input validation. By sending a specially-crafted request, a remote attacker could...
Exploit for Improper Input Validation in Redhat Keycloak
CVE-2021-3754 This repository documents Vulnerability details...
Oracle Linux 8 : binutils (ELSA-2020-1797)
The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2020-1797 advisory. 2.30-73.0.1 - Forward-port of Oracle patches from 2.30-68.0.2. - Reviewed-by: Elena Zannoni 2.30-68.0.2 - Backport the non-cycle-detecting-capable...
CVE-2023-20263
CVE-2023-20263 affects Cisco HyperFlex HX Data Platform, specifically the web-based management interface. The issue arises from improper input validation of HTTP request parameters, enabling an unauthenticated, remote attacker to persuade a user to click a crafted link and potentially redirect th...
GHSA-FM4Q-J8G4-C9J4 Apache Superset Improper Input Validation vulnerability
Apache Superset would allow for SQLite database connections to be incorrectly registered when an attacker uses alternative driver names like sqlite+pysqlite or by using database imports. This could allow for unexpected file creation on Superset webservers. Additionally, if Apache Superset is usin...
CVE-2021-36021
Magento versions 2.4.2 and earlier, 2.4.2-p1 and earlier and 2.3.7 and earlier are affected by an Improper input validation vulnerability within the CMS page scheduled update feature. An authenticated attacker with administrative privilege could leverage this vulnerability to achieve remote code...
CVE-2023-30723
CVE-2023-30723 affects Samsung Health prior to version 6.24.2.011. The vulnerability arises from improper input validation, enabling attackers to write arbitrary files with Samsung Health privileges. Affected software: Samsung Health (Samsung). Root cause: input validation flaw. Impact: potential...
CVE-2023-30723
Improper input validation vulnerability in Samsung Health prior to version 6.24.2.011 allows attackers to write arbitrary file with Samsung Health privilege...
CVE-2023-30712
The CVE-2023-30712 vulnerability is reported for Samsung Mobile devices, arising from improper input validation in Settings Suggestions before SMR Sep-2023 Release 1. It allows an attacker with local access to trigger arbitrary activity via the Settings Suggestions component (root cause: input va...